Controller. J Brown Online Ltd (company number 17394642) is the data controller for personal data described here. Contact: info@jbrownonline.com.
1. What we collect
Depending on how you contact us, we may process:
- Name, email address, phone number, and business or project name
- Details you include in quote requests, emails, or project briefs
- Technical data such as approximate location from IP, browser type, pages visited, and interaction events (for example clicks on call, WhatsApp, or quote buttons) when you use this website
- Billing and invoice details when we work together, including payment and settlement status
2. How we collect it
- Directly from you via email, phone, or WhatsApp
- Through project collaboration (content, feedback, credentials you choose to share)
- From our own website systems when you browse pages (first-party analytics)
3. Why we use it
We use personal data to:
- Respond to enquiries and provide quotes
- Deliver and manage website projects
- Send project related communication
- Keep business records, invoices, and legal documentation
- Understand how this website is used so we can improve it
Legal bases under UK GDPR typically include: taking steps at your request before a contract, performing a contract, legitimate interests (running and improving a small web studio), and legal obligation (e.g. tax records). Where we rely on consent, you can withdraw it at any time.
4. Quote calculator
The quote calculator on this site works out an indicative price in your browser and does not send your answers to us. The email button opens your own email app with a message to info@jbrownonline.com and your choices filled in. Nothing reaches us unless you send that email yourself. Do not include sensitive personal data unless it is necessary. By emailing us, you ask us to contact you about your project.
5. Sharing
We do not sell your personal data. We may share it with:
- Service providers who help us operate (email, hosting, accounting)
- Our accounting software provider (QuickFile), which holds your invoices and your client portal login
- Our bank when you pay by bank transfer
- Payment providers such as SumUp when you pay by card, online or in person
- GoCardless when you pay by bank link or Direct Debit. GoCardless collects your bank details on its own pages; we receive the payment and Direct Debit status, not your bank login or full account details.
- Professional advisers if required
- Authorities when required by law
If a project needs third party tools (hosting, CMS, payments, mailing tools), we will discuss that with you before accounts are created in your name or ours. Your customer mailing list, if we help you set one up, is yours; we do not use it to market J Brown Online.
6. International transfers
Some providers may process data outside the UK. Where that happens, we look for appropriate safeguards such as standard contractual clauses or provider mechanisms recognised under UK data protection law. Our website and first-party analytics are hosted in Europe.
7. Retention
Enquiry data is kept as long as needed to respond and for a reasonable follow up period, then deleted or anonymised unless we start a project. Project and invoice records are kept for as long as required for legal, tax, and accounting purposes (often up to six years in the UK). Aggregated analytics may be retained longer in anonymised or pseudonymised form.
8. Security
We take reasonable technical and organisational steps to protect personal data. No method of transmission or storage is completely secure; please use strong unique passwords for any accounts related to your project.
9. Cookies and analytics
This marketing site keeps cookies minimal. We use a first-party analytics script that stores a random session id in local storage (not a third-party advertising cookie) so we can count visitors, pageviews, and interactions such as quote starts and CTA clicks. That data is sent to our own systems, not to a third-party analytics company.
The homepage reviews section shows public Trustpilot review text that our own API fetches and caches. That display does not load extra third-party widgets. We also embed a Trustpilot Review Collector widget so visitors can leave a review; that load is served by Trustpilot and may set cookies or similar technologies under Trustpilot’s privacy terms. If we add other embedding tools that set cookies, we will update this policy and, where required, ask for consent.
10. Your rights
Under UK data protection law, you may have the right to:
- Access your personal data
- Correct inaccurate data
- Request erasure or restriction in certain cases
- Object to certain processing
- Data portability where applicable
- Withdraw consent where processing is based on consent
To exercise these rights, email info@jbrownonline.com. You can also complain to the Information Commissioner’s Office (ICO) at ico.org.uk.
11. Children
Our services are aimed at businesses and adults. We do not knowingly collect personal data from children.
12. Changes
We may update this policy as the business grows. The “last updated” date at the top will change when we do.
13. Contact
Privacy questions: info@jbrownonline.com.