Who we are
FJSOne Ltd is the data controller responsible for the personal information described in this notice. We are registered in Cyprus under company registration number HE392715. Our registered office is Vasileos Evagorou 2, Kalmby Court, Apartment No. 103b, 6023 Larnaca, Cyprus.
Contact FJSOne Ltd at privacy@fjsone.com about your information or this notice. This notice covers visits to our website, website and free website health-check enquiries, and the related correspondence. A project involving access to a client’s customer data may require separate data-processing terms.
Information we use
When you contact us, we receive the details you provide, such as your name, business name, email address, telephone number, website address, the help you are looking for and your message. We also keep relevant follow-up correspondence. A website health check may involve reviewing the public business website you ask us to assess.
Our website hosting service processes connection and security information, such as IP addresses and request logs, to deliver and protect the website. This is separate from advertising or visitor analytics.
Provide a name and at least one usable contact method so we can respond. The form identifies any other required fields. Business details, a phone number where another contact method is supplied, and a message are optional unless indicated otherwise; a health-check request needs the website address. Without the details needed for a request, we may be unable to respond or carry out the check.
Please avoid sending passwords, payment-card details, health information or other sensitive personal information through the enquiry form.
Why we use information
We use enquiry and correspondence details to answer questions, understand requirements and prepare the next steps you request. If you are considering entering a contract personally, we rely on taking steps at your request before a contract. For enquiries made on behalf of a company, or other business correspondence, we rely on our legitimate interests in communicating with prospective customers and running our business, balanced against your rights.
We use necessary technical information for our legitimate interests in delivering a reliable website, preventing misuse and investigating faults. We may keep information where required by a legal obligation, or where necessary for our legitimate interests in establishing, exercising or defending legal claims.
Sending an enquiry does not subscribe you to marketing. If we introduce an optional mailing list, we will explain it separately, apply the relevant consent rules and provide a way to stop those messages.
Service providers and other recipients
FJSOne Ltd uses its business systems to manage and answer enquiries. Your enquiry is reviewed by authorised team members, with access limited to people who need the information to respond or provide our services. Form submissions are held in our Supabase-managed enquiry database, hosted in Ireland. Resend sends email notifications of form submissions to our team, processing the submitted details and email delivery information for that purpose. Vercel hosts the website and handles connection and security information. Google Workspace processes business email correspondence and the working documents we store in Google Drive.
If you contact us through WhatsApp, we use the WhatsApp Business app to manage the conversation. WhatsApp chat backups are configured to use a Google Account with end-to-end encrypted backup enabled. WhatsApp also processes information under its own applicable privacy arrangements. If you call or text our business number, we receive your telephone number and the information you choose to provide. Communications are handled through the relevant telephone or messaging service. We do not currently record business calls. Email and the enquiry form remain alternative contact routes.
We may use OpenAI’s Codex to inspect websites and help prepare website assessments. This can involve information published on the website being assessed, including business contact details. Material supplied to Codex is processed by OpenAI; using the app on our computers does not mean that all processing stays on those computers. Our team reviews the assessment and remains responsible for the advice we provide.
Providers process information to deliver their services, subject to their applicable contractual and privacy arrangements. We may also disclose relevant information to professional advisers or public authorities where necessary for advice, legal obligations or legal claims. We do not sell your enquiry information.
Processing outside the EEA
Some of our providers and their support teams operate internationally, so personal information may be processed outside Cyprus and the European Economic Area.
Our enquiry database is hosted in Ireland. Supabase’s standard arrangements also involve its Singapore entity and international support/operations, including its US affiliate, with relevant transfers covered by Standard Contractual Clauses in its Data Processing Addendum.
Vercel’s hosting infrastructure includes processing in the United States and other countries where it and its subprocessors operate. Its Data Processing Addendum includes EU-approved Standard Contractual Clauses for relevant transfers.
We use Resend’s Ireland sending region for enquiry notifications. Resend and its service providers may also process information in the United States or other countries. Its Data Processing Addendum describes the applicable safeguards for international transfers, including Standard Contractual Clauses.
Our Google Workspace account is configured for Europe for covered data at rest. This does not mean that all Google processing or support takes place in Europe, or establish where WhatsApp backups are stored. Google’s Cloud Data Processing Addendum and published transfer frameworks describe the applicable safeguards, including Standard Contractual Clauses and recognised adequacy arrangements.
WhatsApp’s European business-transfer terms describe transfers to WhatsApp LLC and Meta Platforms Inc. in the United States under the EU–US Data Privacy Framework, with alternative safeguards where applicable. Google provides the storage used for our encrypted WhatsApp backups under its applicable service arrangements.
OpenAI processes material supplied to Codex under the terms and privacy arrangements for the account used. We do not promise that AI assessment processing takes place only in Cyprus or the EEA.
You can ask privacy@fjsone.com for further information about international processing and copies or details of the relevant safeguards. Provider information is available through Supabase’s Data Processing Addendum, Vercel’s Data Processing Addendum, Resend’s Data Processing Addendum, Google’s Cloud Data Processing Addendum and transfer frameworks, and WhatsApp’s Business Data Transfer Addendum.
How long we keep information
Enquiries that do not become customer relationships: we keep the enquiry and relevant correspondence for 12 months after our last meaningful conversation, unless the discussion is still active or a specific legal obligation, investigation or dispute requires longer retention.
Essential customer records: we keep contracts, agreed scope, approvals and necessary correspondence while providing services, including ongoing hosting or support, and for six years after the customer relationship ends. We remove unnecessary drafts, duplicates and access credentials earlier.
Accounting and tax evidence: we retain the necessary invoices, transaction records and supporting documents for the applicable statutory period. Under the current Cyprus tax rules, this is at least six years from the latest applicable tax-return or revised-return deadline or actual submission date, with any further retention required by applicable law. This period can extend beyond the customer-record period.
Technical logs and backups: hosting logs are retained under the relevant service’s schedules and settings for website delivery, security and troubleshooting. Our enquiry database’s current Pro plan provides access to the last seven days of daily backups. Other backup copies, including WhatsApp backups, may remain after an active record is removed until the relevant backup is replaced, expires or is deleted. Retention depends on the backup service and settings, recovery needs and any applicable legal requirement; we do not promise that all copies disappear immediately when an active record is deleted.
Security
We use access controls and appropriate technical and organisational measures to protect personal information, and limit access to people who need it for their work. No online service can guarantee complete security.
Your rights
Depending on the circumstances, you can ask for access to your personal information, correction, erasure, restriction or a portable copy. You can object to processing based on legitimate interests. If processing relies on your consent, you can withdraw it without affecting earlier lawful processing. You can object to direct marketing at any time.
Email privacy@fjsone.com to make a request. We may ask for enough information to confirm your identity safely. We normally respond within one month. Where a lawful extension is needed because of the complexity or number of requests, we will tell you within that month and explain why. Rights are subject to the conditions and exceptions in data protection law.
You may complain to the Cyprus Commissioner for Personal Data Protection. You may also complain to a competent supervisory authority where you live or work, or where the alleged infringement occurred. Contacting us first can help resolve a concern, but is not a condition of your right to complain.
Cyprus complaints: https://www.gov.cy/dataprotection/en/information-for-the-public/lodge-a-complaint/
Cookies and similar technologies
We do not currently use visitor analytics, advertising trackers or session replay tools on this website. Fonts and images are served with the website, and we do not embed third-party videos or maps.
Browsing this website and choosing a currency do not set cookies or save preferences in localStorage or sessionStorage. Your currency choice is kept only in the current page’s memory and returns to GBP when the page is reloaded.
Our hosting provider processes technical connection information to deliver and protect the website, and information you submit through the enquiry form is sent to our enquiry provider as described above. Using no browsing cookies does not mean that no personal information is processed. If you follow a WhatsApp or other external link, the external service’s own privacy and cookie arrangements apply.
Changes to this notice
We will update this notice when our website or information handling changes and show the revised date at the top. If we introduce cookies or similar technologies that require your consent, we will explain their purposes and provide the required choices before they are used.