Privacy Policy

Effective date: 26 March 2026

This Privacy Policy explains how Jade Vault Ltd ("we", "us", or "our"), a company registered in England and Wales, collects, uses, and protects your personal information when you visit our website at jadevault.com (the "Website").

We are committed to protecting your privacy and handling your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Jade Vault Ltd is the data controller for personal information collected through this Website. If you have any questions about how we handle your data, please contact us at info@jadevault.com.

2. What Information We Collect

We may collect the following types of information:

• Contact information — such as your name and email address if you contact us directly (e.g. by emailing info@jadevault.com).
• Usage data — information about how you interact with our Website, including your IP address, browser type, pages visited, and time spent on pages. This may be collected automatically via cookies or analytics tools.
• Communications — any information you provide when you communicate with us by email or other means.

3. How We Use Your Information

We use your information to:

• Respond to your enquiries and communicate with you.
• Understand how the Website is used and improve its content and functionality.
• Comply with our legal obligations.

We will not use your information for marketing purposes without your explicit consent, and we will never sell your personal data to third parties.

4. Legal Basis for Processing

We process your personal data on the following legal bases:

• Legitimate interests — for responding to enquiries, where these interests are not overridden by your rights.
• Consent — for analytics cookies (Google Analytics), which are only activated if you accept via our cookie banner. You may withdraw this consent at any time.
• Legal obligation — where we are required to process data to comply with applicable law.

5. Cookies & Analytics

We use Google Analytics to collect anonymous data about how visitors find and use our Website. This may include pages visited, time spent on the site, approximate location (country/region), browser type, and device type. This data is aggregated and does not identify you personally.

Google Analytics cookies are only placed on your device if you explicitly accept via our cookie consent banner. If you decline, no analytics cookies are set and no data is sent to Google.

You can withdraw your consent at any time by clicking Cookie Settings in the footer of any page on our Website. You can also opt out of Google Analytics across all websites using Google's opt-out browser add-on.

We do not use cookies for advertising, remarketing, or any purpose beyond the analytics described above.

6. Third-Party Services

We use the following third-party services that may process limited personal data on our behalf:

• Google Analytics — website analytics. Data is processed in accordance with Google's Privacy Policy. Analytics data is only collected with your consent.
• Resend — email delivery service used to receive messages submitted via our contact form. Your name and email address are transmitted to Resend solely for the purpose of delivering your message to us and are not used for any other purpose.
• Web hosting — our Website is hosted on servers that may log standard access data (IP address, request time) for security and operational purposes.

All third-party providers are required to handle data securely and in compliance with applicable data protection law.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Email correspondence is typically retained for up to 3 years unless a longer period is legally required.

8. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Right of access — to request a copy of the personal data we hold about you.
• Right to rectification — to request correction of inaccurate or incomplete data.
• Right to erasure — to request deletion of your personal data in certain circumstances.
• Right to restriction — to request that we limit how we use your data.
• Right to data portability — to receive your data in a structured, machine-readable format.
• Right to object — to object to processing based on legitimate interests.

To exercise any of these rights, please contact us at info@jadevault.com. We will respond within one month.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated policy on this page with a revised effective date. We encourage you to review this page periodically.

11. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at info@jadevault.com.