Privacy notice
Privacy notice
This notice explains what JTM Census reads from the public Companies House register, what it keeps, why, for how long, and what you can do about it. It's written for the owners and directors of the companies we measure, and for anyone visiting this site.
Who is the controller?
JTM Chilton Ltd, trading as JTM Census, is the controller. It's registered in England and Wales, company number 16473640, with its registered office at Suite A, 82 James Carter Road, Mildenhall, IP28 7DE. JTM Chilton Ltd also trades as JTM Workplace, and is registered with the Information Commissioner's Office under reference ZC252128.
Contact: hello@jtmcensus.co.uk. Email is the only way to reach us. There's no phone line and no contact form.
Your right to object
You can object at any time, and you don't need to give a reason. Email hello@jtmcensus.co.uk naming the company. Everything stops, permanently: the flag is removed, nothing more is sent, and the company goes on a suppression list that is shared across JTM Census and JTM Workplace, so neither trading name writes to it again. The only thing we then keep is the suppression record itself, which is what stops us.
Where does the information come from?
The public Companies House register, including the register of persons with significant control. For each director and each person with significant control, the register shows a month and year of birth. It never shows the day. We also read the register's record of who the current directors and individual owners are, and the latest electronic accounts for average headcount.
What personal data do we read, and what's the test?
From the register we read:
- the month and year of birth of directors and persons with significant control;
- names as they appear on the register, read to apply the test and not kept.
The test is this: a controlling owner aged 60 or over, and no current director or individual owner under 50. A company either meets it or doesn't.
If we write to a company, we also hold:
- The generic work email address the company publishes on its own website, and the page it came from.
- A record of what we sent.
- Your reply, which may include what you tell us about your plans.
- On objection, a suppression record.
What do we keep?
Against each company, one flag, yes or no, recording whether it meets the test. No birth date, age or name is kept.
Why do we use it, and on what basis?
Our lawful basis is legitimate interests. Our legitimate interest is a commercial one: finding owners who may want to sell their company, and earning a fee from buyers when an introduction is made. For the owner, the introduction is free and confidential. We also have an interest in finding capable suppliers for manufacturers short of capacity. Ask and we'll send you a copy of our assessment.
Working out the flag is profiling. Information about individuals on the register is used to work out something about a company. It's used only to decide whether a company might be written to, or introduced, and for nothing else.
Business contact details
To write to a company we use the work email address the company publishes on its own website, and we record the page it came from. Only generic role addresses are kept, such as info@ or sales@, never a named person's.
What do we send, and to whom?
We send one email to the address a company publishes on its own website. It asks whether the owner has thought about stepping back, and offers a free, confidential introduction to buyers, with any fee paid by the buyer. We don't follow it up unless you ask us to. If you tell us 'maybe in the next few years', we'll check in once a year until you tell us to stop.
We only write to companies and LLPs, never to sole traders or partnerships.
Confidentiality
Nothing about a company or its owner goes to any buyer without the owner's written yes, recorded and dated.
How long do we keep it?
- The flag is refreshed monthly from the register.
- It's removed at the first refresh where the test is no longer met, at once on objection, or 12 months after it was last confirmed, whichever comes first.
- A record of an email with no reply is kept for 12 months.
- If you reply 'maybe in the next few years': kept for the yearly check-in until you tell us to stop.
- If you reply that you're open to a conversation: kept for the life of the introduction, then 12 months.
- On objection, only the suppression record is kept.
Who else handles it?
When an owner says yes to a conversation, we pass their reply to the buyer they're being introduced to, because that's what they've asked for. Otherwise, information is handled only by these processors, each acting on our instructions:
- Google, for our email and for business listings used to find a company's website.
- Supabase, whose database holds our records in London.
- Cloudflare, which hosts this website.
- Railway, which hosts our software.
- Anthropic, whose software reads public pages of company websites to judge what they make.
Google and Anthropic may handle data in the United States, and the companies that run our database and hosting may reach it from abroad to support it, under the safeguards in their data processing terms. Ask and we'll tell you which safeguard applies and send you a copy.
Your rights
- Access. Ask what we hold and we'll tell you.
- Rectification. If something is wrong, we'll correct it.
- Erasure. Ask and we'll delete what we hold, within the limits the law sets.
- Restriction. Ask and we'll stop using it while a question about it is settled.
- Objection. Set out above. It stops everything, permanently.
- Complaint. You can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
To use any of these, email hello@jtmcensus.co.uk. We'll respond within one month.
Visitors to this website
This site sets no cookies, runs no analytics and has no forms, so it collects nothing from you itself. The opt-out page asks you to send an email, which goes to our mailbox at Google and nowhere else. The site is hosted by Cloudflare, which keeps its standard server logs of requests, such as the address a request came from, the page asked for and the time, for the security and running of its service under its own terms.
Effective date
30 October 2026. If this notice changes, the new version is published here with its date.