Privacy Policy.

JF Web Development is an independent web design, development and website-care business operated as a sole trader in Ireland.

For the purposes of data-protection law, JF Web Development will generally be the data controller of personal data collected directly through jfwebdev.com and through our own sales, enquiry, client-management and business activities.

Where we process personal information through a client's website solely on that client's instructions, the client will normally be the data controller and JF Web Development will normally act as a data processor.

Privacy Contact

JF Web Development has not appointed a statutory Data Protection Officer. Privacy and data-protection enquiries should therefore be sent directly to the contact details above.

Depending on how you interact with us, we may collect the following categories of personal information.

Website Enquiries

When you contact us through our website, email, telephone or another communication channel, we may collect:

• Your name
• Email address
• Telephone number
• Business or organisation name
• Website address
• Information submitted through our contact or quotation forms
• Details about the website or digital service you require
• Project requirements
• Budget or timing information you choose to provide
• The contents of your messages and correspondence with us

Client Information

If you become a client, we may collect:

• Your name and business contact information
• Business or trading information
• Billing information
• Contract and proposal information
• Project requirements
• Website content
• Logos, photographs and other client-supplied materials
• Products and services information
• Website domain and hosting information
• Project communications
• Revision and feedback records
• Support requests
• Website-care and maintenance records
• Details of authorised contacts working on your behalf

Where required for a project, we may also receive access to third-party systems or accounts that you authorise us to use.

You should avoid sending passwords or highly sensitive information by ordinary email or website contact form unless we have specifically requested it and provided an appropriate method for doing so.

Payment Information

JF Web Development may use Stripe or another authorised payment provider for invoices, one-off payments and recurring website-care subscriptions.

Depending on the payment method used, we may receive information such as:

• Customer name
• Billing contact information
• Invoice information
• Transaction identifiers
• Payment status
• Subscription status
• Limited payment-method information
• Refund or chargeback information

JF Web Development does not intentionally collect or store complete payment-card numbers or card security codes where those details are processed directly by Stripe or another payment provider.

Website and Technical Information

When you use jfwebdev.com, certain technical information may be generated automatically, including:

• IP address
• Browser type
• Device type
• Operating system
• Pages requested or visited
• Referral information
• Security logs
• Website error information
• Consent preferences
• Cookie or similar technology information

Please see our separate Cookie Policy for more information.

Sales and Prospect Information

Where permitted by law, we may maintain business prospect and sales information, including:

• Business contact details
• Business name
• Website
• Source of the lead
• Referral information
• Contact history
• Sales notes
• Appointment information
• Proposal status
• Follow-up information
• Services discussed
• Opt-out or suppression information

Information may come directly from you, your organisation, a referral or publicly available professional or business sources.

The fact that information is publicly available does not mean that it falls outside data-protection law.

JF Web Development maintains business profiles on social-media platforms.

Our official social-media pages are:

• Facebook: https://www.facebook.com/jfwebdev
• Instagram: https://www.instagram.com/jfwebdev/
• LinkedIn: https://www.linkedin.com/company/jfwebdevelopment/

If you contact us, follow us, comment on our content or otherwise interact with JF Web Development through one of these platforms, we may receive information such as your:

• Name
• Username or profile name
• Public profile information
• Message contents
• Comments
• Reactions
• Business information
• Other information you choose to provide

The relevant social-media provider will also process personal information independently in accordance with its own privacy policies, terms and platform settings.

JF Web Development does not control how Facebook/Meta, Instagram/Meta, LinkedIn or other third-party social platforms process information on their own services.

• Directly from you
• Through our website
• Through a contact or quotation form
• By telephone
• By email
• Through social media
• Through meetings or consultations
• When you sign a proposal, agreement or contract
• When you make a payment
• Through referrals
• Through your employer, business partner or authorised representative
• From publicly accessible professional or business sources where lawful
• From payment providers
• From our website, hosting, security and technical infrastructure
• From CRM, communications and project-management services we use

We only process personal information where we have an appropriate legal basis.

Responding to Enquiries and Quotations

We use contact information and project requirements to:

• Respond to enquiries
• Discuss potential projects
• Arrange consultations
• Prepare quotations or proposals
• Answer questions about our services

Our legal basis will normally be taking steps at your request before entering into a contract and/or our legitimate interest in managing genuine business enquiries.

Providing Web Design and Development Services

We may use client and project information to:

• Design websites
• Develop websites
• Configure integrations
• Test websites
• Provide website hosting or deployment support
• Provide website maintenance
• Provide website-care services
• Provide technical support
• Make requested website changes
• Manage project delivery
• Communicate with clients

Our legal basis will normally be performance of our contract with you and our legitimate interests in operating our business and providing secure and effective services.

Payments and Subscriptions

We use billing, transaction and subscription information to:

• Process payments
• Issue invoices
• Administer website-care subscriptions
• Monitor payment status
• Process refunds where applicable
• Prevent fraud
• Maintain accounting records
• Comply with tax and legal obligations

Our lawful bases may include performance of a contract, compliance with legal obligations and legitimate interests in payment administration and fraud prevention.

Website Security and Administration

Technical and security information may be used to:

• Operate our website
• Detect abuse
• Detect cyberattacks
• Prevent fraud
• Troubleshoot technical issues
• Maintain service availability
• Protect our systems and clients

We generally rely on our legitimate interests in securing and administering our website and services.

Where non-essential cookies or tracking technologies are involved, consent will be obtained where required.

Sales and CRM Administration

We may process appropriate business prospect information in order to:

• Manage our sales pipeline
• Maintain records of enquiries
• Follow up business enquiries
• Record proposals
• Record appointment outcomes
• Avoid contacting people who have opted out

We may rely on legitimate interests for appropriate business administration, subject to your rights and the separate rules that apply to electronic direct marketing.

Direct Marketing

Where required by law, we will obtain consent before sending electronic direct marketing.

Where an applicable existing-customer exception or another lawful provision permits marketing without fresh consent, we will only rely on that exception where its legal conditions are satisfied.

You may object to direct marketing at any time.

Where you opt out, we may retain a minimal suppression record so that we can remember and respect your request.

JF Web Development uses AI-assisted development and production tools in connection with web design, development, coding, testing, content preparation and related services.

This may include services such as Lovable and other development or AI technology providers where appropriate to a project.

AI is used as a development tool. JF Web Development remains responsible for determining project requirements, reviewing outputs, configuring integrations, testing work and delivering the agreed service.

We seek to minimise the amount of personal information included in AI prompts or development environments.

Clients should not send us:

• Payment-card information
• Government identification numbers
• Medical information
• Highly sensitive personal information
• Passwords or security credentials

unless we have specifically requested the information for a legitimate project purpose and provided an appropriate secure method.

If an AI chatbot or other AI interaction is made available directly through our website, users will be informed where required that they are interacting with an AI system.

During development, maintenance, hosting administration or troubleshooting of a client's website, JF Web Development may have access to information belonging to that client's customers or website users.

Examples may include:

• Contact-form submissions
• Booking information
• Customer accounts
• Website logs
• Order information
• Enquiry information

In these circumstances, the client will normally determine why and how the information is processed and will normally act as the data controller.

JF Web Development will normally act as a processor and will process the information only for authorised purposes, subject to the relevant client agreement and data-processing terms.

We do not sell or rent personal information to data brokers.

Where reasonably necessary, information may be shared with:

• Website hosting providers
• Domain and DNS providers
• Email providers
• CRM providers
• Project-management providers
• Security providers
• Backup providers
• Communications providers
• AI and development technology providers
• Lovable or related development infrastructure
• Stripe and other payment providers
• Analytics providers where lawfully enabled
• Authorised freelancers, contractors or sales personnel
• Accountants
• Solicitors
• Insurers
• IT and cybersecurity advisers
• Government bodies
• Revenue authorities
• Courts
• Regulators
• Law-enforcement authorities where legally required
• A purchaser or successor if the business is sold or reorganised

Access is limited to what is reasonably necessary for the relevant purpose.

Our website may contain links to external websites and third-party services.

This includes our social-media profiles on Facebook, Instagram and LinkedIn and may also include client websites, booking services, payment services or other external platforms.

Once you leave jfwebdev.com, the external provider's own privacy notice, cookie policy and terms may apply.

JF Web Development is not responsible for the privacy practices of independent third-party websites.

Some technology providers and their subprocessors may process information outside Ireland or elsewhere outside the European Economic Area.

Where GDPR rules relating to international transfers apply, appropriate safeguards will be used where required.

These may include:

• European Commission adequacy decisions
• Standard Contractual Clauses
• Other legally recognised transfer safeguards
• Appropriate supplementary safeguards where required

The particular arrangements can depend on the service provider and technology being used at the relevant time.

We do not retain personal information indefinitely.

Typical retention periods include:

Enquiries That Do Not Become Clients

Normally up to 24 months after the last meaningful contact, unless the information should be deleted sooner or needs to be retained for a dispute, compliance matter or legal claim.

Prospect and CRM Records

Retained while there is a legitimate sales or business purpose.

Records are reviewed periodically.

Minimal opt-out or suppression information may be retained for longer so that we can honour marketing objections.

Client Contracts, Invoices and Accounting Records

Normally retained for at least the period required by applicable Irish accounting and tax law, generally at least six years where applicable.

Information may be retained for longer where a transaction, dispute, investigation, appeal or legal proceeding remains ongoing.

Project Files and Communications

Retained during the client relationship and for a reasonable period afterwards for:

• Support
• Business continuity
• Record keeping
• Dispute management
• Legal claims

Non-essential working copies may be deleted earlier.

Website-Care Information and Backups

Retained while necessary to provide the relevant service and subsequently through the applicable backup and deletion cycle.

Security Logs

Generally retained for a relatively short operational period and ordinarily no longer than approximately 12 months unless needed to investigate a security incident, fraud, abuse or technical issue.

Cookie Consent Records

Cookie preferences may require reconfirmation periodically.

Evidence of consent or withdrawal may be retained where reasonably necessary to demonstrate compliance.

JF Web Development uses reasonable technical and organisational safeguards designed to protect personal information.

Depending on the relevant service, these may include:

• Password protection
• Unique user accounts
• Multi-factor authentication where available
• Access controls
• Least-privilege access
• Secure payment providers
• SSL/TLS encrypted connections
• Software and security updates
• Device security
• Backups
• Security monitoring
• Appropriate confidentiality obligations
• Access removal when contractors or personnel no longer require access

No website, cloud platform or internet-based system can be guaranteed to be completely secure.

Where a personal-data breach occurs, we will assess the incident and comply with applicable notification and remediation obligations.

Depending on the circumstances, GDPR may give you the right to:

Access

Request confirmation of whether we process your personal information and obtain a copy of relevant information.

Rectification

Ask us to correct inaccurate or incomplete personal information.

Erasure

Ask us to delete personal information where the legal requirements for erasure are satisfied.

Restriction

Ask us to restrict certain processing in appropriate circumstances.

Data Portability

Receive certain personal information in a structured, commonly used and machine-readable format where the right applies.

Object

Object to processing based on legitimate interests in appropriate circumstances.

You can object to direct marketing at any time.

Withdraw Consent

Where processing is based on consent, you can withdraw that consent at any time.

Withdrawal does not affect processing that was lawful before consent was withdrawn.

Automated Decision-Making Rights

You may have rights relating to decisions based solely on automated processing that produce legal or similarly significant effects.

JF Web Development does not currently intend to make significant customer or prospect decisions solely through automated decision-making.

To exercise a data-protection right, contact:

judson@jfwebdev.com

We may request reasonable information to verify your identity before disclosing, deleting or changing personal information.

Legal exceptions may apply to certain requests.

JF Web Development provides web development and related services primarily to businesses and business owners.

Our own services are not intentionally directed at children.

If we become aware that children's personal information has been collected in circumstances requiring additional protection or parental authorisation, we will review the information and take appropriate action.

JF Web Development may use cookies, local storage and similar technologies for website functionality, security, user preferences and, where enabled with the appropriate consent, analytics or marketing.

Non-essential analytics, advertising or tracking technologies will not be intentionally activated before obtaining consent where consent is legally required.

Full information is provided in our separate Cookie Policy.

If you have a concern about how JF Web Development handles your personal information, please contact us first so that we can investigate it.

Email: judson@jfwebdev.com
Telephone: +353 83 801 2877

You also have the right to raise a concern or complaint with the Irish Data Protection Commission.

You can also find JF Web Development at:

• Facebook
  https://www.facebook.com/jfwebdev
• Instagram
  https://www.instagram.com/jfwebdev/
• LinkedIn
  https://www.linkedin.com/company/jfwebdevelopment/

Please remember that messages or interactions made through these services are also processed by the relevant social-media provider.

For formal privacy or data-protection requests, we recommend contacting us directly at judson@jfwebdev.com.

We may update this Privacy Policy when our:

• Services change
• Website changes
• Technology providers change
• Payment systems change
• Analytics or marketing systems change
• AI tools change
• Legal obligations change
• Business operations change

The latest version will be made available on jfwebdev.com.

Material changes will be highlighted where appropriate.

For privacy questions, data-protection requests or questions about this policy: