Privacy Policy
This privacy policy explains how JENA (“we”, “us”, or “our”) collects, uses, and protects your personal information when you use our services.
Information We Collect
Information You Provide
When you use JENA, you may provide us with the following information:
- Account registration information: Your name, email address, phone number, and password
- Business information: Your business name, type of services offered, business address, and operating hours
- Payment information: Payment details processed securely through our payment providers (such as Stripe)
- Client information: Contact details and booking information for your clients
- Communication preferences: Your preferences for receiving marketing and service communications
Information We Collect Automatically
When you use our platform, we automatically collect:
- Device information: Device type, operating system, browser type, and unique device identifiers
- Usage data: Features used, pages visited, actions taken within the app, and time spent on different sections
- Location data: With your permission, we may collect location data to enable location-based features
- Log data: IP address, access times, and referring website addresses
How We Use Your Information
We use the information we collect to:
- Provide and improve our services: Enable booking functionality, process payments, and enhance platform features
- Process bookings and payments: Facilitate appointments between you and your clients, and process associated payments
- Send important service updates: Notify you of booking confirmations, reminders, cancellations, and platform updates
- Personalise your experience: Customise the app interface and provide relevant recommendations
- Communicate with you: Respond to your enquiries and provide customer support
- Marketing: With your consent, send promotional materials and information about new features
- Comply with legal obligations: Meet our legal and regulatory requirements
- Prevent fraud: Detect and prevent fraudulent activity and abuse of our platform
Data Security
We implement industry-standard security measures to protect your data, including:
- Encryption: All data is encrypted in transit using TLS/SSL and at rest using AES-256 encryption
- Access controls: Strict access controls and authentication mechanisms to limit data access
- Regular security audits: Ongoing security assessments and penetration testing
- Secure infrastructure: Our platform is hosted on secure, SOC 2 compliant cloud infrastructure
- Employee training: All staff receive regular training on data protection and security practices
Data Sharing
We may share your information with:
- Service providers: Third-party companies that help us operate our platform (payment processors, hosting providers, analytics services)
- Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred
- Legal requirements: When required by law, subpoena, or other legal process
- Protection of rights: To protect our rights, privacy, safety, or property, and that of our users
We do not sell your personal information to third parties.
Data Retention
We retain your personal information for as long as:
- Your account remains active
- It is needed to provide you with our services
- Required by law or for legitimate business purposes
When you delete your account, we will delete or anonymise your personal information within 30 days, unless we are required to retain it for legal purposes.
Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request deletion of your personal data
- Portability: Request a copy of your data in a portable format
- Restriction: Request restriction of processing of your data
- Objection: Object to processing of your data for certain purposes
- Withdraw consent: Withdraw your consent at any time where we rely on consent to process your data
- Opt out: Opt out of marketing communications at any time
To exercise any of these rights, please contact us using the details below.
International Data Transfers
If you are located outside the United Kingdom, please note that we may transfer your data to and process it in the United Kingdom. By using our services, you consent to the transfer of your information to our facilities and to those third parties with whom we share it.
We ensure that any transfers of personal data are carried out in compliance with applicable data protection laws and that appropriate safeguards are in place.
Children’s Privacy
Our services are not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child under 16, please contact us immediately.
Cookies and Tracking Technologies
We use cookies and similar tracking technologies to:
- Remember your preferences and settings
- Understand how you use our platform
- Provide personalised content and advertising
- Analyse platform performance
You can control cookies through your browser settings. However, disabling cookies may limit your ability to use certain features of our platform.
Changes to This Policy
We may update this privacy policy from time to time. We will notify you of any material changes by:
- Posting the updated policy on our website
- Sending you an email notification
- Displaying a prominent notice within our app
Your continued use of our services after any changes indicates your acceptance of the updated policy.
Contact Us
If you have any questions about this privacy policy or our data practices, please contact us:
- Email: privacy@jena.so
- Website: www.jena.so
- Address: JENA Labs Ltd, United Kingdom
For data protection enquiries, you may also contact our Data Protection Officer at dpo@jena.so.
Regulatory Information
JENA Labs Ltd is registered in England and Wales. If you have concerns about our data practices that we have not addressed satisfactorily, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.
This privacy policy was last updated on the date shown above.