Privacy Policy

This page explains what happens to personal data collected through this website. If you are joining a JLF Consulting programme as a participant, a separate and much fuller notice applies to you, covering health data, and you receive it before you are asked to consent to anything.

Last updated: 29/09/2026

Who is responsible

Yannick Ferrandini, trading as JLF Consulting, 1b an der Gaass, L-9837 Neidhausen, Luxembourg, is the data controller for the processing described here.

Email: jac.lad.consulting@gmail.com · Telephone: +352 621 657 075

No data protection officer has been appointed, which at this size is not required. Write to the address above about anything on this page.

What is collected, and why

If you use the contact form, the form collects your first name, last name, email address and the content of your message. It is used to answer you and for nothing else. It is not added to a mailing list, it is not used for marketing, and it is not passed to anyone.

The legal basis is Article 6(1)(b) of the GDPR, steps taken at your request before entering into a contract, and, where your message is not about engaging JLF Consulting, Article 6(1)(f), the legitimate interest in answering correspondence.

If you simply visit the site, the hosting platform records technical data: your IP address, the type of browser and device, the pages you open and the time. This is used to keep the site running and secure, on the basis of Article 6(1)(f), the legitimate interest in operating a working and secure website.

The contact form is protected by Google reCAPTCHA, which analyses the way the page is used in order to distinguish a person from an automated submission. This means Google receives data about your visit to that page, including your IP address. The basis is Article 6(1)(f), the legitimate interest in preventing spam and abuse of the form. Google's own privacy policy applies to what it does with that data.

No special category data is collected through this website, and nothing on it asks for health information. Please do not put health details in the contact form. If you do, they are deleted once your enquiry is answered.

Cookies and similar technology

Three kinds of cookie are used on this site.

Strictly necessary cookies keep the site working, remember your cookie choice and secure the contact form. These are set without consent, because the site cannot function without them.

Google reCAPTCHA sets a cookie on the contact page only, to distinguish a person from an automated submission. This is also set without consent, for the same reason: the form cannot be protected otherwise.

Squarespace analytics counts visits and which pages are opened, so that the site can be improved. This is set only if you agree to it.

No advertising or tracking cookies are set, and nothing on this site follows you to another one.

You can change your choice at any time through the cookie settings on this site.

Who else sees the data

Squarespace Ireland Ltd, Dublin, Ireland, hosts this website and stores what the contact form collects. Data may be transferred to its parent company in the United States.

Google Ireland Limited, Dublin, Ireland, provides the reCAPTCHA protection on the contact form. Data may be transferred to the United States.

Email sent and received in connection with your enquiry is delivered and stored by Google through its Gmail service, which may involve transfers to the United States.

Squarespace and Google act on instructions under data processing agreements. Nobody else receives data from this website, and it is never sold or exchanged.

Data sent outside the European Union

Some of the suppliers above transfer data to the United States. Those transfers are made under the standard contractual clauses adopted by the European Commission, which are incorporated into the agreements with them.

How long it is kept

An enquiry that does not lead to work is kept for twelve months and then deleted.

An enquiry that leads to an engagement is kept with the client file, for as long as the engagement and any legal retention period requires.

Technical and security logs are kept for the period set by the hosting platform.

Your rights

Under the GDPR you may ask for access to your data, its rectification or erasure, the restriction of processing, or portability, and you may object to processing based on legitimate interest. Where processing rests on consent, you may withdraw it at any time, which does not affect what was done before.

Write to jac.lad.consulting@gmail.com. You will have an answer within one month.

You may also complain to the supervisory authority, the Commission nationale pour la protection des données (CNPD), 15 boulevard du Jazz, L-4370 Belvaux, Luxembourg, cnpd.lu.

Automated decision-making

There is none. Nothing on this website makes a decision about you automatically, and there is no profiling.

Changes

If this page changes, the date at the top changes with it. Material changes are not applied retroactively to data already collected.