Privacy Policy

Last updated: 16 September 2026

1. Introduction & data controller

This policy explains how we collect and process personal data through this website and our services. The data controller is CJK Holdings S.L., a company established in Spain (European Union).

For any privacy matter you can contact us at sourcing@cjksourcing.com.

2. Personal data we collect

  • Contact details you give us through enquiry or strategy call booking forms: name, email address, phone number, company or brand name, and anything you write in your message.
  • Technical and analytics data: IP address, browser and device type, pages viewed, referring page, and interaction data collected via cookies and similar technologies.
  • Correspondence and project information shared with us while we work together.

3. Legal bases for processing

  • Consent — analytics and performance cookies, and any marketing communications. You may withdraw consent at any time.
  • Legitimate interest — responding to enquiries, protecting and securing the website, and understanding how the site is used.
  • Contractual necessity — delivering the services agreed with clients and administering that engagement.
  • Legal obligation — accounting, tax and record-keeping duties.

4. How we use your data

  • To handle strategy call requests and schedule calls.
  • To communicate with you about our services and your project.
  • To deliver, invoice and support client engagements.
  • To measure and optimise site performance and content.

5. Data sharing & third-party processors

We do not sell personal data. We share it only with service providers who help us operate: website hosting and infrastructure, analytics tools, scheduling and calendar tools, and email or CRM providers.

With your consent we also use the Meta Pixel (Meta Platforms Ireland Limited). It sets cookies and sends Meta your IP address, browser and device details, the pages you view and actions such as clicking a call-to-action button, so we can measure and optimise our advertising. It does not load if you decline cookies.

Each processor is bound by GDPR-compliant data processing terms. Where data is transferred outside the European Economic Area, we rely on the European Commission's Standard Contractual Clauses or an adequacy decision.

6. Data retention

  • Enquiries that do not become engagements: up to 24 months.
  • Client records: for the duration of the engagement and up to 6 years afterwards to meet legal and accounting requirements.
  • Analytics data: typically up to 26 months.
  • Cookie consent preferences: up to 12 months.

7. Your rights under the GDPR

You have the right to:

  • Access the personal data we hold about you.
  • Have inaccurate data rectified.
  • Request erasure of your data.
  • Request restriction of processing.
  • Object to processing based on legitimate interests or direct marketing.
  • Receive your data in a portable format.
  • Withdraw consent at any time, without affecting prior processing.

To exercise any right, email sourcing@cjksourcing.com. You also have the right to lodge a complaint with a supervisory authority, including the Spanish data protection authority (Agencia Española de Protección de Datos, AEPD).

8. Cookies & tracking

We use essential cookies to run the site and, with your consent, analytics, performance and advertising cookies (including the Meta Pixel) to understand how the site is used and to measure our advertising. You choose your preference in the cookie notice shown on your first visit.

To change your choice, clear this site's stored data in your browser and the cookie notice will appear again.

9. Contact

CJK Holdings S.L., Spain (EU). Privacy enquiries: sourcing@cjksourcing.com.