Privacy.

Two things, and only when you act:

• The brief you send. If you use the contact form, it collects what you type: your name, brand or organisation, email, the format and timeline you pick, and the message itself. Nothing more.
• Anonymous traffic counts. If you accept, the site uses Vercel Analytics: cookieless counts of which pages are read, plus one anonymous count when you send a brief, carrying nothing you typed. No identifier, no personal profile, ever. Decline and nothing non-essential runs.

The only cookie set without asking is the one that lets invited visitors into the site (a strictly necessary access cookie). There are no advertising pixels and no third-party trackers. The banner lets you accept or decline the anonymous analytics. Your choice is stored locally in your own browser (a small entry in local storage, not a tracking cookie), so the banner does not ask twice; you can clear it any time from your browser and the banner returns.

That is the only cookie. Your banner choice is kept in your browser’s local storage (cj_cookie_consent), not a cookie, and is asked again every six months. No advertising pixels, no third-party trackers. The analytics sets no cookie of its own and does not run at all until you accept.

Your message is used for one purpose: to read it and reply. Under the GDPR, the basis is taking steps at your request before any engagement, and my legitimate interest in answering an enquiry you chose to send.

Anonymous analytics rest on your consent. They run only after you choose Accept on the banner, never before, and you can withdraw at any time. Decline, or clear the choice in your browser, and they stop. Legitimate interest covers only reading and replying to the brief you chose to send.

A message sent through the form is delivered to the studio inbox by email and read by the person who runs the work, not by a sales team or an automated funnel. A small number of named processors handle it on my behalf, each only for what is needed to run the site:

• Email, via Zoho. The studio mailbox (hello@cjsocial.net) is hosted by Zoho, which delivers and stores your message so I can read and reply.
• Hosting, via Vercel. The site is built and served by Vercel, from its Frankfurt region. Your brief passes through it on its way to the mailbox, and Vercel provides the cookieless analytics above, which runs only if you accept.
• The network in front, via Cloudflare. Every request to cjsocial.net reaches the site through Cloudflare, which runs the domain, the certificate and the protection against attacks. Doing that, it handles the ordinary technical details of a request, your IP address among them.

All three are bound by data-processing terms and act only on instruction. The site itself is served from inside the EU, in Frankfurt, though Cloudflare answers a request from whichever of its locations is nearest you. Zoho, Vercel and Cloudflare all run infrastructure outside the EU, and where data is stored or moved outside the EU, that transfer relies on the European Commission’s Standard Contractual Clauses, the standard legal safeguard for data leaving the EU.

Your data is never sold, rented, or handed to advertisers.

If the conversation goes nowhere, the message is deleted within twelve months. If I work with you, it is kept for the life of the engagement and as long as the law requires after it, then deleted. Ask at any time and it goes sooner.

Under the GDPR you hold the full set of rights over your data. Exercising any of them is free and without a hoop to jump through, just write and ask:

• Access · a copy of what is held about you.
• Rectification · anything inaccurate corrected.
• Erasure · it deleted.
• Restriction and objection · its use paused, or objected to.
• Portability · what you gave, handed back in a portable format.
• Withdraw consent · for analytics, any time, with no effect on what ran before.

No decision about you is ever made by automated means, and no profiling is carried out.

You also have the right to complain to the Greek supervisory authority, the Hellenic Data Protection Authority, if you believe your data has been mishandled.

The data controller is Ogmenta Digital, a sole proprietorship operated by Constantinos Jotis in Athens, Greece, trading as cj.social, the same entity set out in the Terms.

For anything on this page, including a deletion request, write to hello@cjsocial.net.

The site is a working operation aimed at the people who run social and marketing, not at children, and it does not knowingly collect data from anyone under 15.

If this notice changes, the new version replaces this one here, with the date at the top updated. Material changes that affect you are not applied retroactively.