Privacy Policy

This Privacy Policy describes how Jayne & Co. Consulting Ltd collects, uses, and protects personal information when you visit wearesjx.com. SJx is a trading name of Jayne & Co. Consulting Ltd. The company is the controller of the personal data described in this policy, and it is the company you contract with when you deal with SJx.

Registered in England and Wales under company number 08966662. Registered office: 189–193 Earls Court Road, London, United Kingdom, SW5 9AN.

Privacy contact: rights@jayneandco.xyz

Legal contact: legal@jayneandco.xyz

This policy explains what personal data we collect, how we process and store it, the legal basis for doing so, your rights, and how to contact us.

When you join our mailing list or contact us, we collect your email address and any other details you choose to give us, such as your name. Our website does not run analytics or advertising scripts, so we do not collect analytics data or place non-essential cookies. Our hosting provider keeps standard server logs, which include IP addresses, for security and diagnostics.

We use your data to send you the updates you have asked for, to respond to your enquiries, to run and secure our website, and to meet our legal obligations. Our lawful basis for sending marketing email is your consent, which you can withdraw at any time without affecting anything we did before you withdrew it.

Optional wellbeing questions are non-medical and collected only with explicit consent. Data is anonymised and stored securely.

We share data only with the processors we actually use. At present these are Web3Forms, which receives the messages and signups from the forms on this website and delivers them to our inbox, and Cloudflare, which hosts this website, keeps standard server logs, and forwards email sent to our wearesjx.com addresses to our own inbox. We have a data processing agreement in place with each of them. Our newsletter is hosted by Substack; see section 12. Web3Forms and Cloudflare each use their own sub-processors, and each publishes its current list: Web3Forms in its data processing agreement, and Cloudflare on the sub-processor page its data processing agreement points to. If we add an email marketing service, payment processing, analytics or any other service that handles your data, we will update this section before that service goes live. We do not sell, rent or trade your data to anyone.

Some of the processors we use are based outside the UK, so your data may be transferred to them. Cloudflare, which hosts this website, and Substack, which hosts our newsletter, are based in the United States. The data processing terms we have with each of them incorporate the Standard Contractual Clauses with the UK International Data Transfer Addendum. Each has also been certified under the UK Extension to the EU–U.S. Data Privacy Framework, which adds protection while that certification remains in force. Web3Forms, which handles the forms on this website, is run by Web3Creative from India. India has no UK adequacy decision, so Web3Forms’ data processing agreement relies on the Standard Contractual Clauses with the UK International Data Transfer Addendum.

Data is kept only as long as necessary. We keep your email address until you ask us to remove it, or until two years have passed with no engagement, whichever comes first. We keep messages sent through the contact form, with the name and email address that came with them, for 24 months from when we receive them, and then delete them. Transaction records are kept for seven years to meet accounting requirements. Cloudflare processes server logs on our behalf under its own retention policy; we do not hold them separately. Our form provider also holds a copy of each submission for up to three years on its own systems, and we ask them to delete it when you ask us to delete yours.

We email you only about the thing you asked for. When you join a waitlist, your email address comes to our inbox, and we use it to tell you when that thing is ready. We do not send a newsletter to these addresses, and if we start one we will ask you separately first. You can ask to be removed at any time by emailing rights@jayneandco.xyz, and we will delete your address. Our waitlists are for people aged 18 and over.

Our newsletter is published on Substack, at wearesjx.substack.com. Subscriptions are collected and stored by Substack under its own privacy policy. As the owner of the publication, we have access to subscribers’ email addresses and use them to send the newsletter. You can unsubscribe from any newsletter email, or ask us to delete your address by emailing rights@jayneandco.xyz.

We use SSL encryption, secure hosting, and confidentiality measures, but no system is entirely secure.

Our lawful basis depends on what we are doing. Marketing email: consent. Responding to your enquiry: legitimate interest. Payments and business records, if you buy something from us: contractual necessity and legal obligation. Website security logs: legitimate interest.

We are not responsible for the privacy practices of other websites.

We may update this Privacy Policy, and the effective date at the top shows when it last changed. If we make a material change to how we use data you have already given us, we will tell you by email rather than relying on you to check this page.

Jayne & Co. Consulting Ltd
189–193 Earls Court Road, London, United Kingdom, SW5 9AN

rights@jayneandco.xyz | legal@jayneandco.xyz