Privacy Policy
J & O Services
Last updated: 3 September 2026
This policy explains what personal data we collect when you use this website or contact us, why we collect it, where it is stored, and what rights you have over it. It is written in plain language on purpose.
Who we are
The data controller is Jan Odstrcilik, trading as J & O Services, a business name registered in Ireland under registration number 767924.
For anything relating to this policy, contact jan@joservices.ie.
What we collect and why
When you use the AI agent on this site
The agent may collect your name, business name, phone number, email address, your website address, a description of what you need and how your business currently handles it (for example which tools you use and roughly how many enquiries you get), and any photographs or documents you choose to send. We collect this so that Jan can respond to your enquiry in writing.
Legal basis: taking steps at your request prior to entering into a contract (Article 6(1)(b) GDPR), and our legitimate interest in responding to business enquiries (Article 6(1)(f) GDPR).
You are not obliged to provide any of this. Without contact details, however, we cannot reply.
When you email or telephone us
We retain the correspondence so that we can deal with your request and keep a record of what was agreed. Legal bases as above.
Technical data
Our servers and our website hosting provider keep standard logs (IP address, browser type, pages requested) for security and reliability purposes. Legal basis: legitimate interest in maintaining a secure service (Article 6(1)(f) GDPR).
What we do not do
We do not use analytics or advertising cookies. We do not profile visitors, build marketing lists, or sell or share personal data with third parties for their own purposes.
The AI agent
Conversations on this site are handled by an artificial intelligence system, identified as such at the start of every conversation in accordance with Article 50 of Regulation (EU) 2024/1689 (the EU AI Act). The agent acts on behalf of J & O Services. The same agent also answers on WhatsApp, where it identifies itself in the same way at the start of the conversation.
The agent collects enquiry details and answers questions about our services. It does not make automated decisions producing legal or similarly significant effects concerning you within the meaning of Article 22 GDPR — every enquiry is reviewed by Jan personally.
Conversation content is processed by a large language model supplied by Anthropic, acting as our processor under a data processing agreement. Your conversations are not used to train AI models.
Where your data is stored
Enquiry data and conversation history are stored on servers we operate ourselves, hosted within the European Union by Hetzner Online GmbH.
The website itself is served by Vercel Inc. (USA), which keeps the standard access logs described above on our behalf as our processor.
WhatsApp. If you contact us on WhatsApp, your phone number and messages pass through the WhatsApp Business Platform operated by Meta Platforms Ireland Limited, Dublin, under the WhatsApp Business Terms and their data processing terms. Meta acts as our processor for delivering messages. The content of the conversation is then handled on our own EU servers as described above.
Email is provided by Proton AG (Switzerland, which benefits from a European Commission adequacy decision). Transactional email delivery is handled by Resend.
Where processing by our AI model provider, our website hosting provider or our email delivery provider involves a transfer of personal data outside the European Economic Area, that transfer is governed by appropriate safeguards under Chapter V GDPR, including Standard Contractual Clauses approved by the European Commission.
How long we keep it
| Data | Retention |
|---|---|
| Enquiry conversations and contact details | 12 months from last contact |
| Correspondence with clients | Duration of the engagement, then 12 months |
| Server and security logs | 30 days |
| Accounting records (clients only) | 6 years, as required by Irish tax law |
Where you become a client, records relating to the engagement are retained for the periods stated above or such longer period as we are required to keep them by law.
Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you
- have inaccurate data corrected
- have your data erased
- restrict or object to processing
- receive your data in a portable format
- withdraw consent, where processing is based on consent
To exercise any of these rights, email jan@joservices.ie. No particular form of words is required. We will respond within one calendar month.
Complaints
If you are unhappy with how we have handled your personal data, you may lodge a complaint with the Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28 — dataprotection.ie.
We would appreciate the opportunity to resolve any concern directly first.
Security
Data is held on infrastructure secured with encrypted connections, key-based access control, firewalling and regular backups. Access is limited to Jan Odstrcilik.
Changes to this policy
Any change to this policy will be published on this page with an updated date.