Documents
Privacy and cookies.
Last updated: 17 October 2026
In short: this website uses no profiling cookies and no analytics, doesn't store the messages you send, and loads its fonts from its own server, with no requests to external services. All the details are below, as required by the EU General Data Protection Regulation (GDPR) and, for visitors in the UK, the UK GDPR.
1. Data controller
The controller is the individual who runs Jey Studio, resident in Italy. Full identification details are provided on request and appear in the documents you receive if you become a client. For any privacy request, write to jeywebstudio@gmail.com.
2. What data I process
- Browsing data. For technical and security reasons, the hosting service logs data such as IP address, date and time of the request and browser type. I don't use it to identify or profile you.
- Data you send me. The contact form doesn't save anything on the website: it composes a message that is sent from your own WhatsApp or email. I therefore process the details you choose to send me (name, business, town, links, message) and your phone number or email address.
- Client data. If you become a client, I process the data needed for the service and for accounting (name, company name, tax or company number, address, contact details) and the content you provide for the website.
3. Why I process it, and on what basis
- Replying to your requests and preparing a preview and proposal: steps taken at your request before a contract (art. 6(1)(b) GDPR).
- Providing the service and handling payments and support: performance of a contract (art. 6(1)(b)).
- Meeting tax and accounting obligations: legal obligation (art. 6(1)(c)).
- Keeping the website secure and defending my rights: legitimate interests (art. 6(1)(f)).
I don't use your data to send you advertising without your consent and I never sell it.
4. Payments
Payments are made by bank transfer. I only receive the information needed to recognise the payment (for example the payer's name, amount, date and reference), which I keep for tax purposes.
5. Who receives the data
Data may be processed, only for the purposes above, by providers acting as processors or independent controllers:
- the website hosting service (Netlify, Inc.);
- my bank, to receive transfers;
- Google (Gmail), for email;
- WhatsApp (Meta), if you message me on WhatsApp;
- the domain registrar, if I register a domain in your name;
- my accountant, for tax obligations.
6. International transfers
Some providers may process data in the United States. In these cases transfers rely on the EU-US Data Privacy Framework (and its UK extension) or on Standard Contractual Clauses approved by the European Commission.
7. How long I keep it
- Requests that don't become a project: up to 24 months from the last contact.
- Contract and tax data: 10 years, as required by Italian law.
- Browsing data: for the period set by the hosting provider, usually a few days or weeks.
8. Your rights
You can ask at any time for access to your data, correction, erasure, restriction of processing and portability, and you can object to processing (arts. 15–22 GDPR), by writing to jeywebstudio@gmail.com. I reply within one month. You also have the right to complain to a supervisory authority: in Italy the Garante per la protezione dei dati personali (garanteprivacy.it), in the UK the Information Commissioner's Office (ico.org.uk), in Ireland the Data Protection Commission (dataprotection.ie).
10. Changes to this policy
I may update this policy to reflect changes in the law or in the service. The date at the top shows the latest update. Please also read the terms and conditions.