Privacy Policy — J&A AI Governance

Who we are (data controller)

JUBA & Associates Limited, company no. 14038123, registered in England & Wales, registered office 124 City Road, London, EC1V 2NX, trading as J&A AI Governance.

Contact: contact@ja-ai.co.uk.

ICO registration number: ZC163695.

The personal data we collect

• Enquiry form: your name, work email, company, role, the option you choose under “what’s driving it”, and anything you write in the message field.
• Correspondence: the content of emails and other messages you send us.
• Technical data: our hosting and email providers automatically log limited technical information (such as IP address, browser type and the time of a request) to deliver the site and email and to keep them secure. We do not use this to build a profile of you.
• We do not ask for special-category (sensitive) data — please don’t include it in the form.

How we use it, and our legal basis

• To respond to your enquiry and discuss whether and how we can help — legitimate interests in responding to enquiries and running our practice (Art. 6(1)(f)), and/or taking steps at your request before entering a contract (Art. 6(1)(b)).
• To provide and administer our services if you become a client — contract (Art. 6(1)(b)).
• To keep proper records and meet our legal and regulatory obligations — legal obligation (Art. 6(1)(c)).
• We only send marketing if you have asked us to or otherwise consented, and you can opt out at any time.

Cookies and analytics

Our website does not set advertising or cross-site tracking cookies. Please see our Cookie Policy for detail, including our use of web fonts and any future analytics.

Who we share it with

We do not sell your personal data. We share it only with providers who process it on our behalf under contract, and with advisers or authorities where the law requires:

• our website hosting and business-email provider (JustHost / Bluehost);
• Amazon Web Services, which we use to receive and deliver enquiry emails (AWS Lambda and Amazon SES, region eu-west-2, London);
• our scheduling tool (e.g. Calendly), if you book a call;
• our CRM (e.g. HubSpot), if used;
• professional advisers, and regulators or authorities where required by law.

International transfers

We configure our providers to process personal data in the UK or EU where possible — for example, our AWS email delivery is set to a UK/EU region. Where any processing takes place outside the UK, we rely on appropriate safeguards such as the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses.

How long we keep it

• Enquiries that don’t lead to an engagement: kept for 12 months, then deleted, unless we need them for a legal reason.
• Client records: kept for the duration of the engagement and for 6 years afterwards, to meet tax, accounting and limitation-period requirements.

Your rights

You have the right to access, rectify, erase, restrict or object to our processing of your personal data, to data portability, and to withdraw consent where we rely on it. To exercise any of these, email contact@ja-ai.co.uk. We will respond within one month.

Complaints

If you’re unhappy with how we’ve handled your personal data, please contact us first at contact@ja-ai.co.uk so we can put it right. We operate a data-protection complaints procedure: we will acknowledge your complaint promptly and respond without undue delay. You also have the right to complain to the Information Commissioner’s Office (ICO) — ico.org.uk, or 0303 123 1113.

Security

We use appropriate technical and organisational measures to protect personal data, including access controls, encryption in transit and vetted providers. No online transmission is completely secure, so we can’t guarantee absolute security.

Changes to this policy

We may update this policy from time to time; the “last updated” date shows when. Material changes will be posted on this page.

Contact

JUBA & Associates Limited — contact@ja-ai.co.uk.