1. Who We Are
Sarah Jermouni trades as SJ Consulting, a sole trader (jednoosobowa działalność gospodarcza) registered in Poland. Address: ul. Świętego Mikołaja 8/11 lok. 208, 50-125 Wrocław, Poland. NIP: 8971971555. Email: sarah@sjconsulting.io.
Sarah Jermouni is the data controller for personal data processed through this website and in the course of providing services.
2. Data We Collect
Information you provide
Via the contact form — name, company name, email address, phone number, service interest, message content.
Data collected automatically
- Session cookies necessary for the website to function.
- Google Analytics, with IP anonymisation enabled — used to understand website traffic in aggregate.
No advertising pixels or social media tracking scripts are used on this website.
3. How We Use Your Data
- To respond to your enquiry.
- To provide the services you have requested.
- To send you relevant follow-up communications about our services — you may unsubscribe at any time.
- To analyse and improve website performance using anonymised analytics data.
4. Where Your Data Is Stored
Contact form submissions are stored in Sarah's email inbox and in HubSpot CRM (a US-based provider operating under EU Standard Contractual Clauses). Data is retained for as long as is reasonably necessary for the purposes described, or until you request deletion.
5. Processing Client Data — AR Engagements
When providing AR consulting services, Sarah may access and process data belonging to her clients — including personal data of their customers or debtors (names, contact details, financial information). This data is:
- Processed solely for the purpose of delivering the contracted services.
- Subject to a written data processing agreement (DPA) with each client.
- Processed using Microsoft Excel, Power BI, and Power Query — entirely on local devices and not uploaded to cloud platforms.
In this context, Sarah acts as a data processor; the client remains the data controller for their customers' data.
6. Third-Party Sharing
- HubSpot CRM: contact data is stored and managed in HubSpot, acting as a data processor under a data processing agreement.
- Google Analytics: anonymised website usage data.
No data is sold to third parties. No advertising or retargeting pixels are used.
7. Your Rights Under GDPR
Under Regulation (EU) 2016/679 (GDPR), you have the right to:
- Access the personal data held about you.
- Request correction of inaccurate data.
- Request erasure of your data (right to be forgotten).
- Restrict how your data is processed.
- Receive your data in a portable format.
- Object to processing based on legitimate interests.
To exercise any of these rights, contact: sarah@sjconsulting.io. We will respond within 30 days.
8. Supervisory Authority
If you believe your data has been processed unlawfully, you have the right to lodge a complaint with the Polish supervisory authority:
Urząd Ochrony Danych Osobowych (UODO)
ul. Stawki 2, 00-193 Warsaw, Poland
Website: uodo.gov.pl
9. Changes to This Policy
This policy may be updated from time to time. The current version is always available at sjconsulting.io/privacy-policy.html. Material changes will be communicated by email where appropriate.