Legal
Privacy Policy
This Privacy Policy explains how personal information is handled on dijan.co (the "site"). It reflects the technologies and processing actually in place today. When we introduce new processing — for example the Meta Pixel for advertising and audience measurement — this Policy and the Cookie Policy will be updated at the same time.
1. Who we are (Controller)
The controller of your personal information for this site is [FOR CLIENT CONFIRMATION: legal name of the controller], registered at [FOR CLIENT CONFIRMATION: registered postal address]. You can contact us about privacy matters via our contact form or by email at [FOR CLIENT CONFIRMATION: privacy contact email].
2. What we collect and why
The site processes personal information in the following ways:
- Contact-form submissions. When you send a message through /contact we collect your first name, last name, email address, subject and message. We use this information to respond to your enquiry. Submissions are stored via our hosting backend (Supabase).
- Your privacy choices. When you make a choice in the consent banner or preferences panel, we store your choice in your browser's local storage under the key
dijan.consent.v1. This is essential to remember your preferences on future visits. - Marketing technologies (when consent is granted). If you grant marketing consent, the site loads the Meta Pixel, which uses cookies and pixel requests to measure advertising performance and to build audiences for advertising campaigns run through Meta.
The site does not sell personal information. We do not run any analytics provider at the time of this update.
3. Lawful bases
- Contact-form submissions: taking steps at your request prior to entering into a possible engagement, and our legitimate interest in responding to enquiries (Art. 6(1)(b) and (f) GDPR / equivalent).
- Storing your privacy choices: our legitimate interest in respecting and honouring your privacy choices (Art. 6(1)(f) GDPR).
- Analytics and marketing technologies: your consent (Art. 6(1)(a) GDPR / equivalent). You can withdraw this consent at any time.
4. Recipients and processors
We share personal information only with the following categories of recipient:
- Supabase — hosting backend used to store contact-form submissions on our behalf.
- Meta Platforms Ireland Limited — only when you grant marketing consent and the Meta Pixel is active on the site.
- [FOR CLIENT CONFIRMATION: any additional processors — e.g. email service provider, calendar tool, payment provider].
5. International transfers
Some of our processors are located outside your country of residence. Where personal information is transferred internationally it is protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses, in line with each processor's data-processing terms. [FOR CLIENT CONFIRMATION: confirm the transfer mechanism used with Supabase and, once active, Meta].
6. Retention
- Contact-form submissions are kept for [FOR CLIENT CONFIRMATION: retention period] after our last correspondence with you, unless a longer period is required by law or is necessary to establish, exercise or defend legal claims.
- Your privacy-choice record is kept locally in your browser until you clear browser storage or change your choices.
- Marketing-technology data, when active, is retained by the third party in line with their retention policy (linked from the Cookie Policy when active).
7. Your rights
Subject to applicable law, you have the right to: request access to your personal information; request rectification or erasure; ask us to restrict processing; object to processing; request portability; and withdraw any consent you have given at any time. To exercise any of these rights, contact us via our contact form or at [FOR CLIENT CONFIRMATION: privacy contact email].
8. Withdrawing consent
You can change or withdraw your consent to analytics and marketing technologies at any time via the Cookie Preferences link in the site footer. Withdrawal takes effect immediately for future processing and does not affect the lawfulness of processing based on your consent before it was withdrawn.
9. Complaints
You have the right to lodge a complaint with a supervisory authority. The competent authority for this site is [FOR CLIENT CONFIRMATION: supervisory authority name for the controller's jurisdiction].
10. Changes to this policy
We may update this Policy from time to time. When we do, we will update the "Last updated" date above. Where changes are material — for example when we begin processing personal information for a new purpose — we will make that clear on the site and, where appropriate, ask for a fresh consent choice.