Just2easy Limited – Privacy notice
INTRODUCTION
This is the Privacy Notice for Just2easy Limited. In this document, “we”, “our” or “us” refer to Just2easy Limited.
Just2easy Limited is a Limited company registered at Just2easy House Holly Bank, Hazelwood, Belper, England, DE56 4AL. Company registration number is 04269194.
Just2easy Limited is registered with the ICO under registration number Z9769570.
This privacy notice describes how we collect, use and store personal information about you during and after your business relationship with us. Just2easy Limited is the “data controller” and as such we are responsible for deciding how we hold, use, and store personal information about you.
It is important that you read this notice, together with any other privacy notice we may provide on specific occasions when we are collecting or processing personal information about you, so that you are aware of how, and why, we are using your personal information.
Please note that for information on how your data is used when we are a “data processor”, meaning that another organisation such as a school arranges our service and controls how the information is used, you must read their Privacy Notice for details.
DATA PROTECTION PRINCIPLES
We will comply with all relevant Data Protection laws (including the DPA 2018 / UK GDPR). This requires that the personal information we hold about you must be:
- Used lawfully, fairly and transparently.
- Collected only for valid purposes that we have clearly explained to you and not used in any way that is incompatible with those purposes.
- Relevant to the purposes we have told you about and limited only to those purposes.
- Accurate and kept up to date.
- Kept only as long as necessary for the purposes we have informed you about.
- Kept securely.
INFORMATION WE HOLD ABOUT YOU
Personal data, or personal information, means any information about an individual from which that person can be identified, whether directly or indirectly. It does not include data where the identity has been removed (anonymous data).
For our clients and suppliers we may collect, store, and use the following categories of personal information about you:
- Identity data: Full name, title, date of birth
- Contact details: Email address, phone number, home address
- Financial and transaction details: Payment information, purchase history, banking details
- Technical data: IP address, device information, time zone, web browser used, plugins used, cookies
- Marketing preferences: Preferences in how marketing communications are received, responses and actions in relation to use of our services
- Profile information: Username and password, your interests, preferences, feedback and survey responses
We may use aggregated and anonymised data, such as statistical or demographic information, for any purpose. This data does not identify you as an individual and is therefore not personal data for the purposes of data protection law.
Aggregated and anonymised data may be derived from personal data but, where it has been anonymised so that individuals are no longer identifiable, it is not subject to data protection legislation.
If we combine or link aggregated or anonymised data with other information so that you can be identified, we will treat the resulting information as personal data and handle it in accordance with this privacy notice.
SPECIAL CATEGORY PERSONAL DATA
Special category personal data is a type of personal data that is considered more sensitive and therefore requires a higher level of protection under data protection law.
This includes information revealing information concerning health, racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data used for identification, and data concerning a person’s sex life or sexual orientation.
As part of our business activities, we do not collect, store, or process any special category personal data about our clients, suppliers, or any other individuals.
HOW YOUR PERSONAL INFORMATION IS COLLECTED
We typically collect personal information about you through our website, online “contact us” page, emails, and phone calls, or on our social media pages (Facebook and LinkedIn).
HOW WE WILL USE INFORMATION ABOUT YOU
We will use your personal information in the following circumstances:
How we will use information about you
Article 6 legal basis for processing your information
To facilitate your enquiry
Article 6(1)(b) – Contract
Article 6(1)(f) – Legitimate Interests
To facilitate the contract we will have with you and associated internal record keeping
Article 6(1)(b) – Contract
To facilitate your enquiry
Article 6(1)(b) – Contract
Article 6(1)(c) – Legal obligation
To inform you of news, events, our networking events, and promotions we feel may be of interest to you – based on the marketing preferences we hold about you
Article 6(1)(a) – Consent
Article 6(1)(b) – Contract
Article 6(1)(f) – Legitimate Interests
To inform you about our networking meeting, and to hold a list of attendees
Article 6(1)(b) – Contract
We may use the information to customise the website according to your interests
Article 6(1)(f) – Legitimate Interests
Dealing with legal disputes
Article 6(1)(c) – Legal Obligation
Article 6(1)(f) – Legitimate interests
Some of the above grounds for processing will overlap and there may be several grounds which justify our use of your personal information.
IF YOU DO NOT PROVIDE PERSONAL INFORMATION
If you do not provide certain personal information when requested by us, we may not be able to perform the contract we have entered into with you (such as providing you with our services or guarantees), or we may be prevented from complying with our legal obligations (such as financial and tax reporting).
SHARING YOUR INFORMATION
In order to provide our services to you and to comply with our legal obligations, it may be necessary for us to share some data we hold with the following:
- Suppliers and service providers which may include data storage facilities and IT service providers;
- Our accountant; and
- Our own legal advisors.
DATA RETENTION
We will store your personal data for as long as we need to fulfil the purposes outlined in this privacy notice. Some data will have a different retention period, for example invoicing information may be held for up to 7 years to comply with the Tax purposes, or your contact details may be held for up to 18 months after last contact with you.
If you have any questions in relation to our retention of personal data, please contact the Data Protection Officer at [email protected].
TRANSFER OF PERSONAL DATA OUTSIDE THE UK
We may transfer your information outside of the country in which it was collected. Such transfers of data may be to a country which may not provide the same level of privacy protection as the UK, otherwise known as adequacy under the GDPR. However, we will ensure that your personal data is adequately protected by using the appropriate lawful means, which may include the EU-US Data Privacy Framework, the UK International Data Transfer Agreement (IDTA) or Eu Standard Contractual Clauses (SSC) with a UK Addendum. Further details of specific safeguards are available on request.
MARKETING
We may send you information about our services that we think may be of interest to you, via email, telephone or SMS. You can choose to restrict the collection or use of your personal information by indicating that you do not want the information to be used for direct marketing at the point we collect your information.
If you have previously agreed to us using your personal information for direct marketing purposes, or otherwise wish to opt-out or unsubscribe, you may change your mind at any time by using the unsubscribe links in any communication, or by contacting us at the address at the top of this notice or by emailing [email protected].
We will not sell, distribute, or lease your personal information to third parties unless we have your permission or are required by law to do so. We may use your personal information to send you promotional information about third parties which we think you may find interesting, if you tell us that you wish this to happen.
YOUR DATA PROTECTION RIGHTS
It is important that the personal information we hold about you is accurate and current. Please keep us informed if your personal information changes during your working relationship with us.
There are eight rights available to you, but not all of them will apply to every situation. It will depend on which lawful basis for processing we use to process your information. For more information on exercising any of your rights please contact our Data Protection Officer at [email protected].
Your Rights:
The right of Access. You may submit a Subject Access Request – this enables you to receive a copy of the personal information we hold about you. To action this request, please email our Data Protection Officer at [email protected].
We may require a suitable form of identification if we can’t already verify your identity. Under normal circumstances, we will answer your request within one calendar month of your request or of identification being received, whichever is later. No fee is usually payable; however, we may apply an appropriate fee if the request is deemed to be excessive, or repetitive.
The right of Rectification
This enables you to have any incomplete or inaccurate information we hold about you corrected.
The right to Erasure
This enables you to request us to delete or remove personal information when there is no good reason for us to continue processing it.
The right to be Informed
You have the right to be informed of how we will collect and use your data, most of the information you will need is in this privacy notice.
The right to Object to processing – in certain circumstances, you have the right to request we suspend the processing of your data.
The right to Restrict processing
You have the right to request that we limit the way we use your data, whilst we are not obliged to delete the data, we have refrain from using it.
The right of Data Portability
You have the right to request the transfer of your personal data to a third party.
Rights in relation to automated decision making and profiling
You have the right not to be subject to a decision based solely on automated means including profiling.
Please contact us if you require more information on any of the rights available to you.
Right to Withdraw Consent
Where we rely on consent to process your data, you have the right to withdraw this at any time, without giving reason. To withdraw your consent, please contact the Data Protection Officer, [email protected]. Once received, we will not process your data for the reasons you have agreed to, unless we have another legal basis for doing so.
COOKIE STATEMENT
What Exactly Are Cookies?
To collect the information described in this notice, we may use cookies and similar technologies on our website. Cookies are small text files that are placed on your device when you visit a website. They are widely used to make websites work, or work more efficiently, as well as to provide information to the website owners.
Cookie Consent and Essential Cookies.
When you visit our website, we only use cookies that are strictly necessary for the operation, security and functionality of the site. These cookies are required to enable core features such as signing in, maintaining your session, and ensuring the website functions correctly and securely.
We do not use any non-essential cookies, including analytics, performance, functional, advertising or targeting cookies. As a result of this, there are no optional cookie preferences to manage or opt out of through our website.
You can still control or delete cookies through your browser settings. However, blocking or disabling strictly necessary cookies may prevent parts of our website, platforms or services from working as intended
Cookies Deployed:
When logged into the Just2easy platform, the following cookies are used:
Cookie Name(s)
Purpose
Essential (Yes/No)
AWSALB,
AWSALBCORS
Amazon Application Load Balancer
When a load balancer first receives a request from a client, it routes the request to a target (based on the chosen algorithm), and generates a cookie named AWSALB. It encodes information about the selected target, encrypts the cookie, and includes the cookie in the response to the client. The load balancer generated cookie has its own expiry of 7 days which is non-configurable.
With cross-origin resource sharing (CORS) requests, some browsers require SameSite=None; Secure to enable stickiness. In this case, the load balancer generates a second stickiness cookie, AWSALBCORS, which includes the same information as the original stickiness cookie plus the SameSite attribute. Clients receive both cookies.
Yes
AWSALBTG,
AWSALBTGCORS
Amazon Application Target Group
The AWSALBTG cookie is an Amazon Web Services (AWS) Application Load Balancer (ALB) generated cookie used for sticky sessions, especially with Weighted Target Groups, ensuring a user’s requests consistently go to the same backend server, with a default 7-day expiration. It identifies the specific target group a request was routed to, and for Cross-Origin Resource Sharing (CORS) requests, it works with the AWSALBCORS cookie to maintain stickiness across different origins.
Yes
PHPSESSID
PHP session information cookie
Yes
XSRF-TOKEN
Just2easy cookie, used to protect against Cross-Site Request Forgery attacks by ensuring that state-changing requests (like form submissions) originate from the legitimate website and not a malicious one
Yes
j2e_session
Just2easy cookie containing information about the signed in user
Yes
j2e_d
Just2easy cookie containing a random unique string to identify the device and browser being used.
Yes
language
Just2easy cookie to save the last used language by a signed in user so when loading any our pages unauthenticated it will load in that language.
Yes
signinAccount
The last used school name used to sign in manually with so can be populated on the j2e.com sign in page
Yes
user
Just2easy cookie to uniquely identify the signed in user for legacy code
Yes
__utma,
__utmb,
__utmc,
__utmt,
__utmz
Google analytics cookies
A random unique number or string of letters and numbers to identify your browser, the times and dates that you interacted with the site recently and the marketing materials or referring pages that led you to the site.
Yes
CONTACT US
We reserve the right to update this privacy notice at any time. If you have any questions about this privacy notice, please contact us at the address above or by emailing [email protected].
HOW TO MAKE A COMPLAINT
In addition to the rights listed above, you also have the right to submit a complaint about how we handle, share, or process your personal data. Please contact us in the first instance at [email protected]. We welcome the opportunity to investigate your concerns and work with you to resolve them. A copy of our Data Complaints Procedure is also available upon request.
If you are dissatisfied with our response, you may request an appeal, which will be reviewed internally by senior management.
If, after completing our complaints and appeals process, you remain dissatisfied with how your complaint has been handled, you have the right to raise your concerns with the Information Commissioner’s Office (ICO). Their details are:
www.ico.org.uk/for-the-public
The Information Commissioners Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Phone number: 0303 123 1113
This privacy notice was last updated June 2026.
