Legal
Privacy policy
Last updated
This policy explains what personal data Jambo Jimbo collects through this website, why we collect it, how long we keep it and what rights you have. It is written to be read, not to be survived.
Who we are
Jambo Jimbo is the trading name of JAMBOJIMBO LIMITED, a company registered in England and Wales, company number 16421841, registered office Unit 7, Atlas Business Park, Balby Carr Bank, Doncaster, South Yorkshire, DN4 5JT.
We are the data controller for personal data collected through this website. We are registered with the Information Commissioner's Office, registration reference ZC089564.
For anything in this policy, contact james@jambojimbo.com.
What we collect, and why
Swipe the table sideways to see every column.
| What | When | Why | Lawful basis |
|---|---|---|---|
| Name, email address, firm name, your firm's website address, approximate firm size, and, if you give them, your phone number and whatever you write in the message field. The shorter free audit form at the foot of the homepage asks for your name, email address, website address and the type of firm you run. Sent with either, if there are any: the campaign details in the link that brought you to this site (the utm_source, utm_medium, utm_campaign and utm_content parameters) and the page on this site you came to the form from. These travel only in the page address and are never stored in your browser | When you submit the enquiry form on the contact page or the homepage | To answer your enquiry and, if it goes further, to scope and quote the work | Legitimate interests: responding to someone who has asked us to get in touch |
| Name, email address, your firm's website address, and, if you give them, your phone number and whether you can give read only access to your Google Ads account. Sent with it, if there are any: the same campaign details and referring page as the enquiry form | When you submit the Google Ads audit form for law firms, named "ads-audit" | To carry out the audit you asked for, arrange the call to walk through it and, if it goes further, to scope and quote the work | Legitimate interests: responding to a request you made with the details you attached to it |
| Name, email address, firm name, and the four figures on the cost per enquiry calculator: monthly spend, enquiries per month, conversion rate and average client value | When you submit the calculator's own form asking for a written reply about your figures. The figures are shown in editable fields on that form before you send them. They also reach us if you follow the calculator's link to the contact form and submit that, where they appear the same way | To write back with what we make of your figures, and, if it goes further, to scope and quote the work | Legitimate interests: responding to a request you made with the details you attached to it |
| Name, email address, firm name, and the three figures on the Google Ads budget planner: affordable cost per enquiry, expected cost per click and the percentage of clicks that become enquiries | When you submit the planner's own form, named "budget-planner", asking for a written reply about your figures. The figures are shown in editable fields on that form before you send them | To write back with what we make of your plan, and, if it goes further, to scope and quote the work | Legitimate interests: responding to a request you made with the details you attached to it |
| The website address you enter into the website audit, and what the audit finds on that site | When you run the website audit | To check the site, show you the report at a link you can share, and reuse the same result for 24 hours if the address is checked again | Legitimate interests: providing the check you asked for |
| Your IP address, hashed with a secret key before it is stored, so it is never held in readable form | When you run a new website audit | To limit each connection to five new audits an hour, so the tool cannot be used to hammer other people's websites | Legitimate interests: protecting the tool and the sites it checks from abuse |
| Name, email address and company name. Your email address is also stored separately as a hash, to count how many reports it has unlocked | When you submit the website audit's own form, to ask for the full audit (which also shows any issues still hidden on the report) or, if the site turned our check away, to ask James to check it by hand | To show you the full report, to send you the full written audit or carry out the manual check you asked for, to limit each email address to three reports, and so James can follow up about it. You are not added to any mailing list | Legitimate interests: responding to a request you made with the details you attached to it |
| Email address | When you subscribe to the newsletter | To send occasional notes on search, ads and websites for professional services firms | Consent, which you give by subscribing and can withdraw at any time |
| Technical data: IP address, browser type, pages visited, referring site | Automatically, on every visit | To keep the site running, secure and reasonably fast | Legitimate interests: operating and protecting the website |
| Usage data via Google Analytics: pages viewed, how you arrived, approximate location at city level, device and browser type, and whether you sent an enquiry or one of the tools' reply forms, tapped the phone number or email address, or used one of the free tools. Never what you typed into a form or a tool | Only if you accept analytics cookies on the cookie banner. If you reject, or never answer, the analytics script does not load | To see which pages get read, how visitors find the site, and which pages and tools lead to enquiries | Consent, which you can withdraw at any time on the cookie policy page |
The sums on the cost per enquiry calculator and the Google Ads budget planner run entirely in your browser, and every result shows without giving any details. Both tools store nothing and set no cookies; where the calculator hands its ceiling to the planner, it travels in the page address, in a figure you can see and change. Nothing reaches us until you submit one of their own forms, named "calculator" and "budget-planner" and separate from the contact form, asking for a written reply, which sends your name, email address, firm name and the figures together, or take the calculator's figures to the contact form, where they are shown in a visible summary you can edit or remove before sending.
The website audit works differently from the calculators, because it has to visit a website to check it. When you press the button, our server fetches the address you entered and a few of the pages it links to, identifying itself as the Jambo Jimbo website audit. It sends that address, and nothing about you, to Google PageSpeed Insights to measure the page's speed and to Microlink to take a screenshot. The report and screenshot are stored in Netlify Blobs, on Netlify's platform, and the screenshot is served from this website, so viewing a report makes no request to anyone else. Anyone with a report's link can see its scores and the issues shown without giving details, but not the full list or the details of whoever unlocked it. The audit stores nothing in your browser and sets no cookies. Your name, email address and company are only sent if you submit the form under the report. They then reach us through Netlify Forms, which emails them to our Microsoft 365 inbox with the report's link and scores, and they are also kept in Netlify Blobs as a backup in case that email fails.
We do not buy personal data, we do not sell it, and we do not use it to build profiles or serve behavioural advertising.
Who else sees it
We use a small number of suppliers who process data on our behalf. Each is bound by a contract that limits them to our instructions.
- Netlify, who host this website, receive form submissions through Netlify Forms, and store website audit reports, screenshots and the details given to unlock them in Netlify Blobs.
- Google PageSpeed Insights, which receives the website address you ask the website audit to check, to measure its speed. It receives nothing about you.
- Microlink, which receives the website address you ask the website audit to check, to take a screenshot of it. It receives nothing about you.
- Sanity, who host the content management system behind our articles and case studies. It holds no visitor data.
- Microsoft 365, who provide our email. Enquiry notifications from the contact form are delivered to a Microsoft 365 mailbox.
- Google, who provide Google Analytics, and only if you accept analytics cookies.
Our analytics provider is Google, processing usage data on our behalf through Google Analytics. It runs only with your consent: until you accept on the cookie banner, no analytics script loads and nothing about your visit reaches Google. What it collects is listed in the table above. Google Analytics does not log or store your IP address, we have not enabled Google signals or any advertising features, and we do not use the data for advertising or profiling. The cookies it sets are named, with their lifetimes, in the cookie policy.
We embed no video by default. If you choose to play a video on a case study page, it is loaded from YouTube, which is part of Google, at that point and not before. YouTube then receives your IP address and may set cookies. Until you press play, nothing about your visit reaches Google.
Some of these suppliers are based outside the UK, mainly in the United States. Where data leaves the UK it is protected by the UK International Data Transfer Agreement, or by the UK Addendum to the EU Standard Contractual Clauses.
We will disclose personal data if the law requires it. We will not do so otherwise.
How long we keep it
- Enquiries, calculator submissions and website audit unlocks that do not become work: 24 months, then deleted.
- Website audit reports and screenshots: 90 days, then deleted automatically. The link stops working at that point.
- Hashed IP addresses from the website audit: 24 hours.
- Hashed email addresses from the website audit: until every report that email address unlocked has been deleted, so at most 90 days after the last one.
- Client records: for the duration of the engagement and 6 years afterwards, which is the limitation period for contract claims.
- Newsletter subscribers: until you unsubscribe, and then we keep a suppression record so we do not email you again by mistake.
- Analytics data: held in Google Analytics for up to 14 months, then deleted automatically.
- Server logs: Netlify records standard server access logs as our processor. We do not export, analyse or store them ourselves, and they are retained under Netlify's own retention policy.
Your rights
Under UK GDPR you can ask us to:
- give you a copy of the personal data we hold about you
- correct anything that is wrong
- delete it
- restrict how we use it
- send it to you, or to someone else, in a portable format
You can object to processing we carry out under legitimate interests, and you can withdraw consent for the newsletter at any time using the unsubscribe link in any email or by emailing us. Withdrawing consent does not affect anything we did before you withdrew it.
Email james@jambojimbo.com and we will respond within one month. There is no charge.
If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint, or on 0303 123 1113. We would rather you raised it with us first so we can put it right.
Cookies
Cookies are covered separately in our cookie policy.
Changes
If we change this policy we will update the date at the top. Where a change materially affects how we use data you have already given us, we will tell you directly.