JCC Legal

Privacy Policy

This policy explains what data is processed, why, for how long, who may receive it and how you can exercise your rights. Last updated: 23 August 2026.

01 Legal

Controller and contact

The controller is José Carlos, trading under the JCC brand in Portugal. For privacy matters, use the website form, select “Specific digital solution” and state “Privacy request”, or contact +351 914 626 854 by phone or WhatsApp. Additional information may be requested only when necessary to verify the requester’s identity.

02 Legal

Data we may process

In the form: name, email, requested area, optional website or profile, context and selected plan where applicable
In the booking flow: name, email, selected time and answers you choose to provide in the calendar
Request origin: source page, referrer and campaign parameters such as UTM, gclid or fbclid when present in the address
Technical and security data processed by the infrastructure, such as IP address, date, time, browser, device, access logs and abuse indicators
After marketing consent: page visit, URL, referrer, browser identifiers and technical information sent by the Meta Pixel

03 Legal

Purposes and legal bases

Responding to your request

Reviewing the context, preparing a response, contacting you and taking requested pre-contractual steps. Basis: pre-contractual steps requested by the data subject.

Booking a call

Showing available times, creating the booking and generating the Google Meet link. Basis: pre-contractual steps requested by the data subject.

Security and legal claims

Preventing fraud, abuse and incidents, keeping minimum records and establishing or defending legal claims. Basis: JCC’s legitimate interests, balanced against your rights.

Legal obligations

Meeting tax, accounting or regulatory duties and lawful authority requests. Basis: compliance with a legal obligation.

Meta Pixel

Measuring campaigns, attributing visits and creating advertising audiences. Basis: prior, specific and withdrawable consent; the Pixel remains blocked until that choice.

04 Legal

Recipients and service providers

Data is not sold. Access is limited to the controller and necessary providers according to their functions and contractual safeguards.

Formspree

Receives and forwards form submissions as a technical processor. Formspree states that it relies on Standard Contractual Clauses for GDPR-covered transfers.

Learn more →

Google Calendar and Google Meet

When you book a call, the embedded calendar receives the information entered and the selected time to create the event and Meet link under Google's terms.

Learn more →

Cloudflare

Hosts, delivers and protects the website and may process technical data and security logs as an infrastructure provider.

Learn more →

Meta Platforms Ireland

Only receives Meta Pixel data after consent. JCC and Meta may act as joint controllers for parts of event processing; Meta also processes data for its own purposes.

Learn more →

If you choose to initiate or receive contact through WhatsApp, Meta/WhatsApp also processes that communication under its own terms.

Learn more →

05 Legal

International transfers

Some providers are part of groups or use infrastructure outside the European Economic Area. Where an international transfer occurs, GDPR-approved mechanisms are used, such as adequacy decisions, Standard Contractual Clauses and supplementary measures, depending on the provider and service.

06 Legal

Retention

Enquiries that do not result in a business relationship: up to 12 months after the last contact, unless a different period is justified
Proposals, contracts, invoicing and accounting documentation: for applicable statutory periods and as needed to establish, exercise or defend legal claims
Technical and security records: only as long as needed to protect the service and investigate incidents
Cookie preference: 180 days, after which - or after a material policy change - the choice is requested again
Data received by Meta: under Meta’s own periods; its Business Tools Terms state that Event Data may be retained for up to two years

07 Legal

Your rights

Where applicable, you may request access, correction, erasure, restriction, portability, objection and information about processing. You may withdraw consent at any time without affecting prior lawful processing. You may also complain to the Portuguese Data Protection Authority.

Exercise rights with JCC

Contact JCC by telephone or WhatsApp on +351 914 626 854 and identify the matter as a “Privacy request”. JCC will respond within the applicable legal deadline.

Portuguese Data Protection Authority

Portugal’s supervisory authority for complaints and information about personal data protection.

Learn more →

08 Legal

Automated decisions, minors and security

JCC does not make decisions producing legal effects solely by automated means through this website. The website is not specifically directed at minors and JCC does not knowingly seek their data. Proportionate technical and organisational measures are applied, but no Internet-connected service can guarantee zero risk.

09 Legal

Policy changes

This policy may be updated when services, providers or legal requirements change. The date at the top identifies the current version. Changes affecting cookie choices trigger a new consent request.

→ Control and transparency

Need to exercise a right or ask a privacy question?

Contact JCC by telephone or WhatsApp on +351 914 626 854.