Privacy Policy

1. Data Controller

2. Personal Data We Collect

When you submit the contact form on this website, we collect the following categories of personal data:

• Full name
• Email address
• Phone number
• Company name (optional)
• Service needed and budget range
• Project details and any information you include in your message

We do not collect sensitive personal data (as defined in GDPR Article 9), financial data, or data from minors.

3. Purposes and Legal Basis for Processing

4. Recipients of Your Data

Your personal data may be shared with the following categories of recipients, solely as necessary for the purposes described above:

• Resend — delivery of the contact-form email and the lead notification
• Cloudflare — hosting, CDN, and short-lived storage of chat conversation state (deleted automatically after 2 hours)
• OpenAI — the assistant on this site sends the content of your chat messages to OpenAI in the United States to generate a reply. That includes any name, email address, phone number, company or project detail you type into the chat. If you would rather not use a US processor, use the contact form or email us directly instead — both reach the same person.
• Odoo — our CRM, where an enquiry is recorded as a lead
• Google Analytics — only if you accept analytics cookies
• Accountants / legal advisors — where legally required

We do not sell, rent, or trade your personal data to any third party for marketing purposes.

Where data is transferred outside the European Economic Area (EEA), we rely on the European Commission’s Standard Contractual Clauses. The transfer that applies to most visitors is the chat assistant, which sends message content to OpenAI in the United States. Nothing you enter in the contact form is sent to OpenAI.

5. Your Rights Under GDPR

As a data subject, you have the following rights under the GDPR:

• Right of access — obtain a copy of your personal data we hold
• Right to rectification — correct inaccurate or incomplete data
• Right to erasure — request deletion of your data where no legal basis exists to retain it
• Right to restriction — limit processing in certain circumstances
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interest
• Right to withdraw consent — where processing is based on consent, withdraw it at any time

To exercise any of these rights, contact us at founder@jtech.co.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Belgian Data Protection Authority (GBA/APD): https://www.gegevensbeschermingsautoriteit.be

6. Cookies

This website uses cookies. A cookie consent banner is presented on your first visit, allowing you to accept or decline non-essential cookies. For full details on the cookies we use and their purposes, see our Cookie Policy.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include TLS encryption in transit, access controls, and secure hosting infrastructure. No system is 100% secure; if you believe your data has been compromised, contact us immediately at founder@jtech.co.com.

8. Data Processing Agreements

When J-TECH acts as a data processor on behalf of clients (e.g. building platforms that handle end-user personal data), we enter into a Data Processing Agreement (DPA / verwerkersovereenkomst) as required by GDPR Article 28. Clients may request our standard DPA template by contacting us at founder@jtech.co.com.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page indicates when it was last revised. Continued use of the website after changes constitutes acceptance of the updated policy.