Privacy & Data Protection
Effective: 20 September 2026 · Pre-registration website phase
This notice explains how personal data is handled through www.jimstephenpinas.com while the business registration process is still being completed.
Who is responsible?
Jim Stephen Pinas / JIM STEPHEN PINAS, Netherlands. Business registration details will be added after formal registration. Privacy contact: jimstephenpinas@jimstephenpinas.com.
What we collect
- Information you submit through contact, partner, investor, procurement, support, press, QUARK or product-interest forms, such as name, email address, organization, message and selected inquiry type.
- Technical and device information processed by Shopify as necessary to operate and secure the storefront.
- Optional analytics, marketing or preference data only according to the visitor's consent and applicable privacy settings.
Why we use it and legal basis
- To answer your request and take pre-contractual steps when you contact us about a potential service, pilot, purchase or partnership.
- Legitimate interests in securing the website, preventing abuse, maintaining evidence of business communications and improving operations, balanced against your rights.
- Consent for optional analytics, marketing and preference processing where consent is required. You can change these choices through Cookie preferences.
- Legal obligations where records must be kept or disclosed under applicable law.
Who receives data?
We use service providers needed to host, secure and operate the website and communications. Shopify provides the ecommerce/storefront infrastructure and processes customer personal data under its applicable terms and Data Processing Addendum. Other providers are only added to this notice or a subprocessor register when their role is verified.
International transfers
Some infrastructure providers operate internationally. Where personal data is transferred outside the European Economic Area, applicable transfer mechanisms and safeguards must be used. Shopify describes its transfer mechanisms, including Binding Corporate Rules, adequacy arrangements and Standard Contractual Clauses where relevant.
How long do we keep data?
We keep information only while it is needed for the purpose for which it was collected, an active business relationship, security/evidence needs, dispute handling or a legal retention requirement. We periodically review whether data is still needed and delete or anonymize it when it is no longer necessary.
Your rights
Depending on the circumstances, you may have rights of access, correction, deletion, restriction, objection, data portability and withdrawal of consent. To exercise a right, email the privacy contact above. We may need to verify identity before acting on a request.
Automated decisions
We do not describe QUARK or other AI tooling as having independent authority over people. High-impact decisions are designed to retain meaningful human control. If legally significant automated decision-making is introduced, this notice will be updated before relying on it.
Complaints
You can raise a privacy concern with us first. You also have the right to lodge a complaint with the competent data protection authority, including the Dutch Autoriteit Persoonsgegevens where applicable.
Children and sensitive information
Do not submit passwords, payment-card details, identity documents, medical records or confidential third-party information through ordinary website forms. The public QUARK intake is not designed for highly sensitive personal data.
Changes
Material changes are recorded through our public changelog. This notice will be updated when the legal entity, processors, products or processing purposes materially change.