Privacy policy

1. About this policy

This policy explains how MJ Hub handles personal information about people who visit mjhub.co.uk, get in touch with us about a project, or send us their CV.

It doesn't cover information we handle for clients as part of a project, such as employee records held on an HR platform we build or run for a business. In those cases the client decides how that information is used and we act on their instructions, under the agreement we have with them.

2. Who we are

MJ Hub is a partnership between Marcel Mulders and Jessica Williams, based in Southampton, UK. We are the controller of the personal information described in this policy, which means we decide how it is used and are responsible for looking after it.

For anything to do with your personal information, please use our contact form, or email the address in the footer of this page.

3. The information we collect

When you contact us

The contact form asks for:

• Your name and email address, so we can reply.
• Your phone number, so we can arrange a call.
• Your company or venture, the area you're interested in, and your message.

If you email us directly, we receive your email address and whatever you put in the email.

If you send us your CV

If you email your CV to recruitment@mjhub.co.uk, we receive your CV, your email address and anything else you include. We use it only to consider you for current or future roles at MJ Hub, and only the people involved in hiring can see it. We don't share it with anyone outside MJ Hub.

If you become a client

Payments are handled by GoCardless, which collects and holds the bank and payment details needed to take them. We don't store your bank details ourselves: the personal information we hold is the contact request you send us.

Please don't include sensitive details, such as health information, in your message. We don't need them to reply.

When you visit the site

• Technical details. Like any website, ours receives your IP address, browser and device type, the pages you request and when. Cloudflare and GitHub use these to deliver the site and protect it.
• Spam protection. On our contact page, Cloudflare Turnstile checks your browser to tell people apart from bots before the form can be sent.

Our fonts and images are stored on our own site, so no other company is involved in showing them to you.

Only if you switch on analytics

Google Analytics records which pages you visit, how you found the site, your device and browser, and an approximate location worked out from your IP address. It links these visits together with a random ID stored in a cookie. None of this happens unless you choose to allow it.

4. Why we use it, and our legal reasons

UK data protection law says we need a lawful basis for each way we use your information. Ours are:

• Replying to your enquiry and discussing your project. Our legitimate interest in answering people who contact us, and, if you ask us for a quote, taking the steps needed before we agree to work together.
• Protecting the site and the contact form from spam and abuse. Our legitimate interest in keeping the site secure.
• Delivering the site. Our legitimate interest in running a website that works.
• Understanding how the site is used, through Google Analytics. Your consent, which you can withdraw at any time in Cookie settings.
• Considering you for a role, if you send us your CV. Our legitimate interest in recruiting, and the steps needed before offering you a job.
• Billing clients and taking payments. To carry out our agreement with you.
• Keeping business records if you become a client. Our legal obligations, for example for tax.

We don't sell your information, use it for advertising, or make decisions about you by automated means alone. We won't send you marketing unless you ask for it.

5. Who we share it with

Service providers

We use a small number of companies to run the site. They only use your information to provide their service to us.

• Cloudflare delivers and protects the site, runs the Turnstile spam check, and receives contact form submissions on our behalf. Cloudflare's privacy policy
• GitHub (part of Microsoft) hosts the site's files. GitHub's privacy statement
• GoCardless processes Direct Debit payments for clients, and holds the bank details needed to do so. GoCardless's privacy notice
• Google provides Google Analytics, only if you switch it on. Google's privacy policy

Enquiries are stored in our own system, which we build and run ourselves. No one outside MJ Hub has access to them.

When the law requires it

We may share information if we're legally required to, or if it's needed to protect our rights or someone's safety.

If the business changes hands

If MJ Hub is restructured or sold, your information may pass to whoever takes it on. They would have to keep using it in line with this policy.

Outside the UK

Cloudflare, GitHub and Google may process information in the United States and other countries. Where a provider moves personal information outside the UK, we rely on the UK's adequacy regulations, including the UK-US data bridge for US companies certified under it. Where that doesn't apply, we rely on the ICO-approved International Data Transfer Agreement or Addendum.

6. Children

Our site and services are for businesses and adults. They aren't aimed at anyone under 18, and we don't knowingly collect information from children. If you think a child has sent us their details, let us know and we'll delete them.

7. How long we keep it

• Enquiries that don't become a project: 12 months from our last contact, then deleted.
• CVs: 12 months from when you send it, then deleted. Ask us any time and we'll delete it sooner.
• Payment records: held by GoCardless under its own policy.
• Google Analytics data: up to 14 months, then deleted automatically by Google.
• Security logs: kept by Cloudflare for a short period, under its own policy.
• Your cookie choice: 12 months in your browser, after which we ask again.

8. Keeping it secure

The whole site is served over an encrypted connection (HTTPS), and the contact form is protected against automated abuse. Only the MJ Hub team can see enquiries, and only those who need to.

No system is completely secure, and email in particular isn't. Please don't send anything through the form or by email that you'd be uncomfortable with someone else seeing.

9. Your rights

You have the right to:

• Access a copy of the information we hold about you.
• Correct anything that's wrong or incomplete.
• Delete your information, where we no longer have a good reason to keep it.
• Restrict how we use it while a concern is looked into.
• Object to us using it on the basis of our legitimate interests.
• Move information you gave us to another organisation, in a common format.
• Withdraw consent for analytics at any time, in Cookie settings.

To use any of these rights, send us a message through the contact form. It's free, and we'll reply within one month. We may ask you to confirm who you are first.

If you're unhappy with how we've handled your information, please tell us so we can try to put it right. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

10. Cookies and browser storage

Cookies are small files a website stores in your browser. We only use the ones we need, unless you choose to allow analytics.

Necessary

These keep the site secure and are always on.

• __cf_bm, set by Cloudflare to tell people apart from bots. It lasts 30 minutes.
• cf_clearance, set by Cloudflare if your browser passes a security check, so you aren't asked again straight away. It lasts up to 30 minutes.
• Cloudflare Turnstile runs from Cloudflare's own domain on our contact page, and may store information there to complete its check.

Statistics and analytics

These are off unless you switch them on.

• _ga and _ga_<ID>, set by Google Analytics to recognise repeat visits. They last up to 2 years. If you switch analytics off, we delete them and tell Google Analytics to stop sending data.

Browser storage

• mjhub-cookie-consent remembers your cookie choice and when you made it. It is kept for 12 months, or until you clear your browser's site data.

You can change your choice whenever you like.

11. Changes to this policy

We'll update this policy when the way we handle information changes, and change the date at the top. If a change makes a real difference to you, such as a new kind of cookie, we'll ask for your cookie choice again.