Legal
Privacy policy
What personal data this website collects, why, who handles it for us and your rights over it.
Updated
This policy explains what personal data the JDLT website collects, why, who handles it for us and your rights over it. It covers this website only. When we provide services to clients, we handle their data under the contract we have with them.
Who we are
JDLT Ltd is the controller of the personal data described here. We’re registered in England and Wales (company number 11088609), our registered office is 66 Paul Street, London EC2A 4NA, and we’re registered with the Information Commissioner’s Office (registration number ZB108938).
For anything about this policy or your data, email support@jdlt.co.uk.
The short version
- We collect personal data only when you send us an enquiry.
- The site sets no cookies and has no advertising or tracking.
- Our visitor statistics don’t identify you.
- The password checker never sends your password anywhere.
When you send us an enquiry
The contact form asks for your name, email address and organisation, and optionally your phone number. It also asks what your enquiry is about, for your message and, optionally, how you heard about us.
We use these details to reply to you and, if you’d like to work with us, to discuss and prepare that work. Our lawful basis is our legitimate interest in answering enquiries and, where you’re asking about our services, taking steps at your request before entering into a contract.
The form runs on Vercel in its London region and sends your enquiry to us as an email through Microsoft 365. It isn’t stored anywhere else. We keep enquiries for up to two years after our last contact with you, unless you become a client, when your details become part of our client records.
Visitor statistics
We use Plausible Analytics to count visits and see which pages are read. Plausible sets no cookies and stores nothing on your device. It uses your IP address and browser details only to make an anonymous identifier that changes every day, so it can’t link visits to you or to each other across days, and it never stores the IP address itself. Plausible is based in the EU and keeps the data there. We see totals only, such as how many people read a page and roughly which country they came from.
Our lawful basis is our legitimate interest in understanding how the site is used.
Hosting
The website is hosted by Vercel Inc. Like any web server, Vercel records each request, including your IP address and your browser’s details, to deliver pages and protect the site from abuse. Vercel is based in the US and is certified under the UK Extension to the EU-US Data Privacy Framework, which UK law recognises as protecting personal data adequately.
Our lawful basis is our legitimate interest in running a secure website.
The password checker
Our password checker runs in your browser, and your password never leaves your device. To check for breaches, your browser turns the password into a hash and sends only the first five characters of it to Have I Been Pwned, which can’t work out your password from them. That request goes straight from your browser to Have I Been Pwned, so it sees your IP address and browser details, as any website you visit does. We don’t receive any of it.
Cookies and storage on your device
The site sets no cookies. If you switch between light and dark mode, your browser remembers the choice in its own storage so the next page matches. It stays on your device and is never sent to us.
Our fonts are served from this site, so loading a page doesn’t contact Google or any other font service.
Who else handles your data
- Vercel, which hosts the website and runs the contact form.
- Microsoft, which provides the email service that delivers enquiries to us.
- Plausible, which provides our visitor statistics.
Each handles data only on our instructions and under data protection terms. We don’t sell your data or share it for marketing.
Your rights
Under UK data protection law, you have the right to:
- see the personal data we hold about you
- have it corrected if it’s wrong
- have it deleted
- object to how we use it, or ask us to restrict it
- receive it in a form you can pass to someone else, where that applies
To use any of these rights, email support@jdlt.co.uk. We’ll respond within a month.
If you’re unhappy with how we’ve handled your data, please tell us first so we can put it right. You can also complain to the Information Commissioner’s Office.
Changes to this policy
If we change how the site handles personal data, we’ll update this page and the date at the top.