Privacy Policy

1. Who we are

CJ TEAMS LIMITED ("we", "us", "our") operates cjsimple.com as a brand site of CJ TEAMS, and is the data controller for personal data collected through this website.

2. What data we collect

Information you provide

• Contact form / enquiries: name, email address, company (optional), and message content.
• Site assistant (chat): the messages you type into the assistant, and any contact details you choose to give it. Please do not enter payment details, passwords or sensitive personal data in the chat.

Information collected automatically

• Analytics cookies (Google Analytics 4): page views, session duration, approximate location (country/city level), device type, referrer. Only set after you accept cookies.
• Server logs: IP address, user agent, request timestamps (held by AWS Amplify for security and abuse prevention).

3. Why we use your data (lawful basis)

• To respond to enquiries — legitimate interest (responding to a request you initiated). This covers both the contact form and the site assistant.
• To measure site usage — consent (you can accept or decline cookies via the banner).
• To detect abuse and secure the site — legitimate interest.

4. Cookies

We use Google Consent Mode v2: analytics cookies are denied by default and only loaded if you click Accept on the cookie banner. You can change your preference at any time by clearing the cookie_consent entry in your browser's local storage and reloading the page.

• _ga, _ga_* (Google Analytics) — up to 2 years.
• cookie_consent (local storage, this site) — until cleared.

5. Sharing your data

We do not sell your personal data. We share data only with the following processors who help us operate the site:

• Google LLC — Google Analytics 4 (anonymised, IP truncation enabled).
• Amazon Web Services (AWS) — hosting and content delivery (Amplify, CloudFront).
• Amazon Web Services (AWS) — Amazon Bedrock — the model that powers the site assistant. Chat requests are handled from our London (eu-west-2) environment and are processed on AWS infrastructure within the UK or the EU. They are not used to train the underlying models.

These providers may transfer data outside the UK/EEA. Transfers are protected by Standard Contractual Clauses or equivalent safeguards. Site assistant conversations are processed within the UK or the EU and stored in the UK.

6. How long we keep data

• Contact enquiries: up to 24 months from last contact, then deleted unless an active engagement exists.
• Site assistant conversations: 12 months from the date of the conversation, then deleted automatically. If you leave your contact details, those become an enquiry and are kept under the line above.
• Analytics data: retained by Google Analytics for 14 months by default.
• Server logs: rotated within 30 days.

7. Your rights under UK GDPR

You have the right to:

• Access a copy of the personal data we hold about you
• Request correction of inaccurate data
• Request erasure of your data ("right to be forgotten")
• Restrict or object to processing
• Data portability
• Withdraw consent at any time (where consent is the lawful basis)

To exercise any of these rights, email info@cjteams.com. We will respond within 30 days.

8. Complaints

If you believe we have not handled your data properly, you can complain to the UK Information Commissioner's Office: ico.org.uk · 0303 123 1113.

9. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top reflects the most recent change. Material changes will be highlighted on the home page.