Privacy and website enquiries

About this notice

EOJI operates eoji.net and handles enquiries made through this website. For enquiries, corrections or privacy requests, contact q@eoji.net. This notice describes the public website and initial enquiries. Any client engagement and its data-handling arrangements are agreed separately.

Our approach

We use information to respond to enquiries, discuss requested services and operate the website securely. We do not sell or rent enquiry information, use it for advertising profiles, or automatically subscribe visitors to marketing. We do not run optional visitor analytics on the public website.

Information you provide

For a consulting enquiry, we receive your name and work email, together with your selected service, message and organisation details where provided. A name and work email are required to use that form; the other fields are optional. For a privacy request, we receive your email and request description, together with your name where provided. An email address is required so that we can respond; the other privacy-request fields are optional.

Providing information is voluntary, but without sufficient contact details we may be unable to respond. Please provide only what is relevant to an initial enquiry or privacy request. Do not submit confidential loan tapes, financial-account credentials, passwords, identity documents, sensitive personal information or personal borrower data through these forms.

Purposes and legal basis

We use enquiry information to assess and respond to your request and arrange relevant follow-up. Where EU or UK data protection law applies, the relevant bases are steps you request before entering a contract with you, where applicable, and our legitimate interests in answering business enquiries and maintaining secure communications. Legal obligations may require retention of particular records. We do not use enquiry information for automated credit decisions or other solely automated decisions with legal or similarly significant effects.

Technical and communication providers

Technical service providers process connection information, including IP addresses, to deliver and secure this website and protect enquiry submissions against abuse. EOJI does not use this information for advertising or behavioural profiling.

Website hosting and security providers, enquiry-delivery and spam-prevention providers, and email service providers process relevant information to operate the site and handle communications. EOJI receives and uses the information you submit to respond to enquiries and privacy requests.

Necessary technical and communication processing is separate from optional visitor analytics. EOJI does not run optional visitor analytics on the public website.

Retention and international processing

EOJI keeps enquiry and privacy-request correspondence for as long as needed to respond, manage resulting discussions or engagements, and meet applicable record-keeping or legal-claims requirements. The need for continued follow-up, an ongoing engagement and applicable obligations determine EOJI's retention period. Security logs and provider records follow the relevant providers' retention and deletion arrangements.

The enquiry-delivery provider's published policy states that submission records may be retained for up to three years, unless a shorter arrangement applies or they are deleted earlier. Providers may process information outside your country, including in the United States and India, and in other infrastructure regions relevant to their services.

Published terms for the enquiry-delivery service describe European Commission Standard Contractual Clauses and the UK Addendum where applicable to transfers from the EEA, UK or Switzerland. This does not state that every supplier or regional transfer has been independently assessed by EOJI. Use our privacy-request channel to ask about the supplier identities and documented arrangements applicable to your request.

Your rights

Depending on applicable law, you may request access, correction, deletion or restriction of your personal information, and data portability where applicable. You may object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing. Use our privacy-request channel to exercise these rights. You may also complain to the relevant data protection authority; for example, the UK Information Commissioner’s Office or the appropriate authority in the EEA.

Additional information by jurisdiction

The following provisions apply where the relevant law governs our processing.

Where Taiwan's Personal Data Protection Act applies, you may request access to or copies of your personal data, supplementation or correction, cessation of collection, processing or use, and erasure, subject to the Act. These rights cannot be waived in advance by contract. Use our privacy-request channel to make a request. Providing information is voluntary, but without sufficient contact details we may be unable to respond.

Where Hong Kong SAR's Personal Data (Privacy) Ordinance applies, you may request access to and correction of personal data held about you. The purposes of collection, required and optional fields, consequences of not providing information and classes of recipients are explained above. You may submit requests through our privacy-request channel and may raise a complaint with the Office of the Privacy Commissioner for Personal Data, Hong Kong.

Where Japan's Act on the Protection of Personal Information applies, you may request disclosure of retained personal data and applicable third-party provision records, correction of inaccurate information, and cessation of use, erasure or cessation of third-party provision where the statutory conditions are met. Requests and privacy complaints may be submitted through our privacy-request channel. You may also contact Japan's Personal Information Protection Commission.

Security and enquiry scope

The website and form use HTTPS, but no online transmission can be guaranteed completely secure. Sending an enquiry does not itself create a consulting engagement or constitute verification of the information supplied. Analysis and reliance on client information are addressed in the scope of any agreed engagement. Nothing in this notice excludes statutory data-protection rights or responsibilities.