Privacy Policy

Last updated: 20 May 2026

1. Introduction

This Privacy Policy explains how Jennifer Hill, trading as Jen Hill (“I”, “me”, “my”), operating the website jenhill.eu, collects, uses, stores, and protects your personal data. It has been prepared in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable Czech data protection law.

By using my website or purchasing my services, you acknowledge that you have read and understood this Privacy Policy.

2. Data Controller

The data controller responsible for your personal data is:

Jennifer Hill (Jen Hill)

Website: jenhill.eu

Email: jen@jenhill.eu

Based in: Czech Republic

3. What Personal Data I Collect

3.1 Data You Provide Directly

When you use my contact form or subscribe to my newsletter, I may collect:

Your name
Your email address
Any message or enquiry you send

When you make a purchase through my website, I may also collect:

Billing name and address
Payment card details (processed and stored securely by Squarespace Payments — I do not store full card details myself)
Order details and transaction history

3.2 Appointment Booking Data

When you book an appointment via Google Calendar through my website, Google LLC will collect:

Your name and email address
Your selected appointment time and any notes you provide

This data is processed by Google LLC in accordance with their Privacy Policy. I receive only the booking details necessary to fulfil your appointment.

3.3 Data Collected Automatically

When you visit jenhill.eu, certain technical data may be collected automatically by Squarespace's platform infrastructure, including:

IP address
Browser type and version
Pages visited and time spent on the site
Referral source

This data is used for website security, performance, and analytics purposes.

4. Legal Basis for Processing

Under the GDPR, I process your personal data on the following legal bases:

Contract performance (Article 6(1)(b)): to process your purchase and deliver services you have requested.
Legitimate interests (Article 6(1)(f)): to respond to your enquiries and maintain the security and performance of my website.
Consent (Article 6(1)(a)): where you have opted in to receive my newsletter or marketing communications. You may withdraw consent at any time.
Legal obligation (Article 6(1)(c)): where processing is required to comply with applicable law, such as tax and accounting obligations.

5. How I Use Your Personal Data

I use the personal data I collect for the following purposes:

To respond to your enquiries and provide customer support
To process your orders and payments
To send you newsletters and updates (only where you have subscribed)
To comply with legal obligations, including tax and record-keeping requirements
To maintain the security and integrity of my website

6. Payment Processing

All payment transactions on jenhill.eu are handled by Squarespace Payments, a payment processing service provided by Squarespace, Inc. (a company incorporated in the United States). Squarespace Payments is compliant with the Payment Card Industry Data Security Standard (PCI DSS).

I do not receive, store, or process your full payment card details. All card data is handled directly by Squarespace Payments in accordance with their own privacy policy and security practices. You can review Squarespace's Privacy Policy at:

https://www.squarespace.com/privacy

Payments may be subject to cross-border transfer under appropriate safeguards, including Standard Contractual Clauses (SCCs) approved by the European Commission.

7. Email Marketing

If you subscribe to my newsletter, your email address and name are stored and processed using Squarespace Email Campaigns. You will only receive marketing emails if you have explicitly opted in.

You can unsubscribe at any time by clicking the unsubscribe link in any email, or by contacting me directly at jen@jenhill.eu. After unsubscribing, I will retain your email address on a suppression list to ensure you are not contacted again.

8. Third-Party Data Processors

I use the following third-party services that may process your personal data on my behalf:

Squarespace, Inc. – website hosting, e-commerce, payment processing, and email campaigns (USA; transfers covered by Standard Contractual Clauses).
Google LLC – appointment booking via Google Calendar. When you book an appointment through my website, you will be directed to Google’s booking page, where Google will collect your name, email address, and booking details. Google LLC is based in the USA; transfers are covered by Standard Contractual Clauses. Google’s Privacy Policy: https://policies.google.com/privacy

I do not sell, rent, or trade your personal data with any third parties for their own marketing purposes.

9. International Data Transfers

As Squarespace and Google LLC are US-based companies, your data may be transferred to and processed in the United States. Such transfers are conducted under the European Commission’s Standard Contractual Clauses (SCCs) or other lawful transfer mechanisms in accordance with Chapter V of the GDPR, ensuring an adequate level of protection for your personal data.

10. Data Retention

I retain your personal data only for as long as necessary for the purposes for which it was collected, or as required by law:

Contact and enquiry data: up to 2 years from last contact, or as needed to resolve the enquiry.
Purchase and transaction records: up to 10 years, in accordance with Czech accounting and tax law.
Newsletter subscription data: until you unsubscribe or withdraw consent.

When data is no longer required, it is securely deleted or anonymised.

11. Your Rights Under the GDPR

As a data subject located in the European Union, you have the following rights regarding your personal data:

Right of access (Article 15): You may request a copy of the personal data I hold about you.
Right to rectification (Article 16): You may request correction of inaccurate or incomplete data.
Right to erasure (Article 17): You may request that I delete your personal data, subject to certain legal conditions.
Right to restriction of processing (Article 18): You may request that I restrict how I process your data in certain circumstances.
Right to data portability (Article 20): You may request that your data be provided to you in a structured, machine-readable format.
Right to object (Article 21): You may object to processing based on legitimate interests or direct marketing.
Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact me at jen@jenhill.eu. I will respond within 30 days. You will not be required to pay any fee and I will not discriminate against you for exercising your rights.

12. Right to Lodge a Complaint

If you believe that your personal data has been processed in breach of the GDPR, you have the right to lodge a complaint with the supervisory authority in the Czech Republic:

Office for Personal Data Protection (Úřad pro ochranu osobních údajů)

Website: https://www.uoou.cz

Pplk. Sochora 27, 170 00 Prague 7, Czech Republic

You also have the right to complain to the supervisory authority in any EU member state where you reside or work, or where the alleged infringement took place.

13. Cookies

My website, jenhill.eu, is hosted on Squarespace, which may use cookies and similar tracking technologies for essential website functionality, analytics, and performance monitoring. These cookies are managed by Squarespace's platform.

You can control cookie settings through your browser preferences. Please note that disabling certain cookies may affect the functionality of the website.

For more information about how Squarespace uses cookies, please refer to Squarespace's Cookie Policy at:

https://www.squarespace.com/cookie-policy

14. Data Security

I take the security of your personal data seriously. My website is hosted by Squarespace, which implements industry-standard security measures including SSL/TLS encryption, secure data centres, and access controls. While no online system can guarantee absolute security, I take all reasonable precautions to protect your data from unauthorised access, disclosure, or loss.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, I will notify the relevant supervisory authority and, where required, the affected individuals, in accordance with Article 33 and 34 of the GDPR.

15. Children's Privacy

My website and services are not directed to individuals under the age of 16. I do not knowingly collect personal data from children. If you believe a child has provided me with personal data without parental consent, please contact me at jen@jenhill.eu and I will take steps to delete such data promptly.

16. Changes to This Privacy Policy

I may update this Privacy Policy from time to time to reflect changes in my practices or applicable legal requirements. The date at the top of this page indicates when the policy was last revised. I encourage you to review this page periodically to stay informed.

For significant changes, where reasonably practicable, I will notify you by email or by a prominent notice on my website.

17. Contact

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact me:

Jennifer Hill (Jen Hill)

Email: jen@jenhill.eu

Website: https://jenhill.eu

Based in: Czech Republic