Who is responsible for your data

This website is run by Jaime Giraldo, an independent freelance web developer trading as JagpWeb. If you have any question about how your data is handled, or you want to exercise any of the rights listed below, write to contacto@jagpweb.com. I answer these myself, usually within a couple of days.

What data I collect

There are three ways this site collects anything about you, and the third only happens if you allow it.

1. The contact form

When you send an enquiry through the contact page, I receive:

  • Your name and email address, both required, because I cannot reply without them.
  • Your website URL, the platform you are interested in and your timeline, all optional.
  • The message you write, and whatever you choose to put in it.

Nothing else is collected and there are no hidden fields, apart from one invisible field used to catch automated spam, which no person ever fills in.

2. Technical data from visiting the page

Like any website, the server that delivers these pages receives your IP address and basic browser information as part of the request. This site also loads its typefaces from Google Fonts, which means your IP address reaches Google servers when a page loads. There is more detail on that in the Cookie Policy.

3. Analytics, only if you accept it

This site uses Google Analytics to count visits and see which pages get read. It loads with storage denied by default, so no analytics cookie is written unless you accept it in the banner. If you decline, or ignore the banner, nothing is collected. What is measured is aggregate and not used to identify you: pages viewed, approximate location by country, device type and how you arrived. IP addresses are anonymised by Google. There is no advertising and no profiling. The Cookie Policy lists the exact cookies and lets you change your choice at any time.

Why I process it, and on what legal basis

Your data is used for one purpose: to read your enquiry and reply to it, and to carry on that conversation if it turns into a project. It is not used to build a profile, it is not fed into advertising, and it is never sold.

The legal grounds for this are:

  • Your consent. You tick a box before sending the form. That is the authorisation required by Colombian Law 1581 of 2012, and the consent basis under Article 6(1)(a) of the GDPR for visitors in the European Union.
  • Pre-contractual steps. If your enquiry moves towards an actual project, processing your details becomes necessary to prepare and carry out that agreement.

Who else sees it

I work alone, so nobody on a team reads your message, because there is no team. Your data does pass through three service providers that make the website work:

Formspree
Delivers the contact form to my inbox and stores a copy of the submission. Formspree is based in the United States.
The hosting provider for this website
Stores the site files and keeps standard server access logs, which contain IP addresses.
Google Analytics
Measures aggregate site usage, and only if you accepted the analytics cookie. Google is based in the United States.

All three act as processors on my instructions. Beyond them, your information is disclosed to nobody, except where a court or a competent authority legally requires it.

International transfers

Because I operate from Colombia and the providers above are based in the United States, your data is processed outside the European Economic Area. Where the GDPR applies to you, those transfers rely on the safeguards the providers have in place, including the standard contractual clauses approved by the European Commission. You can ask me for the details at any time.

How long I keep it

Enquiries that do not turn into work are kept for up to two years, in case you come back to the conversation later. If we do work together, the records are kept for as long as the professional relationship lasts, and afterwards for whatever period accounting and tax rules require. You can ask me to delete your data sooner, and I will.

Your rights

Under Colombian Law 1581 of 2012 you have the right to know, update and rectify your personal data, to request proof of the authorisation you gave, to be told how it has been used, to complain to the authorities, and to revoke your authorisation or ask for deletion where the law allows it.

If you are in the European Union, the GDPR additionally gives you the rights of access, rectification, erasure, restriction of processing, objection, and data portability.

To exercise any of them, email contacto@jagpweb.com and say what you want done. There is no special form to fill in, you will get an answer within the legal deadlines, and it costs nothing.

Security

The site is served over HTTPS, so what you type into the form is encrypted in transit. The accounts involved are protected with strong, unique passwords and two-factor authentication where it is offered. No system is perfect and I will not pretend otherwise, but there is very little data here to lose in the first place.

Children

This is a business site offering professional services. It is not directed at children, and I do not knowingly collect data from anyone under 18.

Changes to this policy

If I add any new tool that touches your data, this page is updated before it goes live, and the date at the top changes with it. That is how the analytics above was handled: the policy and the consent banner came first, and nothing was switched on quietly.

Complaints

If you think your data has been mishandled, tell me first, because it is usually a misunderstanding I can fix quickly. If that does not resolve it, you can complain to the Superintendencia de Industria y Comercio, the data protection authority in Colombia. Visitors in the European Union may instead complain to the supervisory authority of the country where they live.