Privacy Policy

This website is operated by J Shell International ("JS International", "we", "us", "our"), a consultancy based in the United Kingdom operating globally, including in the European Union, the United States, the Middle East, Asia-Pacific, Latin America and Africa. We are the data controller responsible for personal data submitted through jshellinternational.com.

This policy applies to visitors and clients worldwide. Region-specific rights are set out in sections 9–15 below.

Questions about this policy or your data can be sent to jorge@jshellinternational.com.

We only collect what you give us directly through the site:

• Contact form: name, company, email, selected service tier, and the message you write.
• Global Intelligence Report download: email, and optionally name and company. We also store the user-agent string of the request for security and abuse-prevention purposes.
• Email correspondence: the contents of any email you send us.

We do not knowingly collect special-category / sensitive personal information, payment information, precise geolocation, biometric data, or data about children under 16 through this site.

We use your data only for the purpose for which you provided it:

• To respond to your inquiry and discuss a possible engagement.
• To deliver the Global Intelligence Report you requested.
• To send transactional confirmations related to those requests.
• To keep records of business communications and meet legal obligations.

We do not add you to a marketing mailing list and do not send promotional emails on the basis of an inquiry or report download. Every email we send you contains an unsubscribe link.

We do not "sell" or "share" your personal information as those terms are defined under U.S. state privacy laws (including the California Consumer Privacy Act as amended by the CPRA), and we do not use it for cross-context behavioural advertising or automated decision-making that produces legal or similarly significant effects.

For visitors in the United Kingdom, the European Economic Area, Switzerland and other jurisdictions with comprehensive privacy laws (including Singapore, Australia, Japan, South Korea, Hong Kong, Brazil, Canada, South Africa, the United Arab Emirates and Saudi Arabia), we rely on the following legal bases, as applicable under local law:

• Performance of a contract / pre-contract steps — when you contact us about an engagement.
• Legitimate interests — running and securing the site, responding to inquiries, and keeping appropriate business records. You can object at any time.
• Consent — when you submit your email to download the Global Intelligence Report. You can withdraw it at any time without affecting the lawfulness of prior processing.
• Legal obligation — where we are required to retain records.

We keep contact inquiries and report-download records indefinitely so we can refer back to past conversations, until you ask us to delete them. Email-suppression records (unsubscribes) are kept for as long as we operate, so we do not contact you again by mistake.

We do not sell or rent your data, and we do not share it for cross-context behavioural advertising. We share it only with service providers (processors / "service providers" and "contractors" under U.S. state privacy laws) acting on our behalf under written confidentiality and data-protection terms:

• Hosting & database — the cloud platform that runs this site and stores form submissions.
• Email delivery — the provider that sends transactional emails (your confirmation and our internal notification).

We may also disclose data where required by law, court order, or regulatory request, or to protect our rights, property, or safety.

Because we operate globally, your data may be transferred to and processed in any of the jurisdictions in which we or our service providers operate, including the United Kingdom, EEA, United States, Switzerland, Canada, Asia-Pacific, the Middle East, Latin America and Africa. Where data leaves a country or region that requires local storage or special safeguards, we rely on appropriate safeguards such as:

• European Commission adequacy decisions (including the EU–U.S. Data Privacy Framework, where the recipient is certified);
• EU Standard Contractual Clauses;
• the UK International Data Transfer Agreement or UK Addendum to the SCCs;
• Swiss Federal Council adequacy decisions and SCCs for transfers from Switzerland;
• equivalent contractual, organisational or legal safeguards required under local law in the recipient jurisdiction.

You can request a copy of the safeguards in place by emailing us.

This site does not use advertising, analytics, or third-party tracking cookies. No tracking pixels, no fingerprinting, no cross-site profiling. The only browser storage we may use is strictly necessary to keep the site functioning. Because we do not engage in tracking, we treat browser-level signals such as Global Privacy Control (GPC) and "Do Not Track" as already satisfied by default.

Data is transmitted over HTTPS and stored on access-controlled infrastructure with row-level security. Access is restricted to people who need it to operate the business. No system is perfectly secure, but we work to keep your data protected and will notify affected individuals and regulators of a personal-data breach where required by law.

If you are in the United Kingdom, the European Economic Area or Switzerland, under the UK GDPR, EU GDPR and the Swiss Federal Act on Data Protection (FADP) you have the right to:

• access a copy of the personal data we hold about you;
• have inaccurate data corrected;
• request erasure of your data ("right to be forgotten");
• restrict or object to certain processing, including processing based on legitimate interests;
• data portability where applicable;
• withdraw consent at any time, where processing relies on consent;
• not be subject to solely automated decisions with legal or similarly significant effects (we do not carry out such processing).

To exercise any of these, email jorge@jshellinternational.com. UK residents may complain to the Information Commissioner's Office (ico.org.uk). EEA residents may complain to their local supervisory authority — a directory is available from the European Data Protection Board (edpb.europa.eu). Swiss residents may complain to the Federal Data Protection and Information Commissioner (edoeb.admin.ch).

If you are a resident of California, Colorado, Connecticut, Virginia, Utah, Texas, or another U.S. state with a comprehensive privacy law, you may have the right to:

• know what personal information we collect, use, and disclose about you;
• access a copy of that information;
• correct inaccurate information;
• delete personal information we hold about you;
• opt out of "sale" or "sharing" of personal information and of targeted advertising — although, as noted above, we do not engage in any of these;
• limit the use of sensitive personal information — we do not collect sensitive personal information through this site;
• not be discriminated or retaliated against for exercising your rights.

To exercise these rights, email jorge@jshellinternational.com with the subject line "U.S. Privacy Request" and tell us your state of residence. We will verify your request by matching the email and details you provide against the records we hold. You may use an authorised agent acting on your behalf with written permission. If we deny a request, you may appeal by replying to our decision; California residents may also contact the California Privacy Protection Agency or California Attorney General.

California "Shine the Light": we do not disclose personal information to third parties for their own direct-marketing purposes.

If you are in the Asia-Pacific region, including Australia, China, Hong Kong, India, Japan, Malaysia, New Zealand, the Philippines, Singapore, South Korea, Taiwan, Thailand or Vietnam, local privacy laws such as the Australian Privacy Act, Chinese PIPL, Hong Kong PDPO, Indian DPDP Act, Japanese APPI, Malaysian PDPA, New Zealand Privacy Act, Philippine Data Privacy Act, Singapore PDPA, South Korean PIPA, Taiwanese PDPA and Thai PDPA generally give you the right to:

• access the personal data we hold about you;
• request correction of inaccurate or incomplete data;
• request erasure or deletion of your data, subject to legal retention requirements;
• object to or restrict certain processing, including direct marketing;
• withdraw consent where processing is based on consent;
• data portability, where provided by local law;
• lodge a complaint with the relevant local data protection authority or regulator.

To exercise any of these rights, email jorge@jshellinternational.com with the subject line "APAC Privacy Request" and tell us your country of residence.

If you are in the Middle East or Africa, including Bahrain, Egypt, Ghana, Jordan, Kenya, Kuwait, Nigeria, Oman, Qatar, Saudi Arabia, South Africa, the United Arab Emirates or elsewhere in the region, local laws such as the UAE Personal Data Protection Law, Saudi Personal Data Protection Law, Qatar Law No. 13 of 2016, Bahrain Personal Data Protection Law, Kuwait e-Commerce and Data Protection framework, Oman Personal Data Protection Law, South Africa POPIA, Nigeria NDPR, Kenya Data Protection Act and Ghana Data Protection Act generally give you the right to:

• access the personal data we hold about you;
• request correction of inaccurate data;
• request erasure or deletion of your data, subject to legal retention requirements;
• object to processing that causes harm or is for direct marketing;
• withdraw consent where processing is based on consent;
• lodge a complaint with the relevant local data protection regulator.

To exercise any of these rights, email jorge@jshellinternational.com with the subject line "MEA Privacy Request" and tell us your country of residence.

If you are in Canada, Brazil, Mexico, Argentina, Chile, Colombia, Peru, Uruguay or other Latin American jurisdictions, laws such as Canada's PIPEDA and Quebec Law 25, Brazil's LGPD, Mexico's LFPDPPP, Argentina's Personal Data Protection Law, Chile's Law No. 19.628 on the Protection of Private Life, Colombia's Law 1581 of 2012 and Peru's Habeas Data Law generally give you the right to:

• access the personal data we hold about you;
• request correction, rectification or updating of inaccurate data;
• request deletion, cancellation or erasure of your data, subject to legal retention requirements;
• object to processing or revoke consent, where provided by local law;
• data portability, where provided by local law;
• lodge a complaint with the relevant privacy commissioner, ANPD or local authority.

To exercise any of these rights, email jorge@jshellinternational.com with the subject line "LATAM / Canada Privacy Request" and tell us your country of residence.

We may update this policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Material changes will be highlighted on this page.