Privacy policy

1. Who we are

This website, jube.io and its sub-domains, is run by Jube Operations Limited, registered in England and Wales under company number 14442207, at Northgate House, North Gate, New Basford, Nottingham, NG7 7BQ. We are the controller of the personal data described here.

For anything privacy-related, email richard.churchman@jube.io. You'll reach the developer directly.

This policy covers the website only. The Jube software runs on your own infrastructure: whatever it processes stays with you, and you are the controller of it.

2. What we collect

When you visit. Each page request is logged with your IP address, the country and network organisation it resolves to, the page, the referring page and the time. Asset and search requests aren't logged.

When you browse. Google Analytics counts how the site is used: the pages viewed, how you arrived, your approximate location, and the type of device and browser. It uses cookies to tell one visit from another. Google Analytics 4 does not log or store IP addresses.

When you get in touch. Whatever you send us by WhatsApp or email: usually your name, work email or phone number, company and the message itself.

When you join The Weekly Graze. Your email address, and whether you open the emails.

When you become a customer. Contact and billing details for the people we work with, and the support conversations that follow.

We don't ask for special category data, and please don't send it.

3. Why, and on what basis

• Request logs: to keep the site secure, spot abuse, and understand which organisations take an interest. Legitimate interests.
• Usage statistics: to learn which pages help and which need fixing. Legitimate interests, and you can object at any time (section 7).
• Enquiries: to answer you. Legitimate interests, or steps towards a contract if you're asking about one.
• Newsletter: to send it. Consent, which you can withdraw with the unsubscribe link in every issue.
• Customers: to deliver support and training, and invoice for it. Contract, and legal obligation for accounting records.

We make no decisions about you by automated means alone, and we don't profile visitors beyond the organisation name in the request log.

4. Who else sees it

We never sell personal data. We use a small number of providers, each only for its own part:

• Cloudflare hosts the site and holds the request logs.
• Buttondown sends The Weekly Graze.
• WhatsApp (Meta) carries messages you send that way, under its own privacy policy.
• GitHub hosts Issues. Anything you post there is public and governed by GitHub's terms.
• Google provides Google Analytics, as described in section 7.
• Loom hosts the embedded videos. Playing one loads Loom's player, which may set its own cookies.
• [Email provider] handles our email.

We may also disclose data where the law requires it, or to a buyer if the business changes hands, in which case we'll tell you first.

5. International transfers

Some of these providers are based in, or process data in, the United States. Where they do, the transfer is covered by the UK Extension to the EU–US Data Privacy Framework or the ICO's International Data Transfer Agreement or Addendum. Our developer works from Cyprus, which the UK recognises as providing adequate protection.

6. How long we keep it

• Request logs: no more than [30] days.
• Usage statistics: event-level data in Google Analytics for no more than 14 months.
• Enquiries that go nowhere: two years from the last contact.
• Customer records: six years after the contract ends, as UK tax and limitation rules require.
• Newsletter: until you unsubscribe.

7. Cookies and similar storage

We use Google Analytics 4 to measure how the site is used. It sets first-party cookies called _ga and _ga_ followed by an identifier, which last up to two years, and we use it for statistics only, never for advertising. The site also remembers whether you left the side menu open, in your browser's local storage, purely for convenience; it never leaves your device.

Under the Privacy and Electronic Communications Regulations, as amended by the Data (Use and Access) Act 2025, cookies used only to produce statistics that improve a service need no prior consent, provided you are told about them and can object easily. This section is that notice, and the control below is the objection. We also honour the Global Privacy Control signal from your browser.

Turn analytics off

Turning analytics off stops Google Analytics loading in this browser and deletes its cookies. Your choice is kept in your browser's local storage, so clearing site data resets it. You can clear cookies from your browser at any time.

Embedded Loom videos set their own cookies, as above.

8. Your rights

Under UK GDPR you can ask us to:

• give you a copy of your data, free of charge;
• correct it, or delete it;
• restrict or object to how we use it, including any direct marketing, at any time;
• send it to you, or to someone else, in a usable format;
• withdraw consent, where that's what we rely on.

Email richard.churchman@jube.io. We may need to confirm who you are, and we'll reply within one month.

9. Complaints

If you're unhappy with how we've handled your data, tell us first, by email to richard.churchman@jube.io with "Privacy complaint" in the subject. We'll acknowledge it within 30 days, keep you posted, and tell you the outcome without undue delay.

If you're still not satisfied, you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.

10. Security

Everything travels over HTTPS. Access to logs and records is limited to the people who need it, behind multi-factor sign-in.

11. Changes

If this policy changes, the new version goes here with a new date. If a change affects how we use data you've already given us, we'll tell you directly.