Privacy Notice

Last updated: 16 October 2026. This Privacy Notice describes how CJX Secure Systems Ltd handles personal data in connection with its public website, business enquiries, and related communications. Separate agreements and notices may apply to customer subscriptions, endpoint telemetry, trial environments and CJX Aegis services.

1. Who is responsible for your data?

CJX Secure Systems Ltd (Irish company registration number 790541), Beaulieu Village, Drogheda, County Louth, Ireland, is the data controller for personal data that it determines how and why to process through this website. Contact us at info@cjxsecuresystems.com about privacy or data-protection enquiries.

2. Personal data we collect

When you contact us, we receive the information you submit, which may include your name, email address, enquiry type, message, and optionally your business name and areas of interest. If you correspond with us, we may retain the correspondence and related business communications. Providing an email address and enough information to understand your request is necessary for us to respond; optional fields may be left blank.

Our website and its service providers may also process technical information such as IP address, browser and device information, security and access events, cookie identifiers and website usage information. The precise technologies depend on the page visited, whether a service is enabled and your cookie choices. We do not ask website visitors to provide special-category data through the general enquiry form.

3. Purposes and lawful bases

Responding to enquiries and discussing services: we use contact details and correspondence to answer questions, arrange demonstrations and consider trial or service requests. Depending on the circumstances, our lawful basis is taking steps at your request before entering a contract (GDPR Article 6(1)(b)) or our legitimate interests in handling business enquiries and communicating with potential customers (Article 6(1)(f)).

Operating and protecting the website: we process limited technical information to maintain the site, detect abuse, troubleshoot errors and defend our systems. Our lawful basis for associated personal-data processing is our legitimate interests in reliable and secure operations (Article 6(1)(f)), except where another basis applies.

Analytics and optional technologies: we use Google Analytics through Google Site Kit, subject to the cookie choices and consent controls described in our Cookie Policy. Non-essential cookies and similar technologies that require consent are handled on the basis of your prior choice under Irish ePrivacy rules; where associated personal data is processed on the basis of consent, GDPR Article 6(1)(a) applies. You can withdraw consent through Cookie settings.

Contracts, accounting and legal compliance: where relevant, we process required records to perform agreed services (Article 6(1)(b)) or meet applicable legal obligations (Article 6(1)(c)). We do not treat sending a website enquiry alone as permission to receive unrelated electronic marketing.

4. Cookies and third-party content

The website uses necessary technologies for functionality and security and may offer optional analytics, translated content, maps, video or other embedded services. Certain features may rely on third parties, including Google. You can accept, reject or adjust optional technologies through our consent banner and reopen Cookie settings and the Cookie Policy at any time. The Cookie Policy identifies the services and technologies detected by our cookie-management system, their stated purposes and lifespans; detected entries may include administration-only technologies and require ongoing review.

5. Who may receive personal data?

CJX uses service providers where necessary to operate its website and communications. These include Bluehost for WordPress hosting; the configured email-delivery provider for website enquiries; Google Analytics/Google Site Kit for website statistics where permitted; and Weglot for translation features where used. Website protection, content delivery, backups, site management and cookie-preference functionality can involve additional providers and subcontractors, including Cloudflare where its services are enabled.

Providers receive only the information relevant to the services they supply, subject to their roles and applicable contracts. Some services may act as independent controllers for particular activities. This list describes website service categories and integrations, not a claim that every supplier receives all visitor data. Information may also be disclosed where required by law or necessary to establish or defend legal rights.

6. European processing and international transfers

CJX has adopted an EEA-first data-residency policy: we prioritise processing and storing personal data in Ireland or elsewhere in the European Economic Area wherever practicable. However, the use of cloud, analytics, translation, hosting and technical-support services may involve access to or transfers of personal data outside the EEA. An EEA-hosted server does not itself rule out such access.

Where a restricted international transfer occurs, we assess its necessity and apply an applicable GDPR Chapter V mechanism, such as a European Commission adequacy decision or appropriate contractual safeguards, including Standard Contractual Clauses where required, along with supplementary measures where appropriate. For information about relevant transfer safeguards, contact info@cjxsecuresystems.com. We do not claim that every current supplier provides EEA-only processing.

7. How long information is kept

CJX retains personal data for no longer than reasonably necessary for the purpose for which it was collected, subject to lawful exceptions. Enquiry correspondence is reviewed in light of whether a response, active business discussion or contractual follow-up remains necessary. Technical access and security data are retained according to operational security needs, applicable system log settings, and any legitimate investigation or incident-preservation requirements. Contractual, accounting and tax records may need to be retained longer under applicable Irish law, including generally six-year record-keeping obligations where relevant.

We review retention requirements according to the type of record, its purpose, legal duties, potential claims and the agreed customer terms. Data that is no longer required should be securely deleted or anonymised; data contained in backups expires in accordance with applicable backup cycles unless preserved for a legitimate reason. Specific retention and deletion schedules for CJX Aegis customer environments are governed separately by the relevant service documentation and agreements.

8. Your data-protection rights

Depending on the circumstances and legal exceptions, you may request access to your personal data, correction of inaccuracies, erasure, restriction of processing, portability, or object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it without affecting processing already lawfully carried out. Contact info@cjxsecuresystems.com to exercise these rights. We may need to verify your identity before responding.

You may also complain to the Irish Data Protection Commission or another competent supervisory authority. We do not use personal information submitted through the general public website enquiry form to make solely automated decisions that produce legal or similarly significant effects.

9. Security, changes and questions

We use administrative and technical safeguards intended to protect personal data, including access controls and measures designed to secure the website and communications. No online system is completely risk-free. This notice will be reviewed when services, suppliers, legal requirements or processing activities materially change. Questions may be sent to info@cjxsecuresystems.com.