Privacy Policy
Who we are
JAR Automation provides automated customer follow-up services for appointment-based businesses across the UK. We help businesses collect more reviews, retain more customers, and follow up with every client automatically.
If you have any questions about how we handle your data, email info@jarautomation.co.uk.
What this policy covers
This policy covers how we handle data collected through our website (jarautomation.co.uk), specifically from visitors who get in touch via our contact form.
If you are a JAR client, the handling of your customers' personal data is covered separately by our Data Processing Agreement, which is provided during onboarding.
For JAR Results clients, customer data is also processed by Anthropic's AI to generate business analysis reports. This processing is covered in detail in the DPA. Customer data is sent to Anthropic's API for analysis only and is not stored or used by Anthropic for any other purpose.
What data we collect
When you fill in our contact form, we collect:
- Your name
- Your business name
- Your email address
- Your phone number
- Details about your business and what you're looking to solve
We don't collect anything from you just by visiting the website. We don't use tracking cookies, analytics tools, or advertising pixels.
Why we collect it
We use the information you give us in the contact form to:
- Understand your business and whether our service is a good fit
- Get in touch with you to discuss your needs
- Scope out what we could build for you
We process your data under legitimate interest. You've contacted us because you're interested in what we offer, and we use your details to have that conversation. Nothing more.
How the form works
Our contact form submissions are stored securely on our own infrastructure, hosted by Supabase. Your data is encrypted at rest and in transit. Only authorised JAR personnel have access to submissions.
Who we share your data with
We don't sell, rent, or share your data with anyone, except:
- Supabase, who hosts our database infrastructure
- Google (Gmail), where form notifications are delivered to us by email
No third parties have access to your submitted data beyond these operational processors.
If you become a client, a separate Data Processing Agreement covers how we handle your customer data.
How long we keep it
If we have a conversation and you decide not to go ahead, we'll delete your details within 90 days of our last contact unless you ask us to keep them on file.
If you become a client, we keep your contact details for the duration of our working relationship and 30 days after it ends, in line with our Data Processing Agreement.
Your rights
Under UK GDPR, you can:
- Ask what we hold on you
- Ask us to correct anything that's wrong
- Ask us to delete your data
- Withdraw consent or object to processing
- Complain to the ICO if you're not happy with how we've handled things (ico.org.uk)
To exercise any of these, email info@jarautomation.co.uk. We'll respond within 30 days.
Changes to this policy
If we update this policy, we'll change the date at the top. We won't make any major changes to how we use your data without making it clear on the website.