Privacy & Cookie Policy

This policy explains how Jera ("we", "us", "our") collects, uses and protects your personal data when you visit our websites, jerait.ai and jerait.co.uk, use our tools, send us a message, book a call or a place at one of our events, or sign up to hear from us. We are the data controller for the information described below, and we handle it in line with UK data protection law (the UK GDPR and the Data Protection Act 2018).

1. Who we are

Jera is the trading name of Jera IT Limited, a company registered in Scotland (company number SC286609), registered office Auchterless, Turriff, Aberdeenshire, AB53 8EP. We are registered with the Information Commissioner's Office under registration number ZA262631. We provide IT and AI services to businesses, including IT support, cyber security, and AI adoption and governance. If you have any questions about this policy or about your personal data, contact us at privacy@jerait.co.uk.

2. The information we collect

We only collect the information you choose to give us, plus limited technical data as you browse:

• When you send us a message (our contact form): your name, work email address, company, what your enquiry is about, your message, and your phone number.
• When you book a call with us: your name, email address, company, job title, your answers to the booking questions, your phone number, your chosen time, and how you reached the booking page (for example, from one of our websites or a link we sent you).
• When you use our tools (such as AI Readiness or the Agent Finder): your name, email address, company, your answers, and your phone number.
• When you register for an event or for event updates: your name, email address, company, job title, your phone number, and your marketing choice.
• When you book places at one of our events: the same details for you, and the names and work email addresses of any colleagues you book. Each person gets their own confirmation and joining link. If you buy a ticket through our ticketing provider, it shares your order with us (your name, email address, ticket details, your answers at checkout and whether you checked in). It takes your payment; we never see your card details.
• If someone else books you onto an event or adds you to a meeting: we receive your work email address from them, and your name and company if they give them. We use these only to book you, send you information about that event or meeting and run it. We won't send you marketing unless you ask us to.
• Which of our websites you used, so we know whether you contacted us through jerait.ai or jerait.co.uk.
• When you browse our websites: standard technical data such as your device type, browser, approximate location (from your IP address), the pages you view and how you arrived, collected through cookies and similar technologies (see section 6).

Our websites never collect payment card details or other financial information.

3. How we use your information, and our legal basis

• To answer your message and arrange calls: replying to your enquiry, holding the call you booked, and following up. Legal basis: taking steps at your request before entering into a contract, and our legitimate interest in responding to enquiries.
• To send you what you asked for: a copy of your message, your AI plan or AI readiness report, a save code or event details. Legal basis: taking steps at your request, and our legitimate interest in providing it.
• To ask how useful our plans and reports are: the emails we send include a short feedback question. If you answer, we keep your answers with your details and use them to improve our tools. Legal basis: our legitimate interest in improving what we provide.
• To run events you've booked: managing your booking or ticket, sending confirmations, reminders and information about the event (such as joining details, answers to questions and any preparation), checking you in, invoicing paid places and handling refunds. These messages are only about the event, so you get them whether or not you ticked the keep-in-touch box. Legal basis: performing our contract with you; for people booked by someone else, our legitimate interest in running the event they've been booked onto.
• To call you if you give us your phone number: giving us a number tells us you're open to a conversation, so we may call you about your enquiry, the event you've booked, or how we could help your business. Legal basis: our legitimate interest in following up business enquiries. You can ask us not to call at any time (see section 4).
• To keep in touch by email about Jera events and AI: only if you tick the box on our form. Legal basis: your consent, which you can withdraw at any time.
• To contact business contacts by phone or post: if you give us your work details but don't tick the box, we keep them and may contact you by phone or post about our services. Legal basis: our legitimate interest in promoting our services to businesses. You can object at any time (see section 4). We check phone numbers against the Corporate Telephone Preference Service before calling.
• One-to-one outreach to business prospects: we sometimes contact people at businesses directly, using business contact details from a business-data provider. Legal basis: our legitimate interest in finding new business customers. When we first contact you, we'll tell you exactly where your details came from.
• To keep our websites secure and free of spam: for example, checking that a booking or message is genuine. Legal basis: our legitimate interest in protecting our services.
• To understand and improve our websites: measuring which content is useful. Legal basis: your consent for non-essential cookies, and our legitimate interest in running secure, effective websites.

Automated emails and AI. Some of our emails, such as acknowledgements, reminders and event information, are prepared and sent automatically with the help of AI, and say so. We don't use automated decision-making that has legal or similarly significant effects on you; decisions about you are made by people at Jera.

4. Marketing and your choices

We accept business email addresses only: our forms don't take personal addresses such as Gmail or Hotmail. We only send marketing email to people who tick the box asking us to keep in touch, and every marketing email includes an unsubscribe link. You can also ask us to stop at any time by emailing privacy@jerait.co.uk. If you didn't tick the box, we may still contact you by phone or post as described in section 3, and you can object to this at any time, and if you do, we will stop. Withdrawing consent or objecting does not affect anything we did before.

5. Who we share your information with

We do not sell your personal data. We share it only with service providers that help us run our business. Each acts under a written contract, only on our instructions, and must keep your data secure. They fall into these categories:

• Customer relationship and email platform: keeps our contact records and sends our emails, including the ones you ask for (EU).
• Business email, calendar and video-meeting provider: our mailboxes, calendars and online meetings.
• Appointment and event-booking services: scheduling calls and event places, sending confirmations, joining links and reminders; and, for paid events, ticketing and payment. Where a ticketing provider also runs your own account with it and takes your payment, it is responsible for that part under its own privacy policy, shown when you check out.
• Website hosting and cloud infrastructure: running our websites and the systems behind them, and storing their data securely (UK and EU).
• AI and productivity tools: help our team prepare, analyse and organise our work.
• Website analytics: only if you accept cookies (named in section 6).

A full list of the companies that process personal data for us is available on request from privacy@jerait.co.uk. We may also disclose information if the law requires it, or to protect our rights, our users or others.

6. Cookies and similar technologies

Cookies are small files stored on your device. When you first visit, we ask whether you're happy to accept non-essential cookies: we only set the analytics cookies below if you accept. You can change your mind at any time by declining, or by clearing the site's data in your browser.

• Essential cookies: needed for the site and its security to work. These are always on.
• Analytics cookies (Google Analytics and Microsoft Clarity): set only if you accept. They help us see which pages are useful and where people get stuck, so we can improve our websites. They identify a browser, not a named person. Examples include _ga and _ga_* (Google), and _clck and _clsk (Clarity); Clarity may also set Microsoft cookies such as MUID, and it masks what you type into forms. See Google's privacy policy and the Microsoft privacy statement.

You can also control or delete cookies through your browser settings, and block them entirely if you prefer, though some parts of the site may then work less well. When you open a booking or ticket page, that service may set its own cookies, explained on its own page.

7. International transfers

We choose UK and EU hosting wherever we can, so your data is normally stored in the UK or EU. Some of our providers are based in the US and may process data there. Where that happens, the transfer is covered by safeguards recognised under UK law, such as the UK extension to the EU–US Data Privacy Framework or standard contractual clauses. You can ask us for details at privacy@jerait.co.uk.

8. How long we keep your information

We keep your data only as long as we need it. Enquiry and call information is kept while we are in contact and for a reasonable period afterwards; event sign-up data is kept until you unsubscribe or ask us to remove it. Ticket and booking records are kept as long as we need them for the event and for our accounts. When we no longer need information, we delete it or make it anonymous.

9. Your rights

Under UK data protection law you have the right to:

• ask for a copy of the personal data we hold about you;
• have inaccurate data corrected;
• ask us to delete your data, or to restrict or object to how we use it;
• withdraw consent at any time, where we rely on it;
• ask us to transfer your data to another provider, where technically possible.

To exercise any of these, email privacy@jerait.co.uk. We will respond within one month.

10. Complaints

We hope to resolve any concern directly, but you also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk.

11. Changes to this policy

We may update this policy from time to time. When we do, we'll change the "last updated" date at the top of this page. Please check back occasionally.