Privacy Policy

Last updated 30 October 2026

This policy explains what personal information Just Digital collects, why, who sees it, and what you can do about it.

Who is responsible

PT Just Digital Lindgren, trading as Just Digital, is responsible for the personal information described here. We are an Indonesian limited liability company with our seat in Badung, Bali, Indonesia. The business is run by Dom, Managing Director.

You can reach us about privacy in three ways:

• Message Dom on LinkedIn at https://www.linkedin.com/in/domjedro/
• Reply to any email you have received from us
• Use the contact form at https://justdigital.world/roofers

Where privacy law in your country uses the terms, we act as the data controller for the information in this policy.

What we collect and where it comes from

The free AI search check form. When you request a free check we ask for your email address, the area you work in, and your business name or website. You can also give a phone number, a line about marketing you have tried before, and a monthly turnover range. Those extra fields are optional.

Each step of the form is saved as you answer it. If you type your email and leave before the end, we still have the email. If you did not mean to leave it with us, tell us and we delete it.

Bookings. If you book a call with Dom, the booking page runs on TidyCal. TidyCal collects your name, email address, the time you chose and anything you type in the booking notes.

Newsletter. Some pages have a newsletter sign-up form run by Kit. It collects your email address and, if you give it, your name.

Paid work. When you become a customer we hold what we need to do the work and to invoice you: contact details, business details, access details for the accounts you give us access to, the content you share with us, and payment records.

Communications. When you email us, message us on LinkedIn or use the contact form, we keep the message and our reply.

Website analytics. Our website runs Microsoft Clarity and a Leadsy visitor tag. These are explained under cookies below.

Cold outreach. We email owners of trade businesses to introduce what we do. The business contact details we use come from public business directories, business websites and LinkedIn: the business name, the owner or contact name, the business email address, the trade, the area and the website.

Why we use it and on what legal basis

Privacy law in some countries asks us to name a legal basis for each use.

Where we rely on legitimate interests, we have weighed our interest against yours. If you think we got the balance wrong, you can object, and we will stop unless we have a compelling reason that the law recognises.

Who we share it with

We do not sell personal information. We do not rent it or trade it.

We share it only with the service providers who help us run the business, and only as much as each one needs:

• Cloudflare: hosts the website, runs the free-check form (Workers and Durable Object storage) and routes form emails to Dom through Cloudflare Email Routing.
• Google Workspace: hosts our email.
• TidyCal: runs the booking page.
• Kit: runs the newsletter.
• Microsoft Clarity: session replay and heatmaps on the website.
• Leadsy: visitor identification tag on the website.

We may also share information with professional advisers such as accountants or lawyers when we need their advice, and with authorities when the law requires it.

Cookies and similar technologies

Our website uses a small number of tools that store or read information in your browser.

Microsoft Clarity records how visitors use the site: where they click, how far they scroll, and replays of sessions. Clarity sets cookies to tell visits and sessions apart. We use it to find pages that confuse people and fix them. Microsoft's own privacy statement explains how Microsoft handles that data.

Leadsy is a visitor identification tag. It uses signals from a visit, such as the network it comes from, to try to work out which business a visitor belongs to and, in some cases, who the person is. It may tell us that someone from a particular company visited and which pages they looked at. We use it to understand which businesses are interested in what we do. If you would rather not be identified this way, block it in your browser or ask us to delete what we hold.

Theme setting. The site remembers whether you chose light or dark mode. That is stored in your browser's local storage and never leaves your device.

Form progress. The free-check form stores your answers in your browser's session storage so a page refresh does not wipe them. Session storage clears when you close the tab.

You can block or delete cookies in your browser settings. If you block Clarity or Leadsy, the site still works.

Sending data abroad

We are based in Indonesia. The service providers above run servers in several countries, including the United States. That means your information can be stored or processed outside the country you live in.

Where the law requires safeguards for those transfers, we rely on the contractual protections offered by those providers. Ask us if you want to know more about a particular transfer.

How long we keep it

• Free-check and enquiry data that does not lead to paid work: up to 24 months from the last contact, then deleted.
• Cold outreach contacts: treated the same way, up to 24 months from the last contact. If you opt out, you come off the list straight away. We keep a record of the opt-out so we do not contact you again.
• Customer records: for as long as the work continues, then for as long as Indonesian tax and accounting law requires us to keep business records.
• Newsletter subscribers: until you unsubscribe.
• Analytics data: for the retention period set by each provider, and no longer than we need.

You can ask us to delete your information sooner. We will do it unless the law requires us to keep it.

How we protect it

We keep access to your information limited to the people who need it, which in practice is Dom. The information sits in the accounts of the service providers named above, each of which runs its own security programme, and we use the access controls those providers offer.

No system is perfectly secure. If a breach ever affects your information in a way that could harm you, we will tell you and the relevant authority as the law requires.

Your rights

Depending on where you live, you have some or all of these rights:

• Access: ask what information we hold about you and get a copy.
• Correction: ask us to fix anything that is wrong or out of date.
• Deletion: ask us to delete your information.
• Restriction: ask us to stop using your information while a dispute is sorted out.
• Objection: object to our use of your information, including for marketing.
• Portability: get the information you gave us in a common format to take elsewhere.
• Withdraw consent: where we rely on consent, withdraw it at any time.
• Opt out of marketing: at any time, with no reason needed.

To use any of these, message Dom on LinkedIn, reply to any email from us, or use the contact form at https://justdigital.world/roofers. We may ask you to confirm who you are before we release information.

We aim to answer within 30 days. If a request is complex we may need longer; if so we will tell you within the 30 days and explain why. Using these rights is free.

If you received a cold email from us

If we emailed you and you had never heard of us, your business contact details were on a public business directory, your business website, or LinkedIn. We used them to send a short message about what we do, because it is relevant to your trade.

We aim to follow the Australian Spam Act 2003 for Australian contacts and the rules that apply where you are. Every message we send identifies who we are and includes a way to opt out.

To opt out, reply with the word "delete", or use the unsubscribe link in the email. Either works. We honour both and you will not hear from us again.

Complaints about privacy

If you are unhappy with how we have handled your information, tell us first using any of the ways listed at the top of this policy. We will look into it fairly and answer in writing.

If you are not satisfied with our answer, you can go to a regulator:

• In Australia, the Office of the Australian Information Commissioner at oaic.gov.au.
• In the European Union or the United Kingdom, your local data protection authority.
• Elsewhere, the data protection authority in your country.

Children

Our website and services are for businesses and are not directed at anyone under 18. If you believe we hold information about someone under 18, tell us and we will delete it.

Laws we aim to follow

We aim to follow the Indonesian Personal Data Protection Law (Law No. 27 of 2022), the EU and UK GDPR for people in Europe, and the Australian Privacy Act 1988 and Australian Privacy Principles for people in Australia. We are not registered with or certified by any privacy regulator.

Changes to this policy

We will update this policy when the way we handle information changes. The date at the top shows the latest version. If a change is significant and we have your email address, we will tell you.