Skip to content

Privacy policy

Data controller

The data controller for personal data collected on theermite.com is Jaypee Goncalves (Jaypee — The Ermite), Trabajador Autónomo (Spain).

Data collected

Personal data collected through the contact form includes:

  • First and last name
  • Email address
  • Message content

No data is collected automatically for profiling or targeted advertising purposes.

Purpose of processing

The data collected is used exclusively to:

  • Respond to your contact requests
  • Follow up on coaching or consulting enquiries

Booking a call

When you request a first conversation from the Contact page, your request is stored in Kōbō, Jay's management tool, hosted on his own server (OVH). The site does not keep it: it passes it on.

  • Data stored: your first name, your email address, your language, your time zone, the topic and slot you chose, your optional answers (what you expect from the conversation, who recommended you), the referral code of the link if there is one, the date of your agreement and the version of this text.
  • Emails: an acknowledgement, then Jay's confirmation or answer, and two reminders before the call, sent from contact@theermite.com.
  • Google: on confirmation, Jay creates an event in his Google calendar, with a Google Meet link. This event carries only your first name, in its description. Your email address is never passed to Google and Google sends you no invitation. The call takes place on Google Meet, whose privacy policy applies during the video call.
  • Cancellation and change of time: every email carries a personal link to a page of the site, which shows your appointment and lets you change its time or cancel it, without an account. The link contains neither your name nor your address; keep it to yourself, as it is enough to act on the appointment.
  • Retention: a declined, expired or cancelled request is erased 90 days later; a booked call, whether or not it took place, at the latest 12 months after its date.

Legal basis

Data processing is based on the consent of the data subject (Article 6(1)(a) of the GDPR), demonstrated by the voluntary submission of the contact form or the booking request.

Data retention period

Personal data is retained for a maximum of 24 months from the last contact, unless a longer retention period is required by law.

Your rights

In accordance with the GDPR (EU 2016/679), you have the following rights:

  • Access: obtain a copy of your personal data
  • Rectification: correct inaccurate data
  • Erasure: request the deletion of your data
  • Objection: object to the processing of your data
  • Portability: receive your data in a structured format
  • Restriction: request the restriction of processing

To exercise your rights, contact us via the contact form.

You also have the right to lodge a complaint with the relevant supervisory authority (AEPD in Spain, CNIL in France).

Visit measurement

To know which pages are read, the site counts visits with Umami, a service of the US company Umami Software, Inc. The statistics are stored in the European Union (Frankfurt). To count visits, Umami reads your IP address and browser, then replaces them with a fingerprint that changes every month: from one visit to the next, you can be recognised for one month at most. This processing by a US company is covered by the European Commission's standard contractual clauses. Umami sets no cookie, does not follow you from one site to another, and only receives the page visited, never what follows the « ? » in the address. They are kept for 6 months, then deleted. I only use these aggregated statistics to improve the site. If your browser asks not to be tracked, nothing is counted.

You can also turn this measurement off on your device, here or at the bottom of every page: Visit statistics: on

Cookies and storage

The site sets no tracking or advertising cookie. It only keeps on your device what it needs to work: your language, your display preferences (theme, adaptation settings) and your choice about visit measurement; for the site administration, a login session. Technical errors are reported to my own monitoring tool, without cookies. None of this requires your consent.

Should a tracker requiring consent ever be added, it would only be turned on with your explicit agreement.

Data security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction (HTTPS encryption, restricted access, secure hosting).

Google and YouTube data

When you connect a Google account to one of our applications (for example Kōbō), we request the YouTube permission needed to publish your videos, through Google APIs. By using these features you agree to the YouTube API Services Terms of Service; the Google Privacy Policy applies to Google’s processing of your data.

  • Video upload: we publish a video you created and explicitly approved, to the YouTube channel you choose during consent.
  • Channel name read: to show you which channel an account is linked to, so you can confirm your choice.
  • No automatic publishing without your explicit, per-video action.
  • The access token is stored encrypted; no other YouTube data is read, stored or shared.

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. This data is not sold, used for advertising, or transferred to third parties except as technically necessary for the service you request.

You can revoke this access at any time from the application (disconnect, which deletes the stored token) or from your Google account.

Contact

For any questions regarding the protection of your personal data, please contact us via the contact form.

Last updated: October 2026