Privacy & data.

Last updated: May 2026.

This page explains how Johansson Solutions Ltd ("JSL", "we", "our") handles personal data, both data we collect through this website, and data we process on behalf of clients.

1. Who we are

Johansson Solutions Ltd is a private limited company registered in England & Wales (company number 12170822) with registered office at 86–90 Paul Street, London, EC2A 4NE.

For all data-protection enquiries, please contact us at info@johansson.ltd.

2. Data we collect via this website

If you contact us through the enquiry form or by email, we collect the information you provide, typically your name, email address, organisation, and the message you send. We do not use third-party tracking or advertising cookies. This site sets no cookies beyond what is strictly necessary to render the page.

3. Why we hold that data, and our lawful basis

We hold enquiry data for one purpose: to respond to you and, where you wish to engage us, to scope and deliver work. Our lawful basis is legitimate interest (responding to a business enquiry you have initiated) under Article 6(1)(f) UK GDPR. If we go on to enter a contract with you, our lawful basis becomes contract performance under Article 6(1)(b).

4. How long we keep it

Enquiry correspondence is retained for up to 24 months from last contact, unless it forms part of an active or completed client engagement, in which case standard commercial and accounting retention applies (typically 7 years from end of engagement, in line with UK statutory record-keeping requirements).

5. Sharing

We do not sell or share enquiry data with third parties for marketing. We use trusted operational suppliers (such as our email provider and form-handling service) under appropriate data-processing agreements; these process data on our instructions only.

6. Data we process on behalf of clients

In most client engagements, JSL acts as a data processor on behalf of the client, who is the data controller. We process only what is necessary to deliver the analytics our client has commissioned, under a written data-processing agreement that sets out scope, purpose, security measures, sub-processors, and retention.

Our default posture for video analytics work is described on our Responsible AI page: aggregated, anonymous outputs by design; no identification of individuals; data minimisation at every stage.

7. Your rights

Where we hold personal data about you, you have rights under UK GDPR including the right to access, rectification, erasure, restriction, objection, and (where applicable) portability. To exercise any of these, please contact us at info@johansson.ltd. We will respond within one month.

If you are unhappy with how we have handled your data, you have the right to complain to the UK Information Commissioner's Office at ico.org.uk.

8. Security

We apply proportionate technical and organisational measures to protect personal data, including access control, encryption in transit, secure hosting, and routine backup. For client engagements involving CCTV or other sensitive data, security measures are agreed in writing per project.

9. Changes to this policy

If we change this policy, we will update the "last updated" date above. Material changes affecting how we handle existing personal data will be communicated directly to relevant parties.