Privacy Policy

This Privacy Policy explains how Jemma Maybank ("I", "me", "my") collects, uses, stores, and protects personal data when you visit www.jemmaybank.com, contact me, or engage my motion design, animation, interaction design, and related creative services.

I'm committed to protecting your privacy and processing personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and other applicable data protection laws.

The data controller responsible for your personal data is:Jemma Maybank
‍
Email: hey@jemmaybank.com
Website: www.jemmaybank.comIf you have any questions about this Privacy Policy or how your personal data is processed, please contact me using the details above.

‍

When you contact me, request a quote, or engage my services, I may collect:
Name
Email address
Company name
Job title
Telephone number
Project requirements and creative briefs
Correspondence and communications

Any other information you voluntarily provide.

When you visit the website, I may collect:
IP address
Browser type and version
Device information
Operating system
Pages visited
Referral source
Date and time of access

Where services are provided, I may process:
Contract information
Billing and invoicing information
Project files and assets
Business contact details
Communications relating to the project

I process personal data only where there is a lawful basis under Article 6 GDPR.
‍
Performance of a Contract

Processing is necessary to:
Respond to project enquiries
Prepare quotations and proposals
Deliver agreed services
Manage projects and client relationships
Process invoices and payments

Legitimate Interests
‍
Processing may be necessary for legitimate business interests, including:
Managing enquiries
Maintaining client records
Improving services and website performance
Preventing fraud and misuse
Defending legal claimsI ensure that such interests do not override your rights and freedoms.

Legal Obligations

Processing may be required to comply with:
Tax obligations
Accounting requirements
Regulatory obligations
Law enforcement requests where legally required
‍
Consent

Where required by law, I will obtain your consent before:
Sending marketing communications
Using non-essential cookies or tracking technologies

You may withdraw consent at any time.

I do not sell personal data.

I may share personal data with trusted third-party service providers where necessary to operate my business, including:
Website hosting providers
Email service providers
Cloud storage providers
Accounting and invoicing software providers
Payment processing providers
Professional advisers

These providers are contractually required to process personal data securely and only for authorised purposes.I may also disclose information where required by law.

You may withdraw consent at any time.

I do not sell personal data.

I may share personal data with trusted third-party service providers where necessary to operate my business, including:
Website hosting providers
Email service providers
Cloud storage providers
Accounting and invoicing software providers
Payment processing providers
Professional advisers

These providers are contractually required to process personal data securely and only for authorised purposes.I may also disclose information where required by law.

You may withdraw consent at any time.

Personal data may be transferred to and processed in countries outside the European Economic Area (EEA).

Where such transfers occur, I ensure that appropriate safeguards are implemented, including:
European Commission Adequacy Decisions
Standard Contractual Clauses (SCCs)
Other safeguards permitted under Chapter V of the GDPR

You may request further information regarding these safeguards by contacting me.

Personal data is retained only for as long as necessary to fulfil the purposes described in this Privacy Policy.

Typical retention periods include:
General enquiries: up to 24 months
Project and client records: up to 7 years
Accounting and tax records: as required by applicable law
Marketing records: until consent is withdrawn or no longer required

Data may be retained longer where necessary to establish, exercise, or defend legal claims.

This website uses Google Analytics to collect anonymous usage data such as which pages are visited, how long visitors stay, and the type of device being used.

This information helps me assess the site’s performance and improve the user experience.

The website may use cookies and similar technologies to:
Enable website functionality
Improve website performance
Analyse visitor behaviour and traffic
‍
Where required under applicable law, non-essential cookies will only be placed after obtaining your consent through a cookie banner or consent management platform.

You can manage cookie preferences through your browser settings or the website's cookie consent tool.

Appropriate technical and organisational measures are implemented to protect personal data against:
Unauthorised access
Loss
Misuse
Alteration
Accidental disclosure

While reasonable measures are taken to secure personal data, no electronic transmission or storage system can be guaranteed to be completely secure.

Subject to applicable law, you have the right to:
Access your personal data
Request correction of inaccurate data
Request erasure of personal data
Restrict processing
Object to processing
Receive your data in a portable format
Withdraw consent at any time where processing is based on consent
Not be subject to decisions based solely on automated processing that produce legal or similarly significant effects

Requests can be submitted by contacting hey@jemmaybank.com.

If you believe your personal data has been processed unlawfully, you have the right to lodge a complaint with your local data protection authority within the European Union.

A list of EU supervisory authorities is available from the European Data Protection Board.

This website and services are not directed to individuals under the age of 16.

I do not knowingly collect personal data from children.

If I become aware that personal data has been collected from a child without appropriate consent, I will take reasonable steps to delete that information.

I may update this Privacy Policy from time to time to reflect changes in legal requirements, business practices, or services.Any updates will be posted on this page together with a revised "Last Updated" date.

For questions about this Privacy Policy or the processing of personal data, get in touch at
‍
hey@jemmaybank.com