Legal

Privacy Policy

How junodavidk.com collects, uses, and protects your personal information — in full compliance with GDPR and applicable data protection law.

Last updated: 29 March 2026 Version: 1.0 Controller: Juno David K
Summary: This website (junodavidk.com) is operated by Juno David K, an individual based in Kerala, India. This policy explains what personal data we collect, why we collect it, how long we keep it, and your rights over it. We do not sell your data. We do not share it with third parties for their marketing purposes.

1. Who We Are (Data Controller)

Controller: Juno David K
Website: junodavidk.com
Location: Kerala, India
Contact: [email protected]

This is a personal brand website operated by an individual. All data handling decisions are made by Juno David K personally. If you have any questions about how your data is processed, please write to the email above.

2. What Data We Collect and Why

2.1 Data You Provide Voluntarily

  • Newsletter / Toolkit subscription: Your email address when you sign up for the free toolkit or newsletter. Used to send you the toolkit and occasional relevant updates on AI governance and cybersecurity. Legal basis: consent (Article 6(1)(a) GDPR).
  • Contact form messages: Your name, email address, and message when you contact us. Used solely to respond to your enquiry. Legal basis: legitimate interest in responding to communications (Article 6(1)(f) GDPR).

2.2 Data Collected Automatically

  • Server logs: IP addresses, browser type, referring URLs, pages visited, and time of visit — automatically recorded by the web server. Retained for up to 90 days for security and diagnostic purposes. Legal basis: legitimate interest in operating a secure website.
  • Analytics cookies (if accepted): Aggregated, anonymised data about how visitors navigate the site (page views, session duration, traffic sources) — used to improve content. We use privacy-first analytics that do not track individuals across other sites. Legal basis: consent (through the cookie consent mechanism).
  • AI widget conversations: Questions you type into the AI assistant are sent to the Anthropic Claude API to generate responses. Queries are not stored on our servers. Please review Anthropic's privacy policy for how they handle API queries.

2.3 Data We Do NOT Collect

  • Payment or financial information (this site does not process payments)
  • Sensitive personal data (health, biometric, racial/ethnic origin, political opinions)
  • Children's data (this site is not directed at persons under 18)
  • Location data beyond country-level (from IP address, for analytics only)

3. Cookies and Tracking

We use the following categories of cookies. You can manage your preferences at any time using the cookie banner or by clearing your browser's cookies.

CategoryCookie / TechnologyPurposeDuration
EssentialSession cookie, CSRF tokenRequired for core site functionality and securitySession / 24h
Functionaljdk_cookie_consent (localStorage)Remembers your cookie consent choices12 months
Analytics (optional)Google Analytics (_ga, _gid) or privacy-first analytics equivalentAggregate, anonymised usage statistics to improve contentUp to 2 years
Marketing (optional)Only if explicitly enabled by youCampaign tracking — used only if you have opted inUp to 1 year
Managing cookies: You can change your cookie preferences at any time by clearing your browser's localStorage (the cookie consent is stored under the key jdk_cookie_consent) or by revisiting this site and using the cookie banner that will reappear after you clear it. Most browsers also allow you to block or delete cookies entirely through browser settings.

4. How Long We Keep Your Data

  • Newsletter email addresses: Until you unsubscribe or request deletion
  • Contact form enquiries: Up to 2 years from the date of last correspondence
  • Server logs: 90 days rolling
  • Analytics data: Aggregated data retained up to 26 months; raw session data deleted after 14 months
  • Cookie consent records: 12 months

5. Your Rights Under GDPR

If you are in the European Economic Area (EEA) or the United Kingdom, you have the following rights regarding your personal data:

📋
Right of Access
Request a copy of the personal data we hold about you.
✏️
Right to Rectification
Ask us to correct inaccurate or incomplete data.
🗑️
Right to Erasure
Request deletion of your personal data ("right to be forgotten").
⏸️
Right to Restriction
Ask us to restrict processing of your data in certain circumstances.
📦
Right to Data Portability
Receive your data in a structured, machine-readable format.
🚫
Right to Object
Object to processing based on legitimate interests or for direct marketing.
↩️
Withdraw Consent
Withdraw consent at any time where processing is based on consent.
🏛️
Right to Complain
Lodge a complaint with your local data protection authority.

To exercise any of these rights, please email [email protected] with the subject line "Data Rights Request". We will respond within 30 days. We may need to verify your identity before fulfilling the request.

6. International Data Transfers

This website is hosted on servers which may be located outside the EEA. Where data is transferred internationally, we rely on:

  • Standard Contractual Clauses (SCCs) approved by the European Commission, where applicable
  • Adequacy decisions for countries the European Commission has determined provide an adequate level of protection

The AI assistant feature uses the Anthropic Claude API, which is a US-based service. API queries are processed in the US. We recommend not including sensitive personal information in queries to the AI assistant.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include:

  • HTTPS encryption for all data in transit
  • Secure server hosting with access controls
  • Minimal data collection — we only collect what is necessary for the stated purpose
  • No storage of payment data (no transactions occur on this site)
  • Regular review of our data handling practices

While we take reasonable steps to protect your data, no method of internet transmission or electronic storage is 100% secure. Please contact us immediately at [email protected] if you suspect any security issue.

8. Third-Party Services

This website may use the following third-party services, each with their own privacy policies:

We do not sell your data to any third parties and we do not share your data with third parties for their own marketing purposes.

9. Links to Other Websites

This website contains links to other websites (LinkedIn, external publications, referenced resources). Once you leave junodavidk.com, this privacy policy no longer applies. We encourage you to review the privacy policies of any sites you visit.

10. Children's Privacy

This website is not directed at children under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at [email protected] and we will delete it promptly.

11. Changes to This Policy

We may update this privacy policy from time to time. When we do, we will update the "last modified" date at the top. Material changes will be communicated more prominently. Continued use of the site after changes are published constitutes acceptance of the updated policy.

12. Contact

For any questions, requests, or complaints regarding this privacy policy or how we handle your data, please contact:

Juno David K
Email: [email protected]
Website: junodavidk.com
Location: Kerala, India

For EEA residents, you also have the right to lodge a complaint with your national data protection supervisory authority.