1. Introduction
At Jambr S.r.l. ("we," "our," or "us"), we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and platform (collectively, the "Platform"), in accordance with applicable U.S. federal and state data protection legislation, including the California Consumer Privacy Act (CCPA).
Data Controller: Jambr S.r.l., Miami, USA. Contact: privacy@jambr.net
2. Information We Collect
Personal Information
We may collect personal information that you voluntarily provide, including:
- Name and contact information (email, phone number, address)
- Account credentials
- Payment and billing information (processed by Stripe)
- Government-issued identification (for Provider verification via Stripe Identity)
- Profile information and photos
Usage Information
We automatically collect certain information when you use the Platform:
- Device information (type, operating system, unique identifiers)
- Location data (with your explicit consent)
- Usage data (pages visited, features used, time spent)
- IP address and browser type
3. Legal Basis for Processing
We process your personal data on the following legal bases under GDPR Article 6:
- Contract performance: Processing necessary to provide our services, manage your account, and process bookings and payments.
- Legitimate interests: Fraud prevention, platform security, service improvement, and analytics (where these interests do not override your fundamental rights).
- Consent: Marketing communications and non-essential cookies. You may withdraw consent at any time.
- Legal obligation: Compliance with tax, anti-money laundering, and other regulatory requirements.
4. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our services
- Process transactions and send related information
- Connect Customers with Providers
- Send promotional communications (only with your consent)
- Respond to customer service requests
- Conduct identity verification for Providers (via Stripe Identity)
- Prevent fraud and enhance platform security
- Comply with legal obligations
5. Information Sharing
We may share your information in the following situations:
- With Providers/Customers: To facilitate bookings, we share relevant contact and booking information between parties.
- Payment processing: Stripe processes payments and identity verification on our behalf. Stripe's privacy policy applies to their handling of your data.
- Service providers: We share information with third-party vendors who process data on our behalf, under data processing agreements that comply with GDPR Article 28.
- Legal requirements: We may disclose information if required by law or in response to valid legal requests from public authorities.
- Business transfers: In connection with any merger, sale, or acquisition of our business, with appropriate data protection safeguards.
6. International Data Transfers
Your data is primarily stored and processed within the United States. If we transfer data internationally, we ensure appropriate safeguards are in place in compliance with applicable law.
7. Data Security
We implement appropriate technical and organisational security measures to protect your personal information, including encryption, access controls, and regular security assessments. However, no electronic transmission or storage system is 100% secure, and we cannot guarantee absolute security.
8. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you services. After account deletion, we may retain certain data for the period required by applicable law (e.g., tax and accounting obligations) or for the establishment, exercise, or defence of legal claims. We will securely delete or anonymise data that is no longer required.
9. Your Rights Under GDPR
As a data subject, you have the following rights:
- Right of access: Obtain confirmation and a copy of your personal data
- Right to rectification: Correct inaccurate or incomplete data
- Right to erasure: Request deletion of your personal data ("right to be forgotten")
- Right to restriction: Restrict the processing of your data in certain circumstances
- Right to data portability: Receive your data in a structured, commonly used format
- Right to object: Object to processing based on legitimate interests or for direct marketing
- Right to withdraw consent: Withdraw consent at any time where processing is based on consent
To exercise these rights, please contact us at privacy@jambr.net. We will respond to your request within 30 days. You also have the right to lodge a complaint with your local data protection supervisory authority.
10. Children's Privacy
Our Platform is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal data from a child, we will take steps to delete that information.
11. Cookies and Tracking
We use essential cookies to operate the Platform. Non-essential cookies (analytics, marketing) are only placed with your explicit consent, in accordance with the ePrivacy Directive. You can manage your cookie preferences at any time through our cookie settings.
12. Updates to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Where required, we will seek your consent to material changes.
13. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us at: