Privacy Policy

Last updated: 2025.11.19

This privacy policy explains how we collect, use and protect your personal data when you visit roijoydigital.com or interact with ROIJOY in other ways.

By using this Website, you agree that your personal data will be handled in line with this policy and with applicable data protection law, including the EU General Data Protection Regulation (GDPR) and relevant national laws.

1. Who we are

The Website is operated by David Simon EV trading as ROIJOY.

For the purposes of data protection law, ROIJOY is the data controller for personal data described in this policy.

If you have any questions or would like to exercise your rights, you can contact us at:

Email for privacy matters: privacy@roijoy.com
General contact email: hello@roijoy.com

Our registered business address is in Hungary. Details are available on request or in our legal notices, where required by law.

2. Definitions

In this privacy policy:

Website means roijoydigital.com and any related pages where this policy is displayed or linked.
User, you means any visitor or individual whose personal data we process under this policy.
Personal data means any information that identifies, or can reasonably identify, a living individual.
Data protection law means the GDPR and any national laws implementing or supplementing it.

3. Scope of this policy

This policy applies to:

visitors to the Website
individuals who contact us using contact forms, email or phone
prospective and current clients and their representatives
business leads whose details we collect from public or commercial sources for B2B outreach
job applicants, contractors and partners who contact us through the Website

It does not cover personal data we process purely as a processor on behalf of our clients under separate agreements. Those activities are governed by our contracts and the client’s own privacy information.

4. Categories of personal data we collect

We may collect and process the following types of personal data, depending on how you interact with us.

4.1 Website visitors

Identification and contact details: name, email address, phone number, job title, company name
Communication details: the content of your messages, enquiries and any follow up notes
Technical data: IP address, device identifiers, browser type and version, operating system, time zone, language settings
Usage data: pages you visit, time and date of visit, click paths, interaction with forms and buttons

4.2 Prospective and existing clients

In addition to the above:

Business details: company name, role, industry, website, country, billing contact details
Contract data: proposals, statements of work, engagement history, invoices and payment status
Project communications: emails, meeting notes, call recordings where legally permitted

4.3 Newsletter subscribers and content downloads

Name and contact details
Subscription preferences and engagement with our emails: opens, clicks, unsubscribes

4.4 Leads and business contacts

We work mainly in B2B markets. For lead generation and business development we may collect:

Name and business contact details: email, phone number, LinkedIn profile, company website
Role and professional information: job title, responsibilities, seniority, public biography
Public or inferred signals: funding events, hiring needs, advertising activity, technology stack, social media activity where publicly visible

This information may come from public sources, manual research or third party tools and databases that specialise in B2B data.

4.5 Job applicants, contractors and partners

CV and application information
Professional history, skills, references
Interview notes and communications

We do not knowingly collect personal data from children.

5. How we collect personal data

We collect data in three main ways.

Provided directly by you
- When you fill out a contact form on the Website
- When you email us, book a call or speak to us by phone or video call
- When you subscribe to a newsletter or download content
- When you apply for a role or send us your CV
Collected automatically
- Through cookies and similar technologies when you browse the Website
- Through server logs and security tools that record technical data about your visit
From third party and public sources
- Business databases, lead generation tools and social networks used for B2B marketing
- Public company websites, press releases and funding announcements
- Referrals and introductions from partners, clients and advisors

6. Why we use your personal data and legal bases

We only process personal data when we have a valid legal basis under data protection law.

The main purposes and legal bases are:

6.1 Running and improving the Website

To provide access to the Website, ensure it works properly and keep it secure
To analyse how visitors use the site so we can improve content and performance

Legal basis: our legitimate interests in operating a secure and effective Website and understanding how it is used.

6.2 Responding to enquiries and providing our services

To answer questions sent through forms, email or phone
To prepare and send proposals, statements of work and other pre-contract information
To perform our contracts with clients, including project communications and billing

Legal basis: performance of a contract or taking steps at your request before entering into a contract, and our legitimate interests in running our business.

6.3 B2B marketing and lead generation

To identify potential business clients that may benefit from our services
To contact decision makers with relevant B2B marketing, where permitted by law
To maintain a CRM of leads, conversations and preferences

We assess the balance between our interests and your rights before using legitimate interests for this purpose. You can object to this processing at any time. See section 12.

Legal basis: our legitimate interests in promoting and growing our business, and where required your consent.

6.4 Email marketing and newsletters

To send updates, content and offers by email when you sign up or ask us to stay in touch
To send similar marketing to existing clients where allowed by soft opt in rules, with a clear opt out

Legal basis: your consent, or our legitimate interests in promoting similar services to existing clients, subject to your right to opt out.

6.5 Recruitment and partnerships

To review applications for roles or freelance work
To assess suitability and make hiring or collaboration decisions
To keep a talent pool, where you have not objected, for future opportunities

Legal basis: our legitimate interests in selecting appropriate people to work with us, and in some cases your consent.

6.6 Legal and compliance

To comply with legal obligations, accounting and tax requirements
To protect our rights, enforce agreements, prevent fraud and defend legal claims

Legal basis: compliance with legal obligations and our legitimate interests in protecting our business.

7. Cookies and similar technologies

We use cookies and similar technologies on the Website to:

make the site function correctly
remember user preferences where needed
understand how visitors use the site through analytics tools
measure and improve the performance of any campaigns

Where required by law, we will ask for your consent before placing non-essential cookies. You can withdraw consent or change your preferences at any time through your browser settings or any cookie banner we provide.

For more details about the cookies in use, please refer to our cookie notice if available, or contact us at privacy@roijoy.com.

8. Who we share personal data with

We do not sell your personal data. We may share it with:

Service providers and contractors who help us operate our business, for example hosting providers, email and CRM tools, analytics providers, accountants and legal advisers
Business partners where collaboration is required to deliver a service you have requested
Authorities, regulators or courts where we are required to do so by law or to protect our rights
Successors in the event of a merger, asset sale or other business restructuring affecting ROIJOY. In such cases we will take steps to ensure your privacy is protected

All service providers who process personal data on our behalf are subject to appropriate contracts and security obligations.

9. International transfers

Our business tools and service providers may be located in countries outside the European Economic Area. For example email, CRM, analytics or project management platforms based in other jurisdictions.

When we transfer personal data outside the EEA or the UK, we will ensure that suitable safeguards are in place, such as:

an adequacy decision by the European Commission; or
standard contractual clauses approved by the European Commission or UK authorities, together with additional measures where needed.

You can contact us for more information about specific transfers and safeguards.

10. Data security

We use technical and organisational measures to protect personal data from loss, misuse, unauthorised access, disclosure, alteration or destruction.

Measures may include:

secure hosting environments and encryption in transit where appropriate
access controls so that only people who need to see your data can access it
regular review of tools and permissions

No system can be guaranteed as completely secure, but we work to keep risk proportionate and under review.

11. Data retention

We keep personal data only for as long as necessary for the purposes described in this policy, or as required by law.

In practice, this means for example:

Enquiry data: usually up to 24 months after our last interaction, unless it leads to a client relationship
Client and contract data: for the duration of the relationship plus the period required by tax and accounting law
Marketing leads: until you object, withdraw consent or we determine that the data is no longer accurate or useful
Recruitment data: usually up to 12 months after the process ends, unless you agree to a longer period or we are required by law to keep it longer

Backups or archives may retain data for slightly longer before it is deleted or overwritten.

12. Your data protection rights

Under data protection law, you have several rights concerning your personal data. These may be subject to conditions and exceptions.

Right of access: to request a copy of the personal data we hold about you.
Right to rectification: to ask us to correct inaccurate or incomplete data.
Right to erasure: to ask us to delete your data in certain situations.
Right to restrict processing: to ask us to limit how we use your data.
Right to data portability: to receive your data in a structured, commonly used, machine readable format and, where technically possible, to have it transmitted to another controller.
Right to object: to object at any time to processing based on our legitimate interests, including B2B marketing.
Right to withdraw consent: where we rely on consent, you can withdraw it at any time. This will not affect processing carried out before withdrawal.

To exercise any of these rights, please contact us at privacy@roijoy.com. We may need to verify your identity before acting on your request.

13. Complaints and supervisory authority

If you have concerns about how we handle your personal data, we encourage you to contact us first so we can try to resolve the issue.

You also have the right to lodge a complaint with your local data protection authority. If you live or work in Hungary, this is the Nemzeti Adatvedelmi es Informacioszabadsag Hatosag. If you live or work in another EEA country, you may choose to contact your local supervisory authority instead.

14. Links to other websites

The Website may contain links to other sites, social media platforms or tools that we do not operate. We are not responsible for their content or privacy practices.

You should read the privacy information of any third party sites before providing them with personal data.

15. Changes to this privacy policy

We may update this policy from time to time, for example to reflect changes in law, technology or our services.

When we make changes, we will post the updated version on this page and update the Last updated date at the top. In case of significant changes, we may also notify you by email or by a notice on the Website where appropriate.

16. Contact

If you have any questions about this policy or how we handle your personal data, or if you would like to exercise your rights, you can contact us at:

Privacy email: privacy@roijoy.com
General email: hello@roijoy.com

Your Next Project Starts Here