Privacy Policy - Jodie
Effective Date: 6 July 2024
Last updated: 6 May 2025
Welcome to Jodie (“we,” “our,” or “us”). We value your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and otherwise process your personal information when you visit our website https://heyjodie.com (the “Website”), as well as your rights under UK data-protection laws.
1. Who We Are
- Name of Entity: Jodie (the “Data Controller”)
- Registered Address: Kemp House, 152 City Road, London, Greater London, England, EC1V 2NX
- Contact Email: [email protected]
We are responsible for deciding how and why we hold and use your personal data. Should you have questions about this Privacy Policy or wish to exercise any legal rights, please contact us using the details above.
2. What Information We Collect
We may collect and process the following categories of personal data:
-
Identification & Contact Details
- Name, email address, phone number, and postal address.
-
Property & Transaction Information
- Details about services, offers, and related transactions if you use our services.
-
Account & Login Information
- Username, password (hashed), or other account credentials if you register an account.
-
Financial Information
- Payment details or bank information (if relevant to transactions or fees).
-
Marketing & Communications Data
- Your preferences for receiving marketing communications from us; social-media handles if you connect via social platforms.
-
Technical & Usage Data
- IP address, browser type, device identifiers, cookie and pixel data, session re-play recordings, click paths, scroll depth, heat-map statistics, and other information about how you interact with our Website and marketing emails.
- Sources: collected automatically via cookies, pixels, JavaScript, and similar technologies from:
- Google Analytics 4 (GA4)
Behavioural analytics (page views, events, user flows, approximate geolocation). - Microsoft Clarity
Session re-play, scroll and click heat-maps, and aggregated performance metrics. - Meta (Facebook) Pixel
Conversion tracking, ad attribution, and custom-audience building. - TikTok Pixel
Conversion tracking, ad attribution, and audience measurement for TikTok advertising campaigns. - Reddit Pixel
Conversion tracking and ad attribution for Reddit advertising campaigns. - LinkedIn Insight Tag
Conversion tracking, website demographics, and retargeting for LinkedIn advertising campaigns. - ProveSrc
Website verification and trust signals for social proof and credibility. - Tolt
User engagement tracking and behavioral analytics. - Intercom
Customer support chat functionality and user communication management.
- Google Analytics 4 (GA4)
-
Other Data You Provide
- Any other personal data you voluntarily share with us when filling out forms or contacting us (e.g., support queries).
Note: We typically do not collect special-category personal data (e.g., health, religious, or ethnic information). If we ever need to handle such data, we will request your explicit consent or rely on another lawful basis under UK law.
3. How We Collect Your Data
- Direct Interactions: You provide data when you fill out forms, register for an account, request services, or communicate with us.
- Automated Technologies: As you navigate the Website, GA4, Microsoft Clarity, Meta Pixel, TikTok Pixel, Reddit Pixel, LinkedIn Insight Tag, ProveSrc, and Tolt automatically collect Technical & Usage Data through cookies and similar technologies.
- Third Parties: We may receive personal data from analytics providers (Google, Microsoft, Meta, TikTok, Reddit, LinkedIn, ProveSrc, Tolt), payment processors, and marketing partners.
4. Why We Process Your Data (Legal Bases)
We use your personal data only where UK law permits. Common lawful bases include:
-
Consent
- Where you give explicit consent (e.g., when accepting optional analytics or marketing cookies).
-
Contractual Necessity
- To perform our obligations under a contract (e.g., providing services you’ve registered for).
-
Legal Obligation
- To comply with UK legal or regulatory requirements.
-
Legitimate Interests
- To operate, improve, and secure our Website; analyse how it is used; prevent fraud; and market our services (including through GA4, Microsoft Clarity, Meta Pixel, TikTok Pixel, Reddit Pixel, LinkedIn Insight Tag, ProveSrc, and Tolt), provided such interests do not override your rights and freedoms.
5. How We Use Your Data
We may use your personal data to:
- Provide Services: Facilitate services, maintain your account, and process transactions.
- Customer Support: Handle your inquiries, troubleshoot issues, and manage customer-service requests.
- Marketing & Communications: Send newsletters or promotions (only if you have opted in). You can withdraw consent at any time.
- Analytics & Improvements:
- GA4 helps us understand traffic sources, popular pages, and overall Website performance.
- Microsoft Clarity provides session re-plays and heat-maps so we can see where users experience friction and improve usability.
- The Meta Pixel lets us measure the effectiveness of our ads and reach users with more relevant content.
- TikTok Pixel allows us to track conversions and optimise our TikTok advertising campaigns.
- Reddit Pixel helps us measure the effectiveness of Reddit advertising and reach relevant audiences.
- LinkedIn Insight Tag enables us to track conversions and gather insights about our LinkedIn advertising performance.
- ProveSrc provides website verification and social proof to enhance user trust and credibility.
- Tolt tracks user engagement and provides behavioral analytics to improve user experience.
- Intercom enables customer support chat functionality, allowing us to communicate with users and provide assistance.
- Legal & Compliance: Comply with regulatory requirements, detect fraud, or enforce our rights.
6. Cookies, Pixels & Tracking Technologies
We use first-party and third-party cookies, pixels, and local-storage objects to:
- Store user preferences and session information.
- Analyse traffic and user interactions via GA4 (analytics cookies), Microsoft Clarity (analytics cookies and script-based tracking), and Tolt (behavioral analytics).
- Deliver and measure personalised advertising through the Meta Pixel, TikTok Pixel, Reddit Pixel, and LinkedIn Insight Tag (marketing cookies).
- Provide website verification and social proof through ProveSrc.
- Enable customer support chat functionality through Intercom (functional cookies).
You can manage or disable cookies at any time via your browser settings or, for GA4 and the Meta Pixel, through your online-advertising preferences. For more details, see our separate Cookie Policy.
Opt-Out Links
Service | How to Opt Out |
---|---|
Google Analytics 4 | Install the Google Analytics Opt-out Browser Add-on or disable analytics cookies in our banner. |
Microsoft Clarity | Disable analytics cookies in our banner or enable “Do Not Track” in your browser. |
Meta Pixel | Adjust ad preferences in your Facebook/Instagram account settings or use industry opt-out tools (e.g., YourAdChoices). |
TikTok Pixel | Adjust ad preferences in your TikTok account settings or disable marketing cookies in our banner. |
Reddit Pixel | Adjust ad preferences in your Reddit account settings or disable marketing cookies in our banner. |
LinkedIn Insight Tag | Adjust ad preferences in your LinkedIn account settings or use LinkedIn’s opt-out page. |
ProveSrc | Disable analytics cookies in our banner or contact us to opt out of verification tracking. |
Tolt | Disable analytics cookies in our banner or enable “Do Not Track” in your browser. |
Intercom | Disable functional cookies in our banner or adjust chat preferences in the Intercom widget. |
7. Who We Share Your Data With
-
Service Providers
- Hosting, IT support, payment processors, email service providers, analytics vendors, and customer support services such as Google LLC (GA4), Microsoft Corporation (Clarity), Meta Platforms Ireland Ltd (Meta Pixel), TikTok Technology Limited (TikTok Pixel), Reddit Inc. (Reddit Pixel), LinkedIn Corporation (LinkedIn Insight Tag), ProveSrc Ltd (ProveSrc), Tolt Ltd (Tolt), and Intercom Inc. (Intercom).
-
Business Partners
- If you request or opt in to co-branded services or partnerships.
-
Legal or Regulatory Authorities
- When required to comply with the law or to protect our rights.
-
Corporate Transactions
- In connection with a sale, merger, or transfer of part of our business or assets, your personal data may be disclosed to the prospective buyer or merged entity.
We contractually require these third parties to handle your data securely and in compliance with applicable laws.
8. International Data Transfers
Some of our providers (Google, Microsoft, Meta, TikTok, Reddit, LinkedIn, ProveSrc, Tolt, Intercom) are headquartered in the United States or other international locations. Whenever we transfer your data outside the UK and/or European Economic Area, we ensure a similar level of protection by implementing one of the following safeguards:
- The destination country has been deemed to provide an adequate level of protection; or
- We use standard contractual clauses approved by the UK Information Commissioner’s Office (ICO) or other recognised transfer mechanisms.
If you need more details about specific transfer mechanisms, please contact us.
9. How We Protect Your Information
We take technical and organisational measures to protect your personal data from unauthorised access or disclosure, including:
- Encryption (in transit and at rest, where appropriate).
- Secure data storage in controlled facilities.
- Access controls, multi-factor authentication, and staff training on data protection.
- Regular audits of our security controls and vendor due-diligence reviews.
Despite our efforts, no system is entirely secure. If you suspect your data or interaction with us is no longer secure, please notify us immediately.
10. Data Retention
We retain your personal data only for as long as reasonably necessary to:
- Fulfil the purposes for which it was collected.
- Satisfy any legal, regulatory, tax, accounting, or reporting requirements.
- Resolve disputes or enforce our legal agreements and policies.
Retention periods for analytics data are controlled via GA4 (default 14 months), Microsoft Clarity (default 30 days), Meta Pixel (in accordance with Meta’s data-retention policies), TikTok Pixel (in accordance with TikTok’s data-retention policies), Reddit Pixel (in accordance with Reddit’s data-retention policies), LinkedIn Insight Tag (in accordance with LinkedIn’s data-retention policies), ProveSrc (in accordance with ProveSrc’s data-retention policies), Tolt (in accordance with Tolt’s data-retention policies), and Intercom (in accordance with Intercom’s data-retention policies). Once the retention period expires, we will securely delete or anonymise your personal data in compliance with applicable laws.
11. Your Rights
Under the UK General Data Protection Regulation (UK GDPR) and other applicable laws, you may have the right to:
- Access Your Data: Obtain a copy of the personal data we hold about you.
- Rectification: Request corrections to any inaccurate or incomplete data.
- Erasure (Right to be Forgotten): Ask us to delete your data under certain circumstances.
- Restriction of Processing: Request we limit how we use your data.
- Data Portability: Receive your data in a structured, commonly used format.
- Object to Processing: Object to certain processing activities, including direct marketing and analytics profiling.
- Withdraw Consent: Where processing is based on consent, you can withdraw it at any time.
To exercise these rights, contact us at [email protected]. We may need to verify your identity before processing your request. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at https://ico.org.uk/.
12. Children’s Privacy
Our Website is not intended for individuals under the age of 13. We do not knowingly collect personal data from children. If you believe a child under the age of 13 has provided us with personal information, please contact us so we can investigate and delete it where required.
13. Links to Other Websites
Our Website may contain links to third-party sites not operated by us. We are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party sites or services before providing personal information.
14. Updates to This Policy
We may update this Privacy Policy from time to time to reflect changes in our data practices or legal requirements. The “Last updated” date at the top indicates when it was last revised. Your continued use of our Website after we post any updates signifies your acceptance of the revised policy.
15. Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:
- Email: [email protected]
- Address: Kemp House, 152 City Road, London, Greater London, England, EC1V 2NX