Controller. J Brown Online is the data controller for personal data described here. Currently trading as a sole trader in England and Wales. A limited company will be registered in due course. These pages will be updated when that happens. Contact: info@jbrownonline.com.
1. What we collect
Depending on how you contact us, we may process:
- Name, email address, phone number, and business or project name
- Details you include in quote requests, emails, or project briefs
- Technical data such as approximate location from IP, browser type, and pages visited if analytics are enabled later
- Billing and invoice details when we work together
2. How we collect it
- Directly from you via the quote form, email, or phone
- Through project collaboration (content, feedback, credentials you choose to share)
- From our form delivery provider when you submit the quote form
3. Why we use it
We use personal data to:
- Respond to enquiries and provide quotes
- Deliver and manage website projects
- Send project related communication
- Keep business records, invoices, and legal documentation
- Improve this website and our services
Legal bases under UK GDPR typically include: taking steps at your request before a contract, performing a contract, legitimate interests (running and improving a small web studio), and legal obligation (e.g. tax records). Where we rely on consent, you can withdraw it at any time.
4. Quote form
The quote form is sent to us by email via FormSubmit (formsubmit.co), which processes the submission so it reaches info@jbrownonline.com. Do not include sensitive personal data in the form unless it is necessary. By submitting, you ask us to contact you about your project.
5. Sharing
We do not sell your personal data. We may share it with:
- Service providers who help us operate (email, form delivery, hosting, accounting)
- Professional advisers if required
- Authorities when required by law
If a project needs third party tools (hosting, CMS, payments), we will discuss that with you before accounts are created in your name or ours.
6. International transfers
Some providers may process data outside the UK. Where that happens, we look for appropriate safeguards such as standard contractual clauses or provider mechanisms recognised under UK data protection law.
7. Retention
Enquiry data is kept as long as needed to respond and for a reasonable follow up period, then deleted or anonymised unless we start a project. Project and invoice records are kept for as long as required for legal, tax, and accounting purposes (often up to six years in the UK).
8. Security
We take reasonable technical and organisational steps to protect personal data. No method of transmission or storage is completely secure; please use strong unique passwords for any accounts related to your project.
9. Cookies and analytics
This marketing site aims to keep cookies minimal. If we add analytics or embedding tools that set cookies, we will update this policy and, where required, ask for consent.
10. Your rights
Under UK data protection law, you may have the right to:
- Access your personal data
- Correct inaccurate data
- Request erasure or restriction in certain cases
- Object to certain processing
- Data portability where applicable
- Withdraw consent where processing is based on consent
To exercise these rights, email info@jbrownonline.com. You can also complain to the Information Commissioner’s Office (ICO) at ico.org.uk.
11. Children
Our services are aimed at businesses and adults. We do not knowingly collect personal data from children.
12. Changes
We may update this policy as the business grows (including when a limited company is registered). The “last updated” date at the top will change when we do.
13. Contact
Privacy questions: info@jbrownonline.com.