Privacy Policy

1. About This Website

Carljaz operates as a multi-brand group providing structure, standards, and operational oversight to independent portfolio businesses across retail, travel, and food sectors.

This website is operated at group level. Portfolio brands may operate separate websites governed by their own privacy policies.

2. Personal Data We Collect

We may collect the following categories of personal data:

Information you provide directly

• Name
• Email address
• Contact details
• Messages submitted via forms
• Account credentials (for authorised blog or admin users)

Automatically collected information

• IP address
• Browser type and version
• Device information
• Pages viewed and interaction data
• Referring website addresses

Marketing data

• Email subscription preferences
• Engagement with email communications

3. How We Use Personal Data

We process personal data for the following purposes:

• Responding to enquiries
• Managing website accounts (e.g. blog contributors)
• Operating and maintaining the website
• Analytics and performance improvement
• Security monitoring and fraud prevention
• Sending marketing communications (where consent is provided)
• Complying with legal obligations

We do not sell personal data.

4. Legal Basis for Processing

We rely on one or more of the following legal bases:

• Legitimate interests (website operation, analytics, security)
• Consent (cookies and marketing communications)
• Contract (where services are provided)
• Legal obligation

5. Analytics and Tracking

We use analytics services to understand how visitors use the website and to improve performance.

These services may collect anonymised or pseudonymised data such as IP address, device type, and browsing behaviour.

Where required, analytics cookies are only activated after user consent.

6. Email Marketing

If you subscribe to communications from Carljaz:

• We collect your name and email address.
• You may unsubscribe at any time via the unsubscribe link in emails.
• We do not share marketing data with third parties for their own marketing purposes.

7. Sharing of Data

We may share personal data with:

• Website hosting providers
• Cloud infrastructure providers
• Email marketing service providers
• Analytics providers
• Professional advisers (legal, accounting)
• Regulatory authorities where legally required

We ensure appropriate contractual safeguards are in place.

8. International Transfers

Where data is processed outside the UK, we ensure appropriate safeguards are implemented in accordance with UK GDPR.

9. Data Retention

We retain personal data only for as long as necessary to:

• Fulfil the purposes outlined above
• Meet legal or regulatory requirements
• Resolve disputes
• Maintain security records

10. Your Rights

Under UK GDPR you have the right to:

• Access your personal data
• Rectify inaccurate data
• Request erasure (where applicable)
• Restrict processing
• Object to processing
• Data portability
• Lodge a complaint with the Information Commissioner's Office (ICO)

11. Security

We implement appropriate technical and organisational measures to protect personal data, including controlled administrative access and secure hosting environments.

12. Changes to This Policy

We may update this policy periodically. The most recent version will be published on this page.