Privacy Policy

Who we are

Jogan is a trading name of JOGANGROUP LTD.

This website is operated by JOGANGROUP LTD (“Jogan”, “we”, “us”), a company registered in England and Wales, company number 17067444. We are the data controller for the information described here. Our registered office (for statutory correspondence) is Moat Lodge, Stock Chase, Maldon, United Kingdom, CM9 4AA; full details are on our company information page. You can reach us at info@jogan.co.uk.

We are registered with the UK Information Commissioner’s Office (ICO), registration number ZC195263.

What we collect through this website

Through this website we collect only what you choose to send us through the enquiry form:

• your name and business name;
• your email address, and your phone number if you ask for a callback;
• your current website address, if you give one;
• what you would like help with, and any message you add;
• the date and time you submitted the form, and the page you came from (and any campaign tags in the link), so we can understand and respond to your enquiry.

We do not use analytics, advertising or tracking tools on this site, so we do not build a profile of your browsing. See our cookie policy for the small number of strictly necessary cookies we do use.

Why we hold it and our lawful basis

We use your details only to reply to your enquiry and, if you go ahead, to provide the service you asked about. Our lawful basis is taking steps at your request before entering a contract, and our legitimate interest in responding to people who contact us. We do not sell your data or use it for unrelated marketing.

Where it is stored and who processes it

Your enquiry is stored in our database, hosted on Laravel Cloud (Amazon Web Services). Enquiry notifications reach us through Microsoft 365 (Exchange Online). Any acknowledgement email we send is handled by our transactional email provider (not yet configured). These providers process data on our behalf under their own data-protection terms; we share your information with them only to run this service.

How long we keep it

If your enquiry does not lead to work together, we keep it for up to 24 months and then delete it. If you become a client, we keep the information for as long as we work together and for any period the law requires afterwards.

Managing our social media accounts (Facebook and Instagram)

Jogan runs its own business accounts on Facebook and Instagram. We connect these accounts to our internal Jogan Marketing system through Meta’s official platform, so we can manage our presence in one place. This connection is currently read-only: we can read information about our own accounts and the activity on our own posts, but the system does not publish posts, reply to comments, react or send messages. Any external action of that kind is prepared for a person and requires human approval before it could ever happen.

Through this connection we may access and store information Meta makes available about our own accounts and content, including:

• our Facebook Page and Instagram account identifiers, display names and usernames;
• identifiers and metadata for our own posts and media (for example when they were published);
• comments and replies left on content we manage, together with the public display name or identifier Meta returns for the person who left them;
• engagement, reach, impression, view and follower/account metrics that Meta provides;
• the permissions our connection has been granted, and connection timestamps.

Where this information relates to another person — for example someone who comments on one of our posts — we obtain it through Meta rather than directly from that person. We do not collect Facebook or Instagram users’ full profiles, their private messages, or data about their activity elsewhere.

We use this information only to: manage our social media presence; understand how our content performs; review comments and engagement; prepare responses for a person to approve; and plan and improve our marketing. We do not use it for advertising, profiling or automated decisions about the people who interact with us.

Our lawful basis is our legitimate interest in running and understanding our own marketing. To make the connection, Meta issues us an authorisation credential (an access token); we hold it through a governed, protected credential store — never as plain text — and we do not share it.

We keep identifiable social engagement data — such as comments and the profile or account identifiers Meta returns with them — for up to 12 months, where we need it for engagement analysis, moderation, record-keeping or reviewing marketing performance. Aggregated or anonymised performance metrics we keep for up to 24 months for trend and marketing-performance analysis. We delete or anonymise this information sooner once it is no longer needed for these purposes, subject to any legal, security or record-keeping requirements. Deleting it from our systems does not remove content that remains publicly hosted on Meta.

Meta also processes information in its own right as a data controller, under Meta’s Privacy Policy, which is outside our control.

AI assistance

We use AI-assisted tools inside our own business systems to help us draft content, summarise performance and suggest replies for us to review. These are aids for our team: they do not make decisions that have legal or similarly significant effects about you, and nothing they draft is sent or published externally without a person approving it.

Your rights

You have the right to ask us to access, correct, or delete your information, to restrict or object to how we use it, and (where it applies) to receive a copy in a portable format such as CSV or PDF. Where our use of your information relies on consent, you can withdraw it at any time. To exercise any of these, email info@jogan.co.uk or see our data deletion page. We may need enough information to confirm who you are before we act, and some information may need to be kept where the law permits or requires it. If you are unhappy with how we handle your data, you can complain to the ICO at ico.org.uk.

Changes to this policy

We may update this policy as our service changes. The current version always lives on this page.