Privacy.

Who is responsible

JP Studio is a trading name of PENJORVAN - AI VENTURES, UNIPESSOAL LDA, a single-member private limited company (sociedade unipessoal por quotas) registered in Portugal.

• Registered office: Rua Marquesa de Alorna 26 B, 1700-303 Lisboa, Portugal.
• Registry: Conservatória do Registo Comercial, registration and tax number (NIPC) 519390423.
• VAT: PT519390423.
• Email: support@jp-studio.com
• Phone: +31 6 41554440
• Complaints book: Livro de Reclamações (www.livroreclamacoes.pt).

Questions about your data go to support@jp-studio.com.

What we collect and why

• Enquiries. We collect your name, email address, requested service, message and project details. Paid forms also ask for your mobile number, business country, role in the decision, budget range and timing. You may add your company and current website. If you arrive through a campaign link, we store its source, campaign and creative labels. We use these details to reply, assess the request and prepare a quote. The legal basis is taking steps you asked for before a contract (GDPR article 6(1)(b)).
• Contact verification. We use a mobile code when SMS verification is enabled and you request it. Some older forms also send a code to the email address you provide. We store whether each was confirmed, when you requested an SMS code, plus limited technical records of code requests and attempts, including a protected representation of the request IP address, to prevent misuse. These codes are for verification, not marketing. Our legal basis for abuse prevention is our legitimate interest in secure, reliable enquiries (GDPR article 6(1)(f)).
• Appointments. If you choose a discovery call, we store the time you book with your enquiry so we can prepare for and hold the call. You can ask us to change or cancel it by email.
• Email. Whatever you send to support@jp-studio.com, used the same way.
• LinkedIn forms. If you send a form in one of our LinkedIn ads, LinkedIn passes us the details you confirm in that form: your name, email address, company and your answer to our question. We use them the same way as an enquiry: to reply, assess the request and prepare a quote (GDPR article 6(1)(b)). We copy the enquiry into our own client database (in the EU) and keep it there like any other enquiry: while needed to handle the request or a resulting client relationship, or until you ask us to delete it where applicable. LinkedIn deletes form leads from its own system after 90 days. LinkedIn Ireland Unlimited Company runs the form under its own privacy policy.
• Clients. The name, company, address and VAT number we need to invoice you, and your payment details when you pay online. The legal basis is the contract and our legal duty to keep accounting records (article 6(1)(b) and (c)).
• Server logs. Our hosting provider records technical request data, such as IP address and browser, to keep the site running and secure. The legal basis is our legitimate interest in a working, secure site (article 6(1)(f)).
• Optional Meta advertising measurement. If you allow it on a campaign page or the booking page, Meta Pixel records a page visit and the campaign page viewed. We also report when your enquiry has passed contact verification and when you book an appointment. Meta may receive your IP address, browser information and its advertising cookie identifiers. We do not send your name, email, phone, budget or project description to Meta. The legal basis is your consent (GDPR article 6(1)(a)). You can withdraw it for future tracking via Cookie settings in the page footer.
• Optional Google Ads measurement. On our website enquiry pages, your separate permission allows Google to measure visits and enquiries after the mobile number has been confirmed. Google may receive the page, advertising click and cookie identifiers, IP address, browser information and an opaque identifier that prevents the same enquiry being counted twice. We do not send your name, email, phone number, project description, verification codes or private confirmation links to Google. We do not use this measurement for personalised advertising. The legal basis is your consent (GDPR article 6(1)(a)). You can withdraw it through the page footer's Cookie settings. Your enquiry works without either provider's permission.

Instagram guide requests

If you comment SEO under our designated Instagram Reel, JP Studio processes your Instagram account identifier, comment and Reel identifiers, comment text and time to validate your request and send one private reply with the guide link.

Limited delivery records and protected representations used for deduplication help us prevent repeated replies. This does not start an automatic follow-up sequence, and following our account is not required to receive the guide.

For questions or a deletion request relating to this guide delivery, contact support@jp-studio.com.

Who handles it for us

We do not sell your enquiry details. We use service providers for website hosting, our database (in the EU), email, verification codes by email and SMS, payments and invoicing. They process your data only on our instructions.

When you allow optional advertising measurement, Meta Platforms Ireland receives the page and conversion events described above through its Pixel and, if configured, Conversions API. Meta may use that data under its own privacy terms.

If you separately allow Google Ads measurement on a website enquiry page, Google receives the visit and phone-confirmed enquiry events described above through its Google tag. Google handles that information under its own privacy terms. We do not enable enhanced conversions using your contact details.

Some of these providers are based outside the EU. They transfer data under the safeguards the GDPR requires, such as the European Commission's standard contractual clauses.

How long we keep it

Enquiries and their verification results stay in our database while needed to handle the request or a resulting client relationship, or until you ask us to delete them where applicable. Verification codes are valid for 10 minutes and sessions for 30 minutes. Delivery and abuse-prevention records are kept while needed to investigate misuse. Invoices and accounting records are kept for as long as Portuguese tax law requires.

Your rights

You can ask to see, correct or delete your data, to restrict or object to how we use it, and to receive it in a portable format. Email support@jp-studio.com. You can also complain to a data protection authority: in Portugal that is the CNPD (cnpd.pt), or the authority where you live.

Form progress measurement

On the general enquiry page, with your permission we measure where visitors stop: starting, completing the two steps, trying to submit, saving and confirming the phone number. This runs only when you allow Meta or Google measurement. We store a random identifier for each form run, the step, a general error category and the source category Meta, Google, direct or other. We do not store your name, email, phone, project text or full page link in these measurements. These records are separate from your enquiry, are accessible only to our CRM team and are kept for no more than 31 days. You can withdraw permission for future steps through Cookie settings. Your enquiry also works without this measurement.

Cookies

Our campaign and appointment pages ask before loading Meta Pixel. If you decline, no Meta Pixel or Conversions API event is sent. If you allow, Meta may set its _fbp and _fbc cookies. Your choice is kept in this browser tab's session storage. Use Cookie settings in the page footer to change it. Campaign labels and aggregate crawler counts are recorded on our server independently of this choice. Stripe's payment pages are run by Stripe and have their own privacy policy.

Our website enquiry pages ask separately before loading Google's tag. Without Google permission, we do not load that tag, send cookieless measurement requests or set its advertising cookies. If you allow it, Google may set cookies with names beginning _gcl_ to measure advertising clicks and confirmed enquiries. The Google permission is stored separately in this browser tab's session storage. Withdrawing it clears these first-party Google advertising cookies and reloads the page with Google measurement blocked.

Last updated 27 September 2026.