Privacy Notice

1. Who we are

Just Another Computer Company (“JADC”, “we”, “us”) is the data controller for the personal data described in this notice. We are based at Half Moon Farm, Rushall, Norfolk, IP21 4QD, United Kingdom.

For anything relating to your personal data or this notice, call +44 (0) 330 043 2099, write to the address above, or use the contact form. Please mark correspondence for the attention of the data protection contact.

This notice explains how we handle personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What this notice covers

It covers personal data we collect through this website at jadc.biz, including the contact form, and personal data we hold about enquirers and clients as a result. Where we process data on a client's behalf as part of an engagement, we act as a processor under that client's written instructions and their own privacy notice governs that data; the terms of our contract with them apply rather than this notice.

3. The personal data we collect

3.1 Information you give us

When you submit the contact form we collect:

• Your name — so we can address our reply.
• Your email address — so we can send that reply.
• Your company or organisation — optional, and only to give us context.
• The reason for your enquiry — so it reaches the right engineer.
• Your message — whatever you choose to tell us.
• Your consent, together with the date and time you gave it and the IP address the submission came from, which we keep as a record that consent was given.

We ask for nothing beyond this. Please do not send us special category data (such as health or ethnicity information) or confidential client material through the form.

3.2 Information collected automatically

Our web server keeps standard technical logs: IP address, date and time of request, the page requested, HTTP status, and the browser's user agent string. These exist to keep the site available and secure, for example to identify abuse or diagnose a fault.

We use no analytics, advertising, social media or fingerprinting technology. There is no Google Analytics, no advertising pixel, and no third-party tag manager on this site.

3.3 Fonts and other assets

Every font, image, stylesheet and script on this site is served from our own domain. Nothing is loaded from a third-party content delivery network, which means simply visiting a page does not disclose your IP address to any other organisation.

4. Our lawful bases for using it

What we do	Lawful basis
Reply to your contact form enquiry	Consent (UK GDPR Article 6(1)(a)), which you give by ticking the box
Continue a conversation that becomes a potential or actual engagement	Legitimate interests (Article 6(1)(f)), or performance of a contract where one is in place (Article 6(1)(b))
Keep server logs to secure and maintain the site	Legitimate interests (Article 6(1)(f)) in operating a safe, available service
Keep records needed for tax, accounting and professional obligations	Legal obligation (Article 6(1)(c))

Where we rely on consent you can withdraw it at any time, and where we rely on legitimate interests you have the right to object. Section 8 explains how.

5. How long we keep it

Data	Retention period
Enquiry that does not lead to an engagement	24 months from your last contact with us
Enquiry and correspondence that becomes an engagement	7 years after the engagement ends, to meet contractual, tax and professional record-keeping obligations
Web server technical logs	14 days

At the end of these periods we delete the data or anonymise it so that it can no longer identify you. You can ask us to delete your enquiry sooner.

6. Who else sees it

We do not sell, rent or trade personal data, and we do not share it for anyone else's marketing. Your enquiry is read by JADC engineers only.

We do rely on a small number of service providers who process data on our behalf:

• Our email and hosting providers, who transmit and store the message your enquiry becomes. They act as processors under contract and may not use your data for their own purposes.
• Professional advisers such as our accountants, where a record forms part of our business accounts.

We may also disclose personal data where we are legally required to, or to establish, exercise or defend legal claims.

7. Where it is stored

Our website and mail infrastructure are hosted in the United Kingdom and the European Economic Area. If any provider we use needs to transfer personal data outside the UK, we rely on a UK adequacy decision or the International Data Transfer Agreement or Addendum issued under UK GDPR Article 46, so that your data keeps essentially equivalent protection. You can ask us which safeguard applies to a specific transfer.

8. Your rights

Under UK GDPR you have the right to:

• Be informed about how we use your personal data, which is the purpose of this notice.
• Access a copy of the personal data we hold about you.
• Rectification of data that is inaccurate or incomplete.
• Erasure of your data where there is no good reason for us to keep it.
• Restrict processing while a concern you have raised is resolved.
• Data portability, receiving data you gave us in a structured, machine-readable form.
• Object to processing we carry out on the basis of legitimate interests.
• Withdraw consent at any time, where consent is our basis.
• Not be subject to automated decision-making. We do not make any decision about you by automated means, and we do not profile you.

To exercise any of these, call +44 (0) 330 043 2099, write to us at the address in section 1, or use the contact form. We will respond within one month. There is no charge, and we may ask you to confirm your identity before releasing data.

9. Cookies

This site uses no advertising, analytics or tracking cookies, which is why you are not greeted by a cookie banner.

A single cookie is set when you use the contact form. It is a strictly necessary session cookie that carries the anti-forgery token protecting the form against cross-site request forgery. It holds no personal data, is not used to track you, expires when you close your browser, and under regulation 6(4) of the Privacy and Electronic Communications Regulations it does not require consent because the form cannot work safely without it.

10. Security

We serve this site over HTTPS, keep the software and its dependencies patched, restrict access to enquiry data to the engineers who need it, and apply multi-factor authentication to the accounts that hold it. No system is perfect, but if a breach ever occurred that was likely to risk your rights and freedoms we would report it to the ICO within 72 hours and tell you without undue delay where required to.

11. Children

Our services are sold to organisations and this site is not aimed at children. We do not knowingly collect personal data about anyone under 18. If you believe we hold data about a child, contact us and we will delete it.

12. Complaints

Please raise any concern with us first, by phone, by post or through the contact form, because we would far rather put something right than have you escalate it.

You also have the right to complain directly to the UK supervisory authority, the Information Commissioner's Office:

• Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
• Helpline 0303 123 1113
• https://ico.org.uk/make-a-complaint/

Complaining to the ICO does not affect any other legal remedy available to you.

13. Changes to this notice

We may update this notice as our practices or the law change. The date at the top shows the current version. Where a change materially affects how we use data you have already given us, we will contact you directly.