Privacy Policy

Last updated: 2 September 2026

This policy explains what personal data Jupiter and the Giraffe (“we”, “us”, “our”) collects when you use this website, why we collect it, how long we keep it, and the rights you have over it. We are the data controller for the personal data described here, and we process it in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

If you have any questions about this policy or want to exercise any of your rights, contact us at contact@jupiterandthegiraffe.com.

What We Collect

Information you give us directly.When you complete the enquiry form on this site we collect your name, email address, and the details you choose to include about your project — the type of work, budget, timeline, and your message. When you apply for a role through our careers page we collect your name, email address, the position you are applying for, your rate, and your message. We only ask for what we need to reply to you.

Information collected automatically.Like most websites, we receive technical information when you visit — your IP address, browser type and version, device type, the pages you view, and the site or search that referred you. Where you have consented, this is supplemented by analytics cookies as described below.

We do not collect special category data, and we do not knowingly collect data from children. We do not sell your personal data, and we do not use it for automated decision-making or profiling.

Why We Use It, and Our Lawful Basis

  • To respond to your enquiry or application.Our lawful basis is legitimate interests — you have contacted us and expect a reply — or, where your enquiry leads to a proposal, the steps taken at your request prior to entering a contract.
  • To operate and secure the site. Our lawful basis is legitimate interests in keeping the site available, preventing spam and abuse, and diagnosing faults.
  • To understand how the site is used. Our lawful basis is your consent, given through the cookie banner. You can withdraw it at any time.

Cookies and Analytics

We use a small number of cookies and similar technologies. Cookies that are strictly necessary for the site to function, and to remember your cookie choice, are set without consent because the site cannot work properly without them.

Analytics and advertising cookies are set only after you accept them in the cookie banner. We use Google Tag Manager and Google Analytics, operating in Google’s consent mode: until you accept, analytics and advertising storage are denied and no analytics cookies are written. If you decline, or ignore the banner, we receive only aggregate, non-identifying measurement. Your choice is stored in your browser’s local storage and can be changed at any time by clearing your site data and reloading the page.

Google’s own handling of the data it receives is governed by its privacy policy.

Who We Share It With

We do not sell or rent personal data. We share it only with the service providers who help us run this site, each acting under contract and only on our instructions:

  • Vercel— website hosting and delivery.
  • Resend— delivery of the emails generated by our enquiry and application forms.
  • Cloudflare— the Turnstile check that protects our forms from automated abuse.
  • Google— tag management and analytics, where you have consented.

We may also disclose personal data where we are required to do so by law, or to establish, exercise or defend legal claims.

International Transfers

Some of these providers process data outside the UK. Where that happens, the transfer is covered by an appropriate safeguard under the UK GDPR — typically the UK International Data Transfer Addendum to the European Commission’s Standard Contractual Clauses, or a determination that the destination country offers an adequate level of protection.

How Long We Keep It

Enquiries and their related correspondence are kept for up to two years from our last contact with you, so that we can pick up a conversation where it left off. Job applications are kept for twelve months from the date of application unless you ask us to remove them sooner. Analytics data is retained according to the retention period set in Google Analytics. We delete or anonymise personal data once it is no longer needed for the purpose it was collected for.

Your Rights

Under the UK GDPR you have the right to:

  • ask for a copy of the personal data we hold about you;
  • ask us to correct data that is inaccurate or incomplete;
  • ask us to delete your data where there is no good reason for us to keep it;
  • object to, or ask us to restrict, our processing where we rely on legitimate interests;
  • ask us to transfer your data to you or another provider in a portable format; and
  • withdraw consent at any time where our processing relies on it.

To exercise any of these, email contact@jupiterandthegiraffe.com. We will respond within one month. If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk, though we would appreciate the chance to put things right first.

Security

This site is served over HTTPS, form submissions are protected by an automated abuse check, and access to the systems holding personal data is limited to those who need it. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we take reasonable and appropriate measures to protect your data.

Our Internal Tools and Google API Data

Separately from this website, we operate internal tools that use Google APIs to read our own business data — our YouTube Analytics figures and our AdSense payout history — so that we can track our own revenue. These tools access only our own accounts, with our own authorisation, and never the data of visitors to this site or of any other user. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Data retrieved this way is used solely to produce our internal revenue reporting, is not shared with third parties, and is not used for advertising.

Changes to This Policy

We may update this policy from time to time. The date at the top of this page shows when it was last revised, and any material change will be reflected there.