Privacy policy
Who we are
Jere & CO (business ID 2177113-8), Turku, Finland, is the controller of the personal data this notice covers. For anything about your data, write to Jere Salonen at [email protected].
The notice covers this site: the contact form, the list for notes on new work, the client area and visits. When we host or look after a website for a client, the client decides about the personal data on that site, and its own privacy notice tells you about it.
When you write to us
The contact form asks for your name, your email address and your message. With them we keep the page you wrote from. The message also reaches us by email.
We use it to answer you and to talk about the work you’re asking about. The basis is our legitimate interest in answering messages. When you ask for a quote, it’s the steps you ask us to take before an agreement.
The site deletes the form’s messages two years after your latest contact with us. In our email we keep them as long as the correspondence and our bookkeeping need them. After that we delete them.
Notes on new work
If you tick “I’d like the occasional note on new work”, we keep your email address and the name you gave on our list. The basis is your consent. You can withdraw it at any time: write to us, or use the link to unsubscribe that every note carries. We keep your address until you leave the list.
The client area
Our clients’ people sign in to the client area by invitation, with their email address and a password or with a sign-in link we send by email. For an account we keep your name, email address and language, your organisation and your role there. The password is stored only as a one-way hash that no one can read back. The client area shows your organisation’s sites, the work we’ve done on them and its billing.
The basis is the agreement with your organisation: our legitimate interest in carrying it out, or the agreement itself if you’re our client in person. We close an account when it’s no longer needed, at the latest when the client relationship ends. Invoices and other accounting records we keep as long as the Finnish Accounting Act requires.
Visits
We count visits with Umami, which runs on our own server. It sets no cookies and stores no IP addresses. It records the page, where the visit came from, the browser and device type, and the country and town the connection comes from. We look only at totals. We keep the visit records with no set end, but no single visitor can be identified from them. The basis is our legitimate interest in knowing which pages are read.
Our servers also log each request to the site with its IP address. The basis is our legitimate interest in keeping the site secure and working. The log has a fixed size: when it’s full, the oldest entries go. At today’s traffic, entries last a few days.
Cookies
The site sets one cookie, and it’s essential: it keeps you signed in and protects the forms from forged requests. It needs no consent, and it goes when you close your browser. Your browser also remembers whether you left the side menu open; that never leaves your device. There are no advertising or tracking cookies.
Where the data comes from
We get the data from you. The name and email address for a client area account may also come from your organisation, when someone there invites you. Giving us your data is voluntary, but without your name and email address we can’t answer your message or open an account for you.
Who else handles the data
We don’t sell personal data or hand it over for marketing. These services handle it on our behalf:
- Hetzner: the data centre in Germany where the site, its database and the visit count run on our own servers
- Cloudflare: delivers the site and stores its pictures and files
- Resend: sends the site’s emails, such as sign-in links and the contact form’s messages to us
- Google: our email, where the contact form’s messages arrive
- Backblaze: keeps a backup copy of the database, besides our own backups in Finland
Cloudflare, Resend, Google and Backblaze are American companies, so data may also be processed outside the EU. Such transfers rely on the EU–US Data Privacy Framework or on the European Commission’s standard contractual clauses.
We give data to the authorities only when the law requires it.
Your rights
You can ask us for a copy of your data, and ask us to correct it, delete it or restrict its use. You can object to any use based on our legitimate interest. You can also withdraw your consent at any time, and take the data you gave us elsewhere. Write to [email protected]. We answer within a month, free of charge, and may first ask you to confirm who you are. Data the law requires us to keep, such as invoices, we can’t delete straight away.
If you think we handle your data unlawfully, you can complain to the Office of the Data Protection Ombudsman (tietosuoja.fi).
We don’t make decisions about anyone by automated means alone, and we don’t profile anyone.
Updated 4 November 2026.