Privacy Policy

This Privacy Policy explains how JEONJA TECHNOLOGY processes personal data across its digital channels, in line with applicable regulatory frameworks and internationally recognized best practices, including GDPR-inspired principles.

Privacy PolicySection 1GDPR-inspired

1. Introduction / Overview

This section outlines our commitment to privacy, identifies the entity responsible for processing personal data, and explains the legal and operational framework governing information handling across our digital channels.

Commitment to privacy

At JEONJA TECHNOLOGY, we recognize privacy as a fundamental value and an essential element of trust. We are committed to processing personal data in a responsible, transparent, and secure manner, applying privacy-by-design and data minimization principles across our platforms and services.

Our practices are designed to reduce risk, prevent unauthorized access or misuse, and ensure that personal information is handled exclusively for legitimate and clearly defined purposes.

Data controller

Legal name

JEONJA TECHNOLOGY

Trade name

JEONJA TECHNOLOGY

Role

Entity responsible for determining the purposes and means of personal data processing.

Legal and regulatory approach

Our primary jurisdiction of operation is Bolivia. We comply with applicable local laws and regulations governing privacy and personal data protection.

Additionally, we align our internal practices with internationally recognized privacy principles, including those reflected in the General Data Protection Regulation (GDPR), as a reference framework and best-practice guide, without implying formal regulatory applicability where it does not legally apply.

  • Lawfulness, fairness, and transparency
  • Purpose limitation and data minimization
  • Integrity, confidentiality, and accountability

Scope of this policy

This Privacy Policy applies to personal data processed through the following channels and activities:

Public website and informational pages

Contact and inquiry forms

Corporate and commercial communications

Related business and service operations

Privacy PolicySection 2Data Minimization

2. Personal Data We Collect

This section describes, in a transparent and specific manner, the categories of personal data that we may collect when you interact with our website, contact forms, or corporate communication channels.

Principle of data minimization

We collect only the personal data that is strictly necessary to fulfill the purposes explicitly described in this Privacy Policy. We do not request or process excessive, irrelevant, or disproportionate information.

This approach aligns with internationally recognized privacy principles, including data minimization and purpose limitation, without imposing obligations beyond those applicable under local law.

Categories of personal data

Identification data

  • First name
  • Last name

Contact data

  • Email address

Professional data (if applicable)

  • Company or organization name

Communications

  • Messages submitted through contact forms

Technical and usage metadata

In addition to the information you provide directly, certain limited technical data may be processed automatically to ensure the security, integrity, and proper functioning of our systems.

  • IP address (stored in anonymized or hashed form, where technically feasible)
  • Browser and device information (user-agent)
  • Date and time of submission (timestamp)

This metadata is not used for profiling or automated decision making and is processed solely for operational, security, and audit-related purposes.

Legal clarification

We do not knowingly collect sensitive personal data, special categories of data, or information unrelated to the purposes declared in this Privacy Policy.

If you choose to provide additional information voluntarily, such data will be treated in accordance with this Policy and applicable legal safeguards.

Privacy PolicySection 3Purpose Limitation

3. Purpose of Data Processing

This section explains the specific and legitimate purposes for which personal data is processed. Data is never used in a manner that is incompatible with these purposes.

Purpose limitation and lawful use

Personal data collected by JEONJA TECHNOLOGY is processed solely for explicit, legitimate, and clearly defined purposes. We do not process personal data in ways that are misleading, excessive, or incompatible with the original intent of collection.

This ensures responsible data handling and prevents unauthorized secondary use, profiling, or exploitation of personal information.

Legitimate processing purposes

Responding to inquiries

To review, respond to, and manage questions, requests, or communications submitted through our contact channels.

Commercial contact

To establish and maintain professional communication related to potential business relationships or service inquiries.

Project evaluation

To assess the feasibility, scope, and requirements of potential projects or collaborations requested by users.

Service and process improvement

To improve internal workflows, service quality, system reliability, and operational efficiency.

Explicit exclusions

Personal data is not used for automated decision-making, behavioral profiling, mass marketing, or advertising activities unrelated to a direct user request.

We do not sell, rent, or trade personal data under any circumstances.

Legal clarity

If personal data is required for a purpose not listed in this section, such processing will only occur after providing clear notice and, where appropriate, obtaining explicit consent or relying on a valid legal basis.

Privacy PolicySection 5Security Measures

5. Data Protection and Security Measures

This section describes the technical and organizational measures implemented to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. These measures are designed to ensure confidentiality, integrity, and availability of information.

Security governance approach

JEONJA TECHNOLOGY applies a risk-based approach to data security. Safeguards are selected and implemented based on the nature of the data processed, potential impact, and operational context.

Security controls are reviewed periodically and adjusted as necessary to address emerging risks and operational changes.

Technical security measures

  • Encryption of data in transit and, where applicable, at rest using industry-accepted cryptographic standards.
  • Logical access controls, including authentication and authorization mechanisms, to restrict access to authorized personnel only.
  • Logging and monitoring of system activities to detect anomalous behavior and support incident investigation.
  • Secure configuration, regular updates, and vulnerability mitigation for systems and services.

Organizational and procedural measures

  • Defined roles and responsibilities for personnel handling personal data.
  • Internal policies and guidelines governing data access, processing, and confidentiality.
  • Awareness and training activities focused on data protection and secure information handling.
  • Incident response procedures to manage and mitigate potential security events.

Reference to recognized security standards

Our security practices are informed by widely recognized international standards and frameworks, such as ISO/IEC 27001 and general security principles derived from HIPAA.

These references are used as guidance only and do not imply formal certification, regulatory approval, or mandatory applicability.

Privacy PolicySection 6Data Retention

6. Data Retention Policy

We retain personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy, or as required by applicable legal, regulatory, or contractual obligations.

This section explains how long personal data may be retained and the safeguards applied to ensure that retention remains purpose-limited, proportionate, and compliant with applicable obligations.

Retention principle

We apply time-bound retention based on necessity, purpose, and applicable obligations. Retention is not indefinite and is continuously evaluated to reduce exposure and strengthen governance.

Practical statement

Personal data is retained only for the time required to provide the requested service or manage the business relationship, unless a longer retention period is required or permitted by applicable law.

Typical retention contexts

Retention periods may vary depending on the category of data and operational needs. Common contexts include:

Contact requests and business inquiries

Information submitted through contact forms (e.g., name, email, company, message) may be retained for a reasonable period to manage follow-ups, provide requested information, and maintain an internal record of communications.

Technical metadata and security logs

Technical metadata (e.g., timestamps, user-agent, and security-related logs) may be retained for operational security, troubleshooting, fraud prevention, and auditability, subject to proportionality and internal review.

Legal and compliance retention

Where required, we may retain certain data for longer periods to comply with applicable obligations (e.g., accounting, tax, or legal claims), and to establish, exercise, or defend legal rights.

Where local laws or formal agreements impose specific retention requirements, those provisions will prevail to the extent permitted by law.

Disposal, minimization, and access restriction

We aim to minimize retained data and reduce risk by limiting access and securely disposing of information when retention is no longer justified.

Deletion or anonymization

When retention is no longer necessary, data is deleted or anonymized using measures appropriate to the type of system and the sensitivity of the information.

Access restriction during retention

During retention, access is restricted to authorized personnel and limited to legitimate operational, legal, or security needs.

Periodic review

Retention practices are reviewed periodically to ensure the continued necessity and proportionality of stored information.

Privacy PolicySection 7Data Sharing

7. Data Sharing and Third Parties

This section explains whether personal data is shared with third parties, the categories of service providers involved, and how international infrastructure is used when operationally required.

Do we share personal data?

JEONJA TECHNOLOGY does not sell, rent, or commercially trade personal data. Data may only be shared on a limited basis with trusted service providers when strictly necessary to operate our services, ensure security, or respond to legitimate user requests.

Any data sharing is purpose-limited, proportional, and subject to internal governance, access controls, and reasonable safeguards.

Technology and infrastructure providers

JEONJA TECHNOLOGY operates a hybrid infrastructure model that combines international cloud services with internally managed servers located in Bolivia, balancing availability, performance, and data governance.

Hosting and infrastructure

Cloud-based providers may process limited technical data as part of standard operations, while certain systems are hosted on JEONJA TECHNOLOGY's own servers under direct administrative control.

Domain and DNS services

External providers with global infrastructure are used to ensure domain availability, resilience, and protection against network-level threats.

Email and communications

Third-party email providers may process minimal data required to deliver business communications and user inquiries.

Analytics and monitoring

Where used, analytics tools are configured to support service reliability and security while minimizing personal data collection.

International data processing

Some technology providers operate infrastructure outside Bolivia. As a result, limited personal data may be processed in other jurisdictions depending on service configuration.

In such cases, JEONJA TECHNOLOGY applies reasonable safeguards aligned with international privacy and security best practices.

Privacy PolicySection 8User Rights

8. User Rights and Data Subject Rights

This section outlines the rights available to users and data subjects regarding their personal data. These rights are recognized in accordance with applicable legislation and internationally accepted principles of data protection.

General principles

JEONJA TECHNOLOGY recognizes and respects user rights related to personal data. These rights are applied in a transparent and reasonable manner, subject to identity verification, technical feasibility, and legal or contractual limitations where applicable.

The recognition of these rights follows internationally accepted privacy principles, including those reflected in regulations such as the GDPR, without implying automatic applicability of foreign legal regimes.

Recognized user rights

Right of access

Request confirmation of whether personal data is being processed and obtain access to such data.

Right to rectification

Request correction of inaccurate or incomplete personal data.

Right to erasure

Request deletion of personal data when it is no longer necessary for the purposes collected, subject to legal obligations.

Right to restriction

Request limitation of processing in certain circumstances, such as during data accuracy verification.

Right to object

Object to processing based on legitimate interests, where applicable and justified.

Right to withdraw consent

Withdraw previously granted consent at any time, without affecting the lawfulness of prior processing.

How to exercise your rights

Users may exercise their rights by submitting a formal request through the contact channels provided in this Privacy Policy. Requests must include sufficient information to verify identity and clearly describe the right being exercised.

We aim to respond within a reasonable timeframe, taking into account the complexity of the request and applicable legal or operational constraints.

Privacy PolicySection 9Cookies & Tracking

9. Cookies and Tracking Technologies

This section explains how cookies and similar technologies are used on our website, the purposes they serve, and how users can manage their preferences.

Use of cookies

Cookies are small text files stored on your device when you visit a website. JEONJA TECHNOLOGY uses cookies strictly for functional, preference-related, and consent management purposes.

We do not use cookies to collect unnecessary personal data, nor do we use them to track users across unrelated websites without explicit consent.

Types of cookies used

Essential cookies

Required for basic website functionality, such as security, session handling, and consent status management.

Preference cookies

Used to remember user preferences, such as selected language or visual theme, to improve user experience.

Analytics cookies (optional)

May be used only if explicitly enabled by the user, for aggregated and anonymized usage analysis.

Marketing cookies

Currently not enabled by default and only applied if explicitly configured and accepted by the user.

Managing and disabling cookies

Users can manage or revoke their cookie preferences at any time through the cookie consent settings provided on this website. Changes take effect immediately.

Additionally, most web browsers allow users to control or delete cookies through their settings. Please note that disabling essential cookies may affect certain website functionalities.

Privacy PolicySection 10Children's Privacy

10. Children's Privacy

This section describes our approach to protecting the privacy of minors and establishes safeguards to prevent the unintentional collection of children's personal data.

Not intended for minors

Our services, websites, and digital platforms are not directed to individuals under the age of 18. We do not knowingly design, market, or provide our services for use by children.

No intentional data collection

JEONJA TECHNOLOGY does not knowingly collect, process, or store personal data from minors. If we become aware that personal data from a child has been provided without appropriate authorization, we will take reasonable steps to remove such information from our systems.

Parental responsibility

Parents and legal guardians are encouraged to monitor and guide their children's online activities and to ensure that minors do not provide personal information through our platforms.

Legal and regulatory basis

This children's privacy approach is aligned with applicable local legislation and internationally recognized data protection principles, including child data protection standards inspired by GDPR and other global best practices.

Privacy PolicySection 11International Transfers

11. International Data Transfers

This section explains how personal data may be processed using infrastructure located outside the user's country, while applying appropriate safeguards and security measures.

Use of international infrastructure

JEONJA TECHNOLOGY may process personal data using technological infrastructure operated by trusted service providers with international presence, including cloud-based platforms and distributed systems.

Reasonable safeguards

When data is processed outside the user's country, we apply reasonable technical and organizational measures designed to protect confidentiality, integrity, and availability, consistent with internationally recognized data protection principles.

Neutral and proportional approach

We do not rely on unrestricted or unnecessary cross-border data transfers. International processing is limited to what is operationally required and is conducted in a proportionate and risk-aware manner.

Legal alignment

This international data transfer approach is aligned with applicable local regulations and international privacy frameworks, including GDPR-inspired principles, without establishing automatic jurisdictional obligations.

Privacy PolicySection 12Policy Updates

12. Changes to This Privacy Policy

This section explains how updates to this Privacy Policy may be made and how users are informed of material changes.

Right to update this policy

JEONJA TECHNOLOGY reserves the right to update, modify, or revise this Privacy Policy at any time in order to reflect changes in legal requirements, business practices, or technological developments.

Notification of changes

When material changes are made, we will update the revision date of this Privacy Policy and, where appropriate, provide additional notice through our website or services.

User responsibility

Users are encouraged to review this Privacy Policy periodically to remain informed about how their information is protected and processed.

Privacy PolicySection 13Contact Information

13. Contact Information

This section provides official contact details for privacy-related inquiries, data protection requests, and communications regarding this Privacy Policy.

Responsible entity

The entity responsible for the processing of personal data under this Privacy Policy is:

JEONJA TECHNOLOGY

Privacy contact email

For any questions, requests, or concerns related to privacy, personal data processing, or the exercise of user rights, you may contact us at the following email address:

Response commitment

We are committed to reviewing and responding to privacy-related communications in a timely and reasonable manner, in accordance with applicable laws and recognized international data protection principles.

Privacy PolicySection 14Last Updated

14. Last Updated

This section indicates the most recent date on which this Privacy Policy was reviewed or updated, serving as evidence of its current validity and applicability.

Policy update information

This Privacy Policy reflects the most recent version approved and published by JEONJA TECHNOLOGY. Any future modifications will be communicated through an updated revision date.

Last updatedJanuary 2026

Continued use of our services after the effective date of an updated Privacy Policy constitutes acknowledgment of the revised terms, where applicable under local law.

Privacy PolicyLegal versioningDocument history

Privacy Policy Version History

This section records the historical versions of this Privacy Policy and summarizes material changes for transparency and legal traceability.

Current version

Version
v1.0
Effective date
January 2026

Change log

  • v1.0January 2026

    Initial publication of the Privacy Policy.