Last updated: 24 October 2026

Who we are

SJ Group International Limited ("SJ Group", "we", "us") is a security, risk and crisis management consultancy. We are registered in England and Wales, company number 12990787, and our registered office is Level 18, 40 Bank Street, Canary Wharf, London E14 5NR. We are the data controller for the personal information described in this policy. ICO registration number: ZC014080.

If you have any questions about this policy or how we handle your information, please email office@sjgroupinternational.com or call +44 (0)20 8050 2939.

Our approach

Discretion is at the heart of what we do. We collect only what we need, we never sell personal information, and we share it only where it's needed to help you, or where the law requires it.

What we collect and why

When you contact us through our website, by email or by phone, we collect your name, organisation, email address, phone number and anything you choose to tell us. We use this to respond to your enquiry and, if you ask us to, to help with your situation. Our lawful basis is our legitimate interest in responding to enquiries, or taking steps at your request before entering into a contract.

When you become a client, we collect the information needed to deliver our services, which may include contact details, identity documents, financial information, details of your circumstances, and correspondence. Because of the nature of our work, this can sometimes include sensitive information, such as information about your health, safety or family. We use it only to deliver the service you've asked for. Our lawful bases are performance of our contract with you, compliance with legal obligations, and, for sensitive information, the conditions allowed under UK data protection law (for example, where it's needed to protect someone's vital interests, or to establish or defend legal claims).

When you use our Readiness Check, your answers are processed in your browser to give you your result, and we never see or store your answers. If you choose to ask for our Readiness Briefs at the end, we collect your email address, your first name if you give it, your score and your focus areas, but never your individual answers. We use these only to send you your briefs, because you asked us to. If you also tick the box to receive occasional readiness insights, we use your email for that too, based on your consent, which you can withdraw at any time.

When you use our client portal, we process your login details and the information you and we add to it, so we can share documents and updates with you securely.

When you visit our website, we and our website provider (Wix) use cookies and similar technologies. Some are essential to make the site work. Others, such as Google Analytics, help us understand how visitors use the site, and we only use these with your consent. See the Cookies section below.

Marketing. If you are a client or have been in touch with us, we may occasionally send you updates or insights we think are relevant, such as our newsletter. You can opt out at any time by replying or using the unsubscribe link.

Who we share it with

We only share your information where it's needed, for example with:

Our consultants and associates working on your matter, all bound by confidentiality
Trusted service providers who help us run the business, such as Microsoft 365 (email and documents), Wix (website), HubSpot (client contacts), Xero (accounts), Notion (internal records) and the hosting providers for our client portal and Readiness Check
Your other advisers, such as your lawyers, insurers or security providers, where you ask us to work with them
Law enforcement, regulators or courts, where the law requires it or it's needed to protect someone's safety

We never sell your personal information.

International transfers

Some of our service providers may process information outside the UK. Where they do, we make sure appropriate safeguards are in place, such as UK adequacy regulations or the UK International Data Transfer Agreement or Addendum.

How long we keep it

Enquiries and Readiness Brief requests that don't lead to work: up to 2 years, then deleted
Client records: for 6 years after our work ends, in line with legal and tax requirements, then securely deleted
Website analytics data: in line with Google Analytics retention settings, 14 months

How we protect it

We use access controls, multifactor authentication, encryption and secure systems, and we limit access to people who need it. We hold Cyber Essentials certification.

Your rights

You have the right to ask for a copy of your information, to have it corrected or deleted, to restrict or object to how we use it, to have it moved to another organisation, and to withdraw consent at any time where we rely on it. To use any of these rights, email office@sjgroupinternational.com. We will respond within one month.

If you're unhappy with how we've handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113).

Cookies are small files stored on your device when you visit a website.

Essential cookies are set by Wix to make the site work and keep it secure. These don't need consent
Analytics cookies (Google Analytics) tell us which pages are visited and how people find us. We only set these if you agree through our cookie banner

You can change your choice at any time through the cookie settings link at the bottom of our website, or by clearing cookies in your browser.

Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.