Privacy notice

Who is the controller?

JTM Chilton Ltd, trading as JTM Census, is the controller. It's registered in England and Wales, company number 16473640, with its registered office at Suite A, 82 James Carter Road, Mildenhall, IP28 7DE. JTM Chilton Ltd also trades as JTM Workplace, and is registered with the Information Commissioner's Office under reference ZC252128.

Contact: [email protected]. Email is the only way to reach us. There's no phone line and no contact form.

Your right to object

You can object at any time, and you don't need to give a reason. Email [email protected] naming the company. Everything stops, permanently: the flag is removed, nothing more is sent, and the company goes on a suppression list that is shared across JTM Census and JTM Workplace, so neither trading name writes to it again. The only thing we then keep is the suppression record itself, which is what stops us.

Where does the information come from?

The public Companies House register, including the register of persons with significant control. For each director and each person with significant control, the register shows a month and year of birth. It never shows the day. We also read the register's record of who the current directors and individual owners are, and the latest electronic accounts for average headcount.

What personal data do we read, and what's the test?

From the register we read:

• the month and year of birth of directors and persons with significant control;
• names as they appear on the register, read to apply the test and not kept.

The test is this: a controlling owner aged 60 or over, and no current director or individual owner under 50. A company either meets it or doesn't.

If we write to a company, we also hold:

• The generic work email address the company publishes on its own website, and the page it came from.
• A record of what we sent.
• Your reply, which may include what you tell us about your plans.
• On objection, a suppression record.

What do we keep?

Against each company, one flag, yes or no, recording whether it meets the test. No birth date, age or name is kept.

Why do we use it, and on what basis?

Our lawful basis is legitimate interests. Our interests are commercial: selling company data built from public registers to people and companies who buy or advise businesses, publishing counts of companies, and finding owners who may want to talk about their plans. We also have an interest in finding capable suppliers for manufacturers short of capacity. Ask and we'll send you a copy of our assessments.

Working out the flag is profiling: information about individuals on the register is used to work out something about a company. We use the flag for three things only: to decide whether we might write to a company; to publish counts of companies, where no count below 10 is published and no company or person is named; and in the company lists described below. It's never used to make a decision about anyone.

Who receives company lists?

Subscribers receive lists of companies for the sectors and regions they choose. Each row is about a company: its name, number, registered office, sector, size, ownership type, whether it owns its premises, its own published general email address and website, and whether it meets the test, with the date of the register snapshot. No list shows anyone's name, age or date of birth, and a company with one officer and no more than one employee never shows the flag. Subscribers agree in writing to use a list only to approach companies about buying, investing in or advising them, never to mention anyone's age or why a company was chosen, and to delete a company within 10 working days when we tell them it has objected. To keep your company out of every list, email us naming the company.

Business contact details

To write to a company we use the work email address the company publishes on its own website, and we record the page it came from. Only generic role addresses are kept, such as info@ or sales@, never a named person's.

What do we send, and to whom?

We send one email to the address a company publishes on its own website. It asks whether the owner has thought about stepping back, and offers a free, confidential introduction to buyers. We don't follow it up unless you ask us to. If you tell us 'maybe in the next few years', we'll check in once a year until you tell us to stop.

We only write to companies and LLPs, never to sole traders or partnerships.

Confidentiality

Your replies to us are confidential. Nothing you tell us, and no detail about you, goes to a buyer without your written yes, recorded and dated. The company lists described above carry only the flag and company details.

How long do we keep it?

• The flag is refreshed monthly from the register.
• It's removed at the first refresh where the test is no longer met, at once on objection, or 12 months after it was last confirmed, whichever comes first.
• A record of an email with no reply is kept for 12 months.
• If you reply 'maybe in the next few years': kept for the yearly check-in until you tell us to stop.
• If you reply that you're open to a conversation: kept for the life of the introduction, then 12 months.
• On objection, only the suppression record is kept.

Who else handles it?

When an owner says yes to a conversation, we pass their reply to the buyer they're being introduced to, because that's what they've asked for. Otherwise, information is handled only by these processors, each acting on our instructions:

• Subscribers, as described above. Each becomes a separate controller of the list it receives.
• Google, for our email and for business listings used to find a company's website.
• Supabase, whose database holds our records in London.
• Cloudflare, which hosts this website.
• Railway, which hosts our software.
• Anthropic, whose software reads public pages of company websites to judge what they make.

Google and Anthropic may handle data in the United States, and the companies that run our database and hosting may reach it from abroad to support it, under the safeguards in their data processing terms. Ask and we'll tell you which safeguard applies and send you a copy.

Your rights

• Access. Ask what we hold and we'll tell you.
• Rectification. If something is wrong, we'll correct it.
• Erasure. Ask and we'll delete what we hold, within the limits the law sets.
• Restriction. Ask and we'll stop using it while a question about it is settled.
• Objection. Set out above. It stops everything, permanently.
• Complaint. You can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

To use any of these, email [email protected]. We'll respond within one month.

Visitors to this website

This site sets no cookies, runs no analytics and has no forms, so it collects nothing from you itself. The opt-out page asks you to send an email, which goes to our mailbox at Google and nowhere else. The site is hosted by Cloudflare, which keeps its standard server logs of requests, such as the address a request came from, the page asked for and the time, for the security and running of its service under its own terms.