Privacy Policy

2. Data Controller

Jara Technologies Limited is the data controller responsible for your personal data. If you have any questions about this Privacy Policy or our data practices, you can contact us using the details provided at the end of this document.

3. Information We Collect

We may collect and process the following categories of personal data:

• Identity Data: Name, job title, company name.
• Contact Data: Email address, phone number, business address.
• Technical Data: IP address, browser type and version, operating system, time zone setting, device information, and website usage data collected via cookies and analytics tools.
• Service Data: System logs, performance metrics, and infrastructure data required for service delivery under contract.
• Communications Data: Records of correspondence when you contact us via email, phone, or through our website.

4. Lawful Basis for Processing

Under the UK GDPR, we rely on the following lawful bases to process your personal data:

• Consent: Where you have given clear consent for us to process your personal data for specific purposes (e.g., analytics cookies, marketing communications).
• Contract: Where processing is necessary for the performance of a contract with you or to take pre-contractual steps at your request.
• Legitimate Interests: Where processing is necessary for our legitimate business interests (e.g., improving our services, website security), provided these are not overridden by your rights.
• Legal Obligation: Where processing is necessary to comply with a legal or regulatory obligation.

5. How We Use Your Information

We use the collected information for the following purposes:

• To provide, maintain, and improve our enterprise IT and software development services.
• To respond to service inquiries and provide tailored technical consultations.
• To process payments and manage client accounts.
• To improve our website functionality and user experience.
• To send service updates and, where you have opted in, marketing communications.
• To comply with legal and regulatory obligations.
• To detect, prevent, and address technical issues and security threats.

6. Cookies & Analytics

Our website uses cookies and similar tracking technologies. Cookies are small data files placed on your device that help us improve your experience and understand website usage patterns.

We use the following types of cookies:

• Strictly Necessary Cookies: Essential for the website to function correctly. These cannot be disabled.
• Analytics Cookies: We use Google Analytics to collect anonymised data about how visitors use our site, including pages visited, time spent, and traffic sources. This data helps us improve our website. Google Analytics uses cookies to identify unique users without personally identifying them.

You can manage your cookie preferences at any time through your browser settings. Rejecting non-essential cookies will not affect the core functionality of our website. For more information on how Google processes data, please visit Google's Privacy Policy.

7. Data Sharing & Third Parties

We do not sell your personal data. We may share your data with:

• Service Providers: Trusted third-party providers who assist in delivering our services (e.g., cloud hosting, payment processing, analytics). These providers are contractually bound to process data only on our instructions and in compliance with UK GDPR.
• Legal Authorities: Where required by law, regulation, or legal proceedings.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.

8. International Data Transfers

Where we transfer personal data outside the United Kingdom, we ensure appropriate safeguards are in place in accordance with UK GDPR, including the use of Standard Contractual Clauses (SCCs) or transfers to countries with an adequacy decision from the UK Secretary of State.

9. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. When data is no longer required, it is securely deleted or anonymised.

• Client contract data is retained for 6 years after contract termination (in line with UK limitation periods).
• Website analytics data is retained for up to 26 months.
• Marketing consent records are retained until consent is withdrawn.

10. Data Security

As a UK-based IT security provider, we implement robust, industry-leading security measures to protect your data, including end-to-end encryption, strict access controls, regular external audits, and secure data storage. We maintain appropriate technical and organisational measures to prevent unauthorised access, alteration, disclosure, or destruction of your personal data.

11. Your Rights Under UK GDPR

Under the UK GDPR and the Data Protection Act 2018, you have the following rights:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your data where there is no compelling reason for continued processing.
• Right to Restrict Processing: Request limitation of processing in certain circumstances.
• Right to Data Portability: Request transfer of your data to another controller in a structured, commonly used format.
• Right to Object: Object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us using the details below. We will respond to your request within one month, as required by law.

12. Right to Complain

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection:

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any material changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.