Privacy Policy

This Privacy Policy explains how Jupiter Technologies Ltd ("Jupiter", "we", "us", or "our") collects, uses, stores, shares, and otherwise processes personal data when you:

visit our website;
contact us;
request information, a demo, or support;
subscribe to updates or marketing communications;
use our products or services; or
otherwise interact with us in a business or professional context.

By using our website or interacting with us, you acknowledge that your personal data may be processed as described in this Privacy Policy.

1. Who we are

We are:

Jupiter Technologies Ltd
64 High Street, Ashwell, Baldock, SG7 5NR, Hertfordshire, UK
[email protected]

Jupiter Technologies Ltd is registered in England and Wales under company number 16588775.

For the purposes of UK data protection law, Jupiter Technologies Ltd is the controller of the personal data described in this Privacy Policy, except where we process data solely on behalf of a customer under a separate agreement.

2. Scope of this Privacy Policy

This Privacy Policy applies to personal data we collect through our website, communications, commercial relationships, and related services.

It does not apply to:

third-party websites, products, or services that we do not control;
customer data we process solely on behalf of a customer as their processor or service provider, where a separate customer agreement governs that processing; or
employment-related data, which may be covered by separate notices.

3. The personal data we collect

We may collect the following categories of personal data.

Information you provide directly

You may choose to give us information such as:

your name;
business email address;
telephone number;
company name;
job title;
billing or account information;
the contents of messages, enquiries, support requests, or form submissions;
preferences relating to events, newsletters, or marketing; and
any other information you voluntarily submit.

Giving us this information is voluntary. If you leave out a field that one of our forms marks as required, we will not be able to deal with that enquiry.

Information collected automatically

When you use our website, we may automatically collect technical and usage information, such as:

IP address;
browser type and version;
device type;
operating system;
referring URLs;
date and time of access;
pages viewed;
navigation paths;
website interaction data;
online identifiers held in cookies and similar technologies, where you have accepted them (see section 7); and
similar diagnostic, analytics, and log information.

Information about the advertisement that brought you here

If you reach our website by clicking one of our advertisements, the address of the page you land on carries details of that advertisement: a click identifier issued by the advertising platform (Google, Microsoft, Meta or OpenAI), and labels naming the campaign, the ad group and the search keyword that showed the advertisement.

If you then send us a form, those details are stored with your enquiry, so that we can tell which advertisement led to it. This does not depend on your cookie choice: the details are read from the page address when the form is sent, and nothing is stored on your device for this unless you accepted Measurement cookies.

Your enquiry also records which form it was, the page you sent it from, the cookie choice you had made at that moment and a random reference for the submission. An audit request also carries your answers to the self-check questions on that page. If you had accepted both Measurement and Advertising cookies, it also records the two identifiers set by Meta's cookies.

Information from third parties

We may receive personal data from third parties, including:

analytics providers;
advertising platforms, which report to us how our advertisements perform;
CRM and communications platforms;
event or webinar partners;
marketing partners;
publicly available business sources such as company websites or professional profiles; and
customers or colleagues who refer you to us in a business context.

4. How we use your personal data

We may use your personal data for the following purposes:

to operate, administer, and improve our website;
to provide information, demos, proposals, onboarding, support, or other services you request;
to manage our relationship with you or your organisation;
to respond to enquiries and communicate with you;
to create and manage accounts;
to monitor and improve website performance, usability, and security;
to troubleshoot technical issues;
to prevent fraud, misuse, unauthorised access, or unlawful activity;
to send service-related notices;
to send marketing communications where permitted by law;
to measure which of our advertisements lead to visits and enquiries and, where you have consented, to show our advertisements to people who have visited our website;
to maintain records and internal administration;
to enforce our terms, rights, and contractual arrangements; and
to comply with legal, regulatory, accounting, and compliance obligations.

We do not use your personal data to make decisions about you by solely automated means that have a legal or similarly significant effect on you.

5. Our lawful bases for processing

Depending on the context, we rely on one or more of the following lawful bases:

Contract

We process personal data where necessary to:

take steps at your request before entering into a contract;
provide our products or services;
manage accounts; or
perform our contractual obligations.

Legitimate interests

We may process personal data where reasonably necessary for our legitimate interests, including:

operating and improving our website, products, and services;
managing business relationships;
responding to business enquiries;
maintaining security;
preventing misuse or fraud;
understanding how our website and services are used;
knowing which of our advertisements lead to enquiries, by keeping an advertisement's details with the enquiry it led to; and
promoting our business in a proportionate B2B context.

Legal obligation

We may process personal data where necessary to comply with applicable legal or regulatory obligations.

Where required, we rely on consent, for example in relation to certain marketing activities or non-essential cookies and similar technologies, including the advertising and measurement tags described in section 7. Where we rely on consent, you may withdraw it at any time, although this will not affect processing carried out before withdrawal.

6. Marketing communications

We may send you marketing communications about our business, products, services, events, or updates where permitted by law.

You can opt out of marketing emails at any time by:

using the unsubscribe link in the message; or
contacting us at [email protected].

Opting out of marketing will not stop us from sending non-marketing communications, such as service, transactional, contractual, or security-related messages.

7. Cookies, similar technologies and online advertising

We use cookies and similar technologies to operate our website, understand usage, enhance functionality, and, where applicable, measure marketing effectiveness.

Some cookies are strictly necessary for the website to function. Others, such as analytics or advertising-related cookies, may only be used where the law allows and, where required, after you have given consent.

Our Cookie Policy lists everything this website stores on your device, who sets it and for how long, and explains your choices.

How we use your data to advertise online

We advertise Jupiter and Callisto on Microsoft Advertising (Bing), Google Ads, and Meta (Facebook and Instagram). If you accept advertising cookies in our cookie banner, tags from those three companies run on our website. We also advertise in ChatGPT, and on the page those advertisements lead to, jupitertech.io/callisto-demo, OpenAI's tag runs as well if you accept both purposes there. We use them:

to measure which of our advertisements led to a visit, a demo request, an audit request or a booked meeting, and to improve how we advertise; and
if you also accept Advertising, to show our advertisements on other websites and apps to people who have visited our website (remarketing).

If you refuse, or do not answer the banner, none of these tags is loaded and no data about your visit is sent to any advertiser.

What is shared, and with whom

When a tag runs, Microsoft, Google, Meta or OpenAI collects or receives personal data about you directly from your browser: your IP address, the address and title of the page you are on and the page you came from, details of your browser, device and screen, the identifiers held in the cookies the tag sets, and the fact that you viewed a page, sent one of our forms or booked a meeting. With an enquiry or a booking, Meta and OpenAI also receive a random reference for that event, so that the event is counted once, and OpenAI receives the reference of the ChatGPT advertisement you clicked.

The tags on our website do not send the advertisers your name, your email address or anything else you type into our forms, with one exception. On jupitertech.io/callisto-demo, if you accept both purposes, OpenAI's pixel sends OpenAI a hashed (scrambled, one-way) version of the email address and name you enter in the form, made in your browser, with your enquiry and with any meeting you then book, so that OpenAI can link them to an advertisement it showed you in ChatGPT. OpenAI compares the hashed version with the hashed details of its own users; a hash cannot be turned back into your email address or name.

If you accept both purposes, our own server also tells Meta, and on jupitertech.io/callisto-demo OpenAI, when you send one of our forms or book a meeting, so that a browser which blocks their tags does not lose it. It sends the fact of the enquiry or booking with the same random reference as the tags, your IP address, details of your browser, the identifiers held in their cookies, and a hashed version of your email address and name, made on our server, for the same purposes as their tags. If you refuse advertising cookies, our server sends nothing to any advertiser.

This means that, if you accept, individual visitors are tracked on our website, and data about them is shared with third parties for advertising and marketing purposes. In particular:

Third parties, including Microsoft, Google, Meta and OpenAI, use cookies, pixels and similar technologies to collect or receive information from our website and elsewhere on the internet, and use that information to provide measurement services and to target and deliver advertisements.
Third-party vendors, including Google, show our advertisements on sites across the internet.
Third-party vendors, including Google, use cookies and device identifiers to serve advertisements based on a person's past visits to our website.

Each company is responsible for what it does with the data it receives, and explains this in its own notice:

Microsoft: the Microsoft Privacy Statement.
Google: its Business Data Responsibility site.
Meta: the Meta Privacy Policy.
OpenAI: the OpenAI Privacy Policy.

Meta as joint controller

For the collection of data on our website by the Meta pixel and its transmission to Meta, we and Meta are joint controllers. The Meta company concerned is Meta Platforms, Inc. or, for visitors in the European Economic Area, Meta Platforms Ireland Limited. Meta is an independent controller of what it does with the data afterwards.

Our arrangement with Meta is set out in Meta's UK Controller Addendum and, for visitors in the European Economic Area, its Controller Addendum. Under it, we are responsible for giving you the information in this section and for obtaining your consent, and Meta is responsible for enabling you to exercise your data protection rights over the data it holds after it receives it.

Meta's identity and contact details, including those of its data protection officer, the legal bases Meta relies on, and how to exercise your rights against Meta are in the Meta Privacy Policy. You can also contact us, and we will pass your request to Meta.

Your choices

Change or withdraw your consent on our website at any time with "Cookie settings" at the foot of any page. The tags stop, what they stored on our website is deleted from your browser, and no further data about your visit is sent, apart from Microsoft's tag reporting the withdrawal itself. Withdrawing consent does not affect anything done before you withdrew it.
Google: you can opt out of Google's use of cookies and device identifiers for personalised advertising in Google's Ads Settings.
Microsoft: you can opt out of personalised advertising from Microsoft in its advertising settings.
Meta: if you have a Facebook or Instagram account, you can control how Meta uses data from other websites in your ad preferences.
Many companies at once: you can opt out of the collection and use of information for interest-based advertising at www.aboutads.info/choices, www.youronlinechoices.eu and the Network Advertising Initiative's page, thenai.org/how-to-opt-out.

Our lawful basis

Our lawful basis for the processing described in this section is your consent (Article 6(1)(a) of the UK GDPR). For storing information on your device and reading it, we rely on your consent under regulation 6 of the Privacy and Electronic Communications Regulations 2003. We ask every visitor for this consent, wherever they are.

8. Disclosure of personal data

We may share personal data with:

hosting, infrastructure, and cloud service providers;
analytics, CRM, communications, and support tool providers;
payment processors and professional advisers;
corporate group companies, where relevant;
regulators, courts, law enforcement, or competent authorities where required;
prospective buyers, investors, lenders, or transaction advisers in connection with a merger, acquisition, financing, reorganisation, or sale of assets; and
other third parties where you have asked us to do so or where disclosure is otherwise lawful.

Our main service providers for this website are:

Cloudflare, which hosts and protects the website and counts visits without cookies;
GoHighLevel, our customer relationship management system, which receives what you send us in a form;
Calendly, which provides the meeting calendar. It receives your name and email address when you choose to schedule a meeting, and the details you enter when you book;
WhatsApp, if you choose "Continue on WhatsApp": the link opens WhatsApp with a message already written from what you typed in the form; and
Google, whose Tag Manager delivers the advertising tags if you accept them.

If you accept advertising cookies, data about your visit is also shared with Microsoft, Google and Meta and, on jupitertech.io/callisto-demo, with OpenAI, as described in section 7.

We do not sell personal data in the ordinary sense of selling customer lists to third parties.

9. International transfers

We may store or process personal data in countries outside the UK, or allow it to be accessed from outside the UK, where this is necessary for our operations.

Where we make a transfer that is subject to the UK rules on restricted transfers, we will take steps to ensure that appropriate safeguards are in place, such as:

transfer to a country recognised as providing adequate protection;
use of approved contractual safeguards; or
reliance on another lawful transfer mechanism available under applicable law.

Cloudflare, GoHighLevel, Calendly, Microsoft, Google, Meta and OpenAI are United States companies, or process personal data in the United States and other countries. Where the UK rules on restricted transfers apply to a transfer to one of them, we rely on UK adequacy regulations where they cover the recipient (for example, the UK Extension to the EU-US Data Privacy Framework, for companies certified under it), and otherwise on the contractual safeguards in that provider's terms, such as standard contractual clauses with the UK addendum. You can ask us for more information about these safeguards, or for a copy of them, at [email protected].

10. Data security

We use appropriate technical and organisational security measures intended to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.

These measures may include, where appropriate:

encryption;
access controls;
authentication controls;
monitoring and logging;
secure hosting practices;
role-based permissions; and
internal procedures for handling security incidents.

11. Data retention

We keep personal data only for as long as reasonably necessary for the purposes for which it was collected, including to satisfy legal, regulatory, tax, accounting, dispute, and enforcement requirements.

Cookies and similar technologies last for the periods given in our Cookie Policy. The advertisers keep the data their tags collect for the periods given in their own notices, linked in section 7.

12. Your data protection rights

Depending on the circumstances and applicable law, you may have the right to:

be informed about how your personal data is used;
request access to your personal data;
request correction of inaccurate or incomplete personal data;
request erasure of your personal data;
request restriction of processing;
object to processing carried out on the basis of legitimate interests;
object at any time to the use of your personal data for direct marketing;
request transfer of certain personal data in a portable format;
withdraw consent where we rely on consent; and
complain to the UK Information Commissioner's Office (ICO).

To exercise your rights, contact us at [email protected]. We may need to verify your identity before acting on your request.

To withdraw your consent to advertising and measurement cookies, use "Cookie settings" at the foot of any page of our website.

13. Complaints

If you have concerns about how we handle your personal data, we encourage you to contact us first so we can try to resolve the issue.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection matters, at ico.org.uk/make-a-complaint.

If you live outside the United Kingdom, the data protection law of your country may give you additional rights, including the right to complain to the data protection authority where you live.

14. Third-party websites and services

Our website may contain links to third-party websites, platforms, or services. We are not responsible for the privacy practices, content, or security of those third parties.

15. Children

Our website and services are intended for business and professional use and are not directed to children. We do not knowingly collect personal data from children through the website.

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The latest version will be posted on this page, together with the updated effective or last updated date.

17. Contact us

If you have questions about this Privacy Policy or our handling of personal data, please contact: