Privacy notice

1. Who this notice covers

This notice explains how JH Stat handles personal information collected through the website jhstat.co.uk and through enquiries made to JH Stat.

JH Stat is the trading name under which Jamal Hossain provides independent statistical consultancy, research collaboration and training. JH Stat is the data controller for the information described in this notice.

JH Stat is not a registered limited company. Enquiries about this notice should be sent to [email protected].

2. What information may be collected

This website is deliberately minimal. It is a set of static pages. It does not run accounts, logins, comment systems, shopping facilities or newsletters, and it does not require you to provide any information in order to read it.

The only personal information JH Stat holds about you is information you choose to send:

• Information in your enquiry — typically your name, organisation, email address, the type of support you are looking for, your description of the project and your timescale.
• Subsequent correspondence — emails, meeting notes and documents exchanged while discussing or carrying out work.
• Contract and invoicing information — where an engagement proceeds, the details needed to raise an invoice and keep proper financial records.

Technical information is also processed by the website host in the ordinary course of serving the pages — see section 5.

3. Contact enquiries

The enquiry form on the contact page is a mailto form. It does not transmit anything by itself. When you complete it and press the button, the details you typed are placed into a draft message in your own email application. Nothing reaches JH Stat, and nothing is stored anywhere, unless and until you choose to send that message yourself.

There is no form-processing service, no database and no third-party form provider behind the website. Your enquiry, once sent, is simply an email.

Email sent to [email protected] is received and stored in JH Stat's email system. It is used to reply to you, to prepare a proposal where relevant, and to keep a record of the discussion. It is not used for marketing, and it is not sold, rented or shared with third parties for their own purposes.

Please do not include patient-identifiable data, participant data or other confidential research material in an initial enquiry. Where an engagement proceeds, an appropriate data-sharing or non-disclosure agreement and a secure transfer route will be agreed first.

4. Lawful basis for processing

Under the UK GDPR, JH Stat relies on the following lawful bases:

• Legitimate interests — responding to an enquiry you have chosen to send, and maintaining ordinary business correspondence. The interest is straightforward: you asked a question and expect an answer.
• Performance of a contract — where you engage JH Stat, processing necessary to deliver the agreed work.
• Legal obligation — retaining financial records for the period required by UK tax law.

5. Website hosting

This website is hosted on Cloudflare Pages, a service provided by Cloudflare, Inc. Files are served from Cloudflare's global network.

As with any website, the host processes technical information as part of delivering the pages to your browser. This typically includes IP addresses, the pages requested, the time of the request, and basic browser and device information, and it is used for security, abuse prevention and reliability. This processing is carried out by Cloudflare, not by JH Stat, and JH Stat does not receive individual-level server logs or visitor identities from it.

Cloudflare operates internationally, so serving the site may involve processing outside the United Kingdom. Cloudflare publishes its own privacy documentation describing how it handles this data and the safeguards it applies to international transfers.

The site is served over HTTPS, so traffic between your browser and the site is encrypted.

6. Cookies

This website does not set any cookies. There are no analytics cookies, no advertising cookies, no social media cookies and no preference cookies. Because no cookies are set, no cookie banner is shown — one would serve no purpose.

The site also loads no third-party fonts, scripts, embeds, maps, videos or chat widgets. The only files your browser requests are the HTML, CSS, JavaScript and images served from jhstat.co.uk itself. The small amount of JavaScript on the site runs entirely in your browser, sends nothing anywhere, and stores nothing on your device.

Cloudflare may, as part of providing security and network services, set a strictly necessary cookie in certain circumstances — for example when protecting the site against automated abuse. Such cookies are used to keep the site available and secure, not to track visitors or build profiles.

7. Analytics

No analytics are currently in use on this website. There is no Google Analytics, no tag manager, no pixel and no third-party tracking of any kind. JH Stat does not know who visits the site, which pages they read, or where they came from.

Cloudflare provides the site owner with aggregated, anonymous traffic statistics as part of the hosting service — for example total page views over a period. These are aggregate counts only and cannot be used to identify an individual visitor.

If privacy-respecting analytics are introduced in future, this notice will be updated before or at the point they go live, stating clearly what is collected, by whom, and on what basis.

8. Research data provided by clients

Where a client engages JH Stat to analyse research data, that data is handled under the terms of a separate written agreement — typically a contract, data-sharing agreement or non-disclosure agreement — and, where relevant, under the client's own information governance framework.

In those engagements the client organisation is normally the data controller and JH Stat acts as a data processor on its instructions. Wherever possible, work is carried out on de-identified data or within the client's own secure environment. Research participants with questions about a specific study should contact the organisation running that study, which will hold the relevant participant information sheet and privacy notice.

This website plays no part in that processing.

9. Data retention

Information is kept only as long as there is a reason to keep it:

• Enquiries that do not lead to work — normally deleted within 12 months.
• Correspondence relating to an engagement — normally retained for up to 6 years after the engagement ends, reflecting professional and contractual record-keeping needs.
• Financial and invoicing records — retained for at least 6 years, as required by UK tax law.
• Client research data — retained, returned or securely destroyed in line with the specific agreement covering that engagement, which takes precedence over the periods above.

10. Your rights

Under UK data protection law you have the right to:

• Be informed about how your personal data is used — the purpose of this notice.
• Access the personal data held about you.
• Rectification — have inaccurate personal data corrected.
• Erasure — ask for your personal data to be deleted, where no overriding legal or contractual reason to keep it applies.
• Restrict processing in certain circumstances.
• Data portability in certain circumstances.
• Object to processing carried out on the basis of legitimate interests.
• Not be subject to solely automated decision-making producing legal or similarly significant effects. JH Stat does not carry out any such automated decision-making.

To exercise any of these rights, email [email protected]. Requests are responded to within one month. There is no charge, except where a request is manifestly unfounded or excessive.

Where JH Stat is acting as a processor for a client organisation, requests relating to that study's data will be passed to the client organisation as controller.

11. Complaints and contact details

If you have a question or concern about how JH Stat handles personal information, please email [email protected] in the first instance. Concerns are taken seriously and answered directly.

If you are not satisfied with the response, you have the right to complain to the Information Commissioner's Office (ICO), the UK's independent regulator for data protection:

• Website: ico.org.uk/make-a-complaint
• Helpline: 0303 123 1113

Contact for data protection matters:
JH Stat
Email: [email protected]
Location: United Kingdom

ICO registration. Many organisations that process personal data are required to register with the ICO and pay a data protection fee, although some small-scale processing is exempt. JH Stat's position is being confirmed, and no claim of registration is made on this page. If registration applies, the registration number will be published here.

12. Changes to this notice

This notice will be updated whenever the way JH Stat handles personal information changes — for example if a form provider or analytics tool is introduced. The date at the top of the page shows when it was last revised.

This notice is provided for information and does not constitute legal advice. If your organisation requires a specific contractual data protection position, that is agreed in the engagement documentation rather than here.