Legal

Privacy Policy

Last updated 21 October 2026.

Who we are

This website is run by JS Digital, a web studio based in Greece. If you have a question about this policy or about your data, write to us at info@jsdigital.ai.

We’re responsible for the personal data described below (the “data controller”) under the EU General Data Protection Regulation (GDPR) and Greek Law 4624/2019.

What we collect

We only collect what we need:

• What you send us: your name, email address, phone number and message, when you get in touch about a project.
• Technical data: your IP address, browser, device type and the pages you visit. Our hosting provider records this in standard server logs.
• Analytics: only if you agree to it. See our Cookie Policy.

We don’t buy personal data, and we don’t collect sensitive data such as health, religious or political information.

Why we use it

• To reply to you: because you asked us to, before any agreement is in place, and because we have a legitimate interest in answering enquiries (Art. 6(1)(b) and (f) GDPR).
• To deliver work you’ve asked us for: to carry out our agreement with you (Art. 6(1)(b)).
• To keep the site secure and working: our legitimate interest (Art. 6(1)(f)).
• To see how the site is used: only with your consent (Art. 6(1)(a)), which you can withdraw at any time.
• To meet accounting and tax obligations: because the law requires it (Art. 6(1)(c)).

How long we keep it

If your enquiry doesn’t turn into a project, we delete it within 24 months. Project records are kept while we work together and afterwards for as long as Greek tax law requires. Server logs are kept by our host for a limited time, for security. If we ever switch on analytics, we’ll state the retention period here.

Who else sees it

We use a small number of trusted providers to run the site, and each one is bound by a data processing agreement:

• Our hosting provider, which hosts the website, its server logs and our email.
• An analytics provider, only if you’ve given your consent.

We never sell your data or share it for advertising. If a provider handles data outside the European Economic Area, the transfer is covered by the European Commission’s Standard Contractual Clauses or another safeguard the GDPR recognises.

Your rights

You can ask us for a copy of your data, ask us to correct or delete it, ask us to limit how we use it, object to us using it, or ask us to send it to another provider. Where we rely on your consent, you can withdraw it at any time, and that won’t affect anything we did before you withdrew it. Just write to info@jsdigital.ai and we’ll reply within one month.

If you think we’ve mishandled your data, you can also complain to the Hellenic Data Protection Authority (dpa.gr), Kifissias 1-3, 115 23 Athens.

Security

The site runs over HTTPS, and only the people who need your enquiry to reply to you can see it. No system is perfectly secure, but we keep as little data as possible, so there’s less to protect.

Changes

If we change this policy in a meaningful way, we’ll update it here and change the date at the top of the page.