Privacy Policy
This privacy policy explains how Jay Johnson Productions ("we", "us") collects, uses, and protects your personal data when you use jayjohnson.co.uk. We are committed to protecting your privacy and complying with applicable data protection law, including the UK GDPR.
Data controller and contact
The data controller for this website is Jay Johnson Productions. For any privacy or data protection enquiries, including to exercise your rights, please contact:
Email: jojlondon@gmail.com
Data we collect and legal basis
We process personal data only where we have a legal basis under UK GDPR Article 6:
- Contact form: When you submit the contact form we collect your name, email, optional phone number, and message. We use this to respond to your enquiry. Legal basis: Consent (you submit the form voluntarily) and, where a contract or pre-contractual step follows, performance of a contract.
- Analytics : If you accept analytics cookies, we use Mixpanel to understand how visitors use the site (e.g. pages viewed, interactions). This may include identifiers and usage data. Legal basis: Consent (via cookie banner).
- Marketing : If you accept marketing cookies, we use Meta (Facebook) Pixel for advertising and measurement. Meta may collect data as set out in their privacy policy. Legal basis: Consent (via cookie banner).
- Essential operation: Cookie preference storage and other technically necessary processing. Legal basis: Legitimate interest (running the site) and/or consent where required.
Third-party services
We use the following third-party services. Each may collect and process data as described in their own privacy policies:
- Resend – Contact form email delivery. Privacy policy
- Mixpanel – Analytics (if you consent). Privacy policy
- Meta (Facebook) – Marketing pixel (if you consent). Privacy policy
- Stripe – Payment processing (e.g. for course purchases, if applicable). Privacy policy
- Calendly – If you use a Calendly link from this site to book a meeting, Calendly will process data per their policy. Privacy policy
International transfers
Some of our service providers (e.g. in the US) may process data outside the UK and European Economic Area. Where we do so, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions, in line with UK data protection law.
Data retention
We keep personal data only for as long as necessary for the purposes set out above:
- Contact form submissions: typically retained for the duration of our business relationship and for a reasonable period thereafter for follow-up and legal/regulatory purposes (e.g. up to a few years unless you ask for erasure earlier).
- Analytics and marketing data: as determined by the respective providers and our need for analysis; you can withdraw consent via cookie preferences at any time.
- Cookie preferences: stored until you clear them or change your choices.
Your rights under GDPR
You have the right to:
- Access – Request a copy of the personal data we hold about you.
- Rectification – Request correction of inaccurate data.
- Erasure – Request deletion of your data ("right to be forgotten") in certain circumstances.
- Data portability – Receive your data in a structured, machine-readable format where applicable.
- Restriction – Request that we limit how we use your data in certain circumstances.
- Object – Object to processing based on legitimate interests or for direct marketing.
- Withdraw consent – Where we rely on consent, you can withdraw it at any time (e.g. via cookie preferences).
- Complain – Lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint.
To exercise any of these rights, contact us at jojlondon@gmail.com. We will respond within one month as required by law.
Data breaches
If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the ICO and affected individuals as required by law, typically within 72 hours of becoming aware of the breach where notification is required.
Automated decision-making and profiling
We do not use your personal data for automated decision-making or profiling that has legal or similarly significant effects on you.
Changes to this policy
We may update this privacy policy from time to time. The current version will always be available on this page with the date of last update. We encourage you to review it periodically.
Cookies
For details on the cookies we use, see our Cookie policy.