Privacy Notice

Controller and contact details

The controller is Antonio Pereira, trading as Antonio Pereira Web, a sole trader established in Jersey, Channel Islands. The business can be contacted by email at info@antoniopereiraweb.co.uk. Its business location is Jersey, Channel Islands.

When UK GDPR applies

Antonio is established in Jersey, not the UK. Because the service is offered to individuals in the UK as well as Jersey, the UK GDPR applies to processing connected with that UK service offering. Jersey law applies to Antonio's Jersey establishment; this notice explains both regimes without claiming a UK establishment.

Personal information collected

Information is normally received directly from you when you contact Antonio by WhatsApp or email. It may include your name, business name, contact details, message content, publicly available business-profile information, and any documents or account details you choose to provide for an audit or service.

Antonio does not intend to collect or process special category data or criminal offence data. Please do not send that information unless Antonio has specifically confirmed that it is necessary and that an appropriate legal condition and safeguard are in place.

This static site has no contact form, analytics, or advertising cookies. The hosting provider may process technical request information, such as an IP address and browser details, to deliver and secure the site under its own privacy terms.

UK representative

Antonio has assessed the UK representative requirement using the business's current launch-stage facts. Antonio has never had a UK client and does not receive regular UK enquiries. He works alone as a self-employed, part-time sole trader. Personal data is received only when someone voluntarily contacts Antonio by WhatsApp or email and is then used for enquiry or service administration. The site has no form, analytics, tracking cookies, or systematic monitoring. Under these current facts, this processing is only occasional and low risk and does not involve the large-scale use of special category or criminal offence data. On that basis, the UK GDPR Article 27 exemption applies and no UK representative has been appointed.

Antonio will reassess the representative requirement before UK processing becomes regular, systematic, or higher risk, and before introducing monitoring or materially changing the nature or scale of the processing. If the exemption no longer applies, Antonio will appoint a UK representative where required and update this notice. See the ICO guidance on the UK representative requirement.

Purposes and lawful bases

• Responding to enquiries and preparing an audit or proposal: necessary to take steps you request before entering a contract (paragraph 2 of Schedule 2 to the Jersey Law and UK GDPR Article 6(1)(b)). Where you enquire for a business rather than for yourself, the basis is Antonio's legitimate interest in answering genuine business enquiries and discussing relevant services (paragraph 5 of Schedule 2 and UK GDPR Article 6(1)(f)).
• Delivering and administering agreed services: necessary to perform the service contract, including communication, profile review, agreed access, delivery, and payment administration (paragraph 2 of Schedule 2 and UK GDPR Article 6(1)(b)).
• Keeping required business and transaction records: necessary to comply with applicable legal, tax, and accounting obligations and, where relevant, to establish, exercise, or defend legal rights (paragraphs 7 and 12 of Schedule 2 and UK GDPR Article 6(1)(c), or Article 6(1)(f) for the legitimate interest in protecting legal rights).
• Protecting communications and the service: Antonio's legitimate interests in keeping correspondence secure, preventing misuse, resolving complaints, and maintaining reliable business records, provided those interests are not overridden by your rights and interests (paragraph 5 of Schedule 2 and UK GDPR Article 6(1)(f)).

You are not under a statutory duty to provide enquiry information. Contact details and enough information to understand your request are necessary to reply or provide an agreed service; without them, Antonio may be unable to respond or proceed.

Who receives personal data

Antonio handles enquiries personally and does not sell personal information. Information is disclosed only as needed to categories of recipients such as:

• WhatsApp/Meta and email service providers used for communications;
• GitHub Pages and its infrastructure providers used to host and secure this site;
• Google, if you authorize work involving your Google Business Profile;
• professional advisers or technical providers where reasonably necessary; and
• courts, regulators, tax authorities, or law-enforcement bodies where disclosure is required or permitted by law.

International transfers

Communications, hosting, or technical providers may process personal information outside Jersey or the UK. For a restricted transfer governed by Jersey law, Antonio will rely on an adequate destination, safeguards permitted by Article 67 of the Data Protection (Jersey) Law 2018, or a specific Schedule 3 exception where it applies. For a restricted transfer governed by the UK GDPR, Antonio will rely on UK adequacy regulations, an Article 46 safeguard such as an approved data-protection agreement, or an applicable Article 49 derogation. The mechanism depends on the provider, destination, and circumstances. You may email Antonio for information about, or a copy of, the safeguard used for a particular transfer. The ICO explains the UK transfer mechanisms.

How long information is kept

• Enquiries that do not become client work are deleted or anonymized no later than 12 months after the last substantive contact, unless they are needed for a complaint or legal claim.
• Client and transaction records are kept while the service is active and afterwards only for the applicable tax, accounting, contractual, or legal limitation period. The record is scheduled for deletion when the latest relevant requirement expires.
• Access credentials or permissions are kept only while needed for the agreed work and are removed or returned when that need ends.
• Information may be held longer where required by law, a dispute, or a legal hold. Copies in provider backups may remain until the provider's normal secure deletion cycle completes.

Your rights

Subject to the conditions and exemptions in Jersey law and, where applicable, the UK GDPR, you may ask Antonio for access to and a copy of your personal information, rectification of inaccurate or incomplete data, erasure, restriction of processing, or data portability where the relevant conditions apply. Where processing is based on consent, you may withdraw that consent without affecting earlier lawful processing.

Antonio does not use personal information for automated decision-making or profiling.

To exercise a right, email info@antoniopereiraweb.co.uk. Antonio may need enough information to verify your identity and will normally respond within the period required by the applicable law (normally four weeks under Jersey law or one month under the UK GDPR, subject to any lawful extension).

Your right to object

You have the right to object at any time to processing based on legitimate interests. If you object, Antonio will stop that processing unless there are compelling legitimate grounds to continue or the processing is needed for legal claims. If personal information is ever used for direct marketing, an objection to that use will be honoured without exception. Email info@antoniopereiraweb.co.uk to object.

How to complain

You can raise a concern with Antonio using the email above. You also have the right to complain to the Jersey Data Protection Authority through the Jersey Office of the Information Commissioner. Use the Jersey OIC complaint portal or email enquiries@jerseyoic.org. You may also seek a judicial remedy through the Royal Court of Jersey where the law provides one.

Where the UK GDPR applies, you can also complain to the UK Information Commissioner's Office through the ICO complaint service. The ICO helpline is 0303 123 1113; other current contact methods are listed on the ICO contact page.