This policy explains how JWBIZ Ltd collects, uses and protects your personal data when you use our websites, software and services.
P1.1 — We want the JWBIZ ZenSite and JWBIZ ZenStudio platforms to be safe, lawful, and respectful for everyone.
P2.1 — JWBIZ Ltd (“JWBIZ”, “we”, “us”, “our”) is a company registered in England & Wales, Company No. 14179078, and is the data controller for the personal data described in this policy, except where Section P5 explains that we act as a data processor. Our registered office is 4, Ynys Bridge Court, Cardiff, CF15 9SS, United Kingdom.
P2.2 — This policy is written to comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR).
P3.1 — This policy applies to jwbiz.co.uk and all subdomains operated by JWBIZ Ltd. Where we refer to “our websites” in this policy, we mean jwbiz.co.uk and all of its associated subdomains.
P3.2 — It also applies to the software and services we provide, including the Events Calendar, JWBIZ ZenSite, JWBIZ ZenStudio, any scheduling tools and other software we release in future, bespoke software development, website building, hosting and maintenance services, the JWBIZ Toolbox and the JWBIZ Hospitality Tools. Together these are referred to as our “products”.
P4.1 — We collect personal data that you give to us directly, including your name, email address, telephone number, business name, and any message content, when you use a contact form, register for our newsletter, create an account, request a quotation or make a purchase.
P4.2 — If you purchase a subscription product such as the Events Calendar, we collect the account and order details needed to provide the service, including your login credentials, subscription details and the content you add to the product.
P4.3 — If you purchase JWBIZ ZenSite or JWBIZ ZenStudio, we collect the account details needed to provide the service, including your login credentials and any content you add to your website.
P4.4 — If you commission bespoke software or a website, we collect the contact, business and project information you provide, including any content you supply for your website such as text, photographs, logos and videos, so that we can prepare quotations and build, host, maintain and support the software or website. Where we register, renew or manage a domain name or hosting for you, we also collect the details needed to do so.
P4.5 — If you register for our newsletter or new tool announcements, we collect your name (where provided) and email address.
P4.6 — Our free tools in the JWBIZ Toolbox and the JWBIZ Hospitality Tools are designed to be used without an account. Where a tool requires you to enter information in order to produce a result, we do not intend to keep that information, and you should not enter personal data into any free tool unless it is necessary for its purpose.
P4.7 — We collect limited technical data automatically, such as your IP address, browser type, device type and pages visited, through cookies and similar technologies. See Section P7 for details.
P4.8 — We do not knowingly collect payment card details ourselves; these are processed directly by our payment provider, as described in Section P8. All of our products are digital, so we do not collect delivery addresses for shipping.
P5.1 — We use your personal data for the following purposes, and on the following legal bases under UK GDPR:
P5.2 — Data you control through our products. Where you use our products to collect or store personal data about other people, such as event attendees, customers, enquirers or website visitors, you are the data controller of that data and JWBIZ Ltd acts as your data processor. We process that data only on your documented instructions and as necessary to provide the product, as further described in our Terms & Conditions. Questions from individuals about that data should be directed to the customer who collected it.
P5.3 — We do not use your personal data for automated decision-making that has legal or similarly significant effects on you.
P6.1 — We send newsletters and new tool announcements only to people who have asked to receive them. You can unsubscribe at any time using the link in any message or through our newsletter management page.
P6.2 — Where you are an existing customer, we may send you information about similar products only as permitted by PECR, and you may opt out of these messages at any time.
P6.3 — We do not sell or rent our mailing list to third parties.
P7.1 — Our websites use cookies and similar technologies to operate correctly, remember your preferences, and help us understand how our sites are used.
P7.2 — When you first visit any of our websites, a cookie banner will ask for your consent to non-essential cookies. Strictly necessary cookies, which are required for the website to function, are used regardless of consent. You can accept all, reject all non-essential cookies or choose your own settings.
P7.3 — Our cookies fall into the following categories: strictly necessary cookies, which keep the site working and store your cookie choices; performance cookies, which provide anonymous usage statistics through StatCounter; functionality cookies, which remember visitor information such as the number of visits; and targeting cookies, which are set by YouTube only when you allow embedded video.
P7.4 — A full, up-to-date list of the cookies used on the site you are visiting, including their name, provider, purpose and duration, is available in the cookie banner and can be reviewed or changed at any time using the cookie settings button found in the footer of every page.
P7.5 — Your cookie choices are stored for 30 days, after which you will be asked again.
P7.6 — You can also control cookies through your browser settings, though disabling certain cookies may affect how our websites function.
P8.1 — We do not sell your personal data. We share it only with third parties who help us operate our websites and deliver our products, including:
P8.2 — Each of these providers is required to handle your data securely and only for the purposes we specify, except where they act as independent controllers under their own privacy policies.
P8.3 — We may also disclose your data where required by law, such as in response to a valid request from a regulatory or law enforcement authority, or to protect our legal rights.
P8.4 — If our business is sold or reorganised, your data may be transferred to the new owner, who will be required to handle it in accordance with this policy.
P9.1 — Some of the third parties referred to in Section P8 may process data outside the UK. Where this happens, we take steps to ensure your data receives an equivalent level of protection, such as through the UK's International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or an adequacy decision.
P10.1 — We keep your personal data only for as long as necessary to fulfil the purposes described in this policy, including any legal, accounting, or reporting requirements.
P10.2 — Order and account records are generally retained for as long as your account or subscription is active, and for a reasonable period afterwards to meet our legal and tax obligations. Financial records are retained for at least the period required by UK law.
P10.3 — Content you store in our products, and website content you supply to us, is retained for the duration of your subscription or your hosting or maintenance term, and may be deleted after a reasonable period following expiry or termination, as set out in our Terms & Conditions.
P10.4 — Enquiry messages are retained only as long as needed to resolve your enquiry. Newsletter details are retained until you unsubscribe.
P11.1 — You have the right to:
P11.2 — To exercise any of these rights, please contact us using the details in Section P15. We will respond within one month, as required by law.
P11.3 — You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk if you believe we have not handled your data correctly. We would appreciate the opportunity to address your concerns first.
P12.1 — Our websites and products are not intended for use by anyone under the age of 18, and we do not knowingly collect personal data from children.
P13.1 — We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse, including secure logins for products that hold customer accounts.
P13.2 — No system is completely secure. You are responsible for keeping your login credentials confidential, and you should tell us promptly if you suspect your account has been compromised.
P13.3 — In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO and, where required, the affected individuals, within the timescales required by law.
P14.1 — Our websites and products may contain links to third-party websites. We are not responsible for their content or privacy practices, and we encourage you to read their privacy policies.
We may update this Privacy & Cookies Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this page periodically to stay informed of any changes.
P15.1 — If you have any questions about this policy or how we handle your data, please get in touch via our contact form or by telephone on +44 29 2255 0433.