Controller. J Brown Online LTD (company number 17394642) is the data controller for personal data described here. Contact: info@jbrownonline.com.
1. What we collect
Depending on how you contact us, we may process:
- Name, email address, phone number, and business or project name
- Details you include in quote requests, emails, or project briefs
- Technical data such as approximate location from IP, browser type, pages visited, and interaction events (for example clicks on call, WhatsApp, or quote buttons) when you use this website
- Billing and invoice details when we work together, including payment and settlement status
2. How we collect it
- Directly from you via the quote form, email, phone, or WhatsApp
- Through project collaboration (content, feedback, credentials you choose to share)
- From our own website systems when you submit the quote form or browse pages (first-party analytics hosted on our servers)
3. Why we use it
We use personal data to:
- Respond to enquiries and provide quotes
- Deliver and manage website projects
- Send project related communication
- Keep business records, invoices, and legal documentation
- Understand how this website is used so we can improve it
Legal bases under UK GDPR typically include: taking steps at your request before a contract, performing a contract, legitimate interests (running and improving a small web studio), and legal obligation (e.g. tax records). Where we rely on consent, you can withdraw it at any time.
4. Quote form
The quote form is processed on our own server at jbrownonline.com/api and emailed to info@jbrownonline.com using the mail system on our UK VPS. We do not use FormSubmit or another third-party form relay for this. Do not include sensitive personal data in the form unless it is necessary. By submitting, you ask us to contact you about your project.
5. Sharing
We do not sell your personal data. We may share it with:
- Service providers who help us operate (email delivery on our server, hosting, accounting)
- Our bank (Lloyds) when you pay by bank transfer
- Payment providers when you pay via a secure payment link or card terminal
- Professional advisers if required
- Authorities when required by law
If a project needs third party tools (hosting, CMS, payments, mailing tools), we will discuss that with you before accounts are created in your name or ours. Your customer mailing list, if we help you set one up, is yours; we do not use it to market J Brown Online.
6. International transfers
Some providers may process data outside the UK. Where that happens, we look for appropriate safeguards such as standard contractual clauses or provider mechanisms recognised under UK data protection law. Our website hosting, quote handling, and first-party analytics run on our OVH VPS in the EU/UK hosting stack we operate.
7. Retention
Enquiry data is kept as long as needed to respond and for a reasonable follow up period, then deleted or anonymised unless we start a project. Project and invoice records are kept for as long as required for legal, tax, and accounting purposes (often up to six years in the UK). Aggregated analytics may be retained longer in anonymised or pseudonymised form.
8. Security
We take reasonable technical and organisational steps to protect personal data. No method of transmission or storage is completely secure; please use strong unique passwords for any accounts related to your project.
9. Cookies and analytics
This marketing site keeps cookies minimal. We use a first-party analytics script that stores a random session id in local storage (not a third-party advertising cookie) so we can count visitors, pageviews, and interactions such as quote starts and CTA clicks. That data is sent to our own API on the same infrastructure as this site.
The homepage reviews section shows public Trustpilot review text that our own API fetches and caches. That display does not load extra third-party widgets. We also embed a Trustpilot Review Collector widget so visitors can leave a review; that load is served by Trustpilot and may set cookies or similar technologies under Trustpilot’s privacy terms. If we add other embedding tools that set cookies, we will update this policy and, where required, ask for consent.
10. Your rights
Under UK data protection law, you may have the right to:
- Access your personal data
- Correct inaccurate data
- Request erasure or restriction in certain cases
- Object to certain processing
- Data portability where applicable
- Withdraw consent where processing is based on consent
To exercise these rights, email info@jbrownonline.com. You can also complain to the Information Commissioner’s Office (ICO) at ico.org.uk.
11. Children
Our services are aimed at businesses and adults. We do not knowingly collect personal data from children.
12. Changes
We may update this policy as the business grows. The “last updated” date at the top will change when we do.
13. Contact
Privacy questions: info@jbrownonline.com.