Your data, in plain English.

Who is responsible for your data

Jaha Digital is the trading name of Jamie Harmes, a sole trader based in Cambridgeshire, United Kingdom. Jamie Harmes is the data controller for the personal data described on this page, which means deciding how it is used and being responsible for looking after it.

If you have any question about your data, email hello@jahadigital.com. You will always deal with Jamie directly.

What is collected

When you send an enquiry

The contact form asks for:

• your name and email address
• your business name and website, if you choose to give them
• which services you are interested in
• your message

If you email directly, your email address and anything you include in your message are received. If you phone, your phone number is seen and a note is kept of what is discussed if it relates to your enquiry.

When you book a call

If you book a discovery call through the booking page, your name, email address, the time you choose and any answers you give when booking are received.

When you visit the website

Like almost every website, the servers that deliver these pages record technical details such as your IP address, browser type and the pages you requested. This happens automatically and is used to keep the site running and secure.

If you accept analytics cookies, Google Analytics records how you use the site, such as the pages you visit, how long you stay and how you found the site. It does not reveal who you are. HubSpot records the pages you visit in the same way and, if you then send an enquiry, links those visits to your enquiry. If you reject them, or do not choose, neither Google Analytics nor HubSpot loads. There are no advertising trackers, and you are not tracked across other websites. The cookie policy has the details.

Why it is used

• To reply to your enquiry and, if you want to go ahead, to arrange a discovery call and prepare a proposal. The legal basis is taking steps at your request before entering into a contract, and the legitimate interest in responding to people who get in touch.
• To deliver work if you become a client. The legal basis is performing the contract with you.
• To keep business records such as invoices. The legal basis is the legal obligation to keep financial records.
• To keep this website working and secure. The legal basis is the legitimate interest in running a safe, reliable website.
• To understand how the website is used, so it can be improved, but only if you accept analytics cookies. The legal basis is your consent, which you can withdraw at any time using Cookie settings at the bottom of every page.

You will not be added to a mailing list, and your data is never sold or shared with anyone for their own marketing.

Who else handles your data

A small number of trusted services are used to run this website and the business. They only handle your data to provide their service to Jaha Digital:

• Cloudflare hosts this website, runs its domain name system (DNS) and processes the technical visit data described above.
• Formspree receives contact form submissions, filters spam and forwards them to the Jaha Digital inbox. It keeps a copy of each submission in the Jaha Digital account.
• HubSpot is the customer relationship manager (CRM) where enquiries, bookings and client details are recorded and emails with you are logged. If you accept analytics cookies, it also records how you use the website. Its data is stored in the EU.
• Cal.com runs the booking page for discovery calls and handles the details you give when you book.
• Apple iCloud Mail stores the emails sent and received, including forwarded enquiries.
• Google Analytics measures how the website is used, only if you accept analytics cookies.

Some of these providers are based in, or store data in, the United States. Where your data is transferred outside the UK, it is protected by safeguards recognised under UK data protection law, such as the UK Extension to the EU US Data Privacy Framework or standard contractual clauses.

Data may also be shared if the law requires it, for example with HMRC.

How long it is kept

• Enquiries that do not lead to work: deleted within 12 months of the last contact.
• Client records and invoices: kept for 6 years after the end of the tax year they relate to, because the law requires it.
• Website visit logs: kept by Cloudflare for a limited period under its own retention policy.
• Analytics data: kept in Google Analytics for 14 months, then deleted automatically.
• Website visits linked to an enquiry in HubSpot: kept with your enquiry or client record and deleted with it, on the timescales above.

Your rights

Under UK data protection law, you have the right to:

• ask for a copy of the personal data held about you
• ask for anything that is wrong or incomplete to be corrected
• ask for your data to be deleted
• ask for the use of your data to be limited, or object to it being used
• ask for your data to be transferred to you or another organisation in a common format

To use any of these rights, email hello@jahadigital.com. There is no charge, and you will get a reply within one month.

Complaints

If you are unhappy with how your data has been handled, please say so first so it can be put right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK regulator for data protection, at ico.org.uk/make-a-complaint or by calling 0303 123 1113.

Changes to this policy

If the way your data is used changes, this page and the date at the top will be updated.