Privacy Policy

This Privacy Policy describes how 3cj-marketing.com (“we,” “us,” or “our”) collects, uses, stores, and shares personal data when you visit the Site, send us email, or interact with lightweight technologies such as cookies and local storage. We aim to meet the transparency expectations of the UK General Data Protection Regulation (UK GDPR) as tailored by the Data Protection Act 2018, and to respect the Privacy and Electronic Communications Regulations (PECR) where they apply to terminal equipment.

Who is responsible for your data

The data controller responsible for personal data processed through this Site is the publishing entity operating 3cj-marketing.com. For data protection correspondence, including subject access requests, please email info@3cj-marketing.com with “Data Protection” in the subject line. We will verify your identity before disclosing personal data in response to a request, in line with ICO guidance.

Categories of personal data we may process

Depending on how you use the Site, we may process: (a) technical and usage data such as IP address, approximate geographic area derived from IP, browser type and version, operating system, device type, screen resolution, referring URL, pages viewed, timestamps, and diagnostic error codes; (b) communications data including your email address, message body, attachments you choose to send, and metadata generated by mail servers; (c) preference signals you set through our cookie banner, which may be stored locally in your browser; (d) aggregated or de-identified analytics derived from the above where individual identification is no longer reasonably likely.

Purposes and lawful bases

We process technical and security data to deliver the Site, to detect and prevent malicious traffic, to maintain backups, and to troubleshoot outages. Where this processing is strictly necessary to provide the information service you request, we rely on performance of a contract or legitimate interests in operating a secure website, balanced against your rights. When you email us voluntarily, we process your contact details and message content to respond to your enquiry, relying on legitimate interests and, where appropriate, your implied consent for follow-up correspondence. Where we are legally obliged to retain records, we rely on legal obligation.

Cookies, local storage, and similar technologies

We use a minimal set of technologies described in our Cookie Policy. Session identifiers or integrity tokens may be strictly necessary to serve pages through our hosting stack. The cookie banner stores acceptance or rejection choices in local storage where supported. We do not deploy third-party advertising trackers on this Site. If you follow outbound links to operators or social networks, those parties will apply their own notices.

Automated decision-making and profiling

We do not use personal data for automated decisions that produce legal or similarly significant effects on individuals. We may use simple rules-based filters to block abusive traffic; those measures do not constitute profiling within the meaning of Article 22 UK GDPR in respect of human readers.

Sharing and recipients

We use infrastructure providers such as hosting companies, content delivery networks, and email transport services. Those processors access personal data only on documented instructions and under written terms that require appropriate technical and organisational measures. We may disclose information if required by court order, regulatory demand, or to establish, exercise, or defend legal claims. We do not sell personal data.

International transfers

Where personal data is transferred outside the United Kingdom, we implement safeguards recognised under UK law, such as the UK International Data Transfer Agreement or Addendum, or adequacy regulations where applicable. You may request a copy of relevant transfer mechanisms by contacting us.

Retention

Server logs are retained for a limited rolling window sufficient for security investigations unless a longer period is justified by incident response. Email correspondence is kept for as long as needed to complete your request and for a reasonable period afterwards to manage follow-up queries, unless a longer retention is required by law or litigation hold. Aggregated statistics may be stored indefinitely where no individual is identifiable.

Security

We implement administrative, technical, and physical safeguards appropriate to the risk, including access controls, transport encryption where supported by your connection, patching, and monitoring. No online service can be guaranteed perfectly secure; you should protect your own devices with updates and malware protection.

Your rights

If UK GDPR applies, you may have the right to access, rectify, erase, restrict processing, object to processing based on legitimate interests, and request data portability in certain circumstances. You may withdraw consent where processing is consent-based without affecting the lawfulness of prior processing. You may lodge a complaint with the Information Commissioner’s Office (ICO). We will respond to rights requests within one month unless extension is permitted by law.

Children

The Site addresses adults aged eighteen or over. We do not knowingly collect personal data from children. If you believe a minor has provided data, contact us and we will take steps to delete it promptly where feasible.

Changes to this policy

We may update this Privacy Policy to reflect operational, legal, or regulatory changes. Material changes will be highlighted on this page or through the cookie banner where appropriate. Continued use after updates constitutes notice of the revised policy where permitted by law.

Contact

For privacy questions or to exercise your rights, email info@3cj-marketing.com. For regulatory matters unrelated to personal data, you may also use the Contact page.