Privacy Policy

Last updated: January 2026

1. Introduction

At joyportl ("we", "our", or "us"), we are deeply committed to protecting your privacy and ensuring the security of your personal data. This comprehensive Privacy Policy outlines how we collect, use, store, share, and safeguard personal information obtained through our website, joyportl.cfd, in compliance with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the EU GDPR.

2. Information Collection

We practice the principle of data minimisation, collecting only what is strictly necessary for our operational requirements. We may collect the following categories of information:

• Information you provide voluntarily: Personal data submitted via our contact forms, such as your Name, Work Email Address, Organisation Type, and the specific details of your message or business enquiry.
• Automatically collected data: When you visit and interact with our site, we automatically collect standard technical log data. This includes your IP address, browser type and version, time zone setting, operating system, and data on how you navigate our pages. This information is essential for ensuring website security and optimizing user experience.

3. Purpose Limitation & Legal Basis for Processing

We process your personal data based on lawful grounds. Information submitted through our contact forms is used strictly for the purpose of responding to your business enquiries and evaluating potential consulting engagements. The legal bases for this processing include:

• Consent: When you voluntarily submit your details requesting us to contact you.
• Legitimate Interests: To maintain and improve our website's performance, secure our infrastructure against malicious activity, and conduct basic analytics.
• Contractual Necessity: Should your enquiry lead to a formal consulting agreement, processing your data is necessary for the performance of that contract.

We absolutely do not use this data for automated, unsolicited marketing, nor do we sell, rent, or trade your personal information to any third parties.

4. Data Storage and International Transfers

joyportl is headquartered in Helsinki, Finland, while primarily servicing clients in the United Kingdom. As such, your personal data may be transferred to, stored, and processed in Finland (within the European Economic Area). We ensure that any international transfers of personal data between the UK and the EU comply with adequacy decisions and appropriate safeguards as mandated by the UK GDPR and EU GDPR.

5. Data Retention Periods

We retain your contact information only for as long as is necessary to resolve your enquiry or maintain an active business relationship. If no formal business relationship is established, general enquiries and associated personal data are safely and permanently deleted from our systems within 12 months of the last point of contact.

6. Data Security Measures

We implement robust technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include secure server hosting, encryption in transit (HTTPS/TLS), and strict access controls for our personnel. However, please acknowledge that no internet-based transmission can be guaranteed to be 100% secure.

7. Third-Party Data Sharing

Your personal data remains confidential. We do not share your information with third parties except under the following strict conditions:

• Service Providers: Trusted third-party vendors who assist us in operating our website and conducting our business (e.g., secure hosting providers, email delivery services), subject to strict data processing agreements.
• Legal Obligations: When explicitly required by law, regulation, or legal process to cooperate with law enforcement or regulatory authorities.

8. Your Rights Under GDPR

Under both the UK GDPR and EU GDPR, you are granted extensive rights regarding your personal data. You have the right to:

• Be Informed: Know how and why your data is being processed (as detailed in this policy).
• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of any inaccurate or incomplete personal data.
• Erasure: Request the deletion of your personal data (the "right to be forgotten"), subject to certain legal exceptions.
• Restrict Processing: Request a temporary halt to the processing of your data.
• Data Portability: Obtain and reuse your personal data across different services.
• Object: Object to processing based on legitimate interests or direct marketing.

To exercise any of these rights, please reach out to us via the contact form on our website or by writing to our headquarters in Helsinki. We will respond to all legitimate requests within 30 days.

9. Children's Privacy

Our website and services are intended exclusively for professionals and business entities. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that we have inadvertently collected data from a minor, we will take immediate steps to delete such information.

10. Changes to this Privacy Policy

We may periodically update this Privacy Policy to reflect changes in our operational practices, legal requirements, or technological advancements. Any substantial modifications will be posted prominently on this page, accompanied by an updated "Last updated" date. We encourage you to review this policy periodically.