1. Introduction
JH Designs ("we," "our," or "us") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website, use our services, or interact with us in connection with the EvoArm bionic system and related open-source resources.
This Policy is written in compliance with the General Data Protection Regulation (GDPR) (EU) 2016/679, and applicable national data protection legislation. If you are located outside the European Economic Area (EEA), additional or different rules may apply in your jurisdiction, and we will always aim to meet the highest applicable standard.
Please read this Policy carefully. By using our website or Services, you acknowledge that you have read and understood how we handle your personal data.

2. Who We Are (Data Controller)
For the purposes of GDPR and applicable data protection law, the data controller is:
JH Designs
Email: info@jhdesigns.eu
Website: www.jhdesigns.eu
If you have any questions about how we handle your data, you can contact us directly at the email above.

3. What Personal Data We Collect
We collect only the data that is necessary for the purposes described in this Policy.
3.1 Identity and Contact Data

• Full name

• Email address

• Phone number

• Country or region of residence

3.2 Health and Structural Data (Special Category Data)

• Information about limb difference, amputation level, or physical background, where voluntarily provided during an inquiry

• Measurement and functional alignment data required to optimize open-source bionic parameters or custom configurations

• Information about lifestyle, daily activities, and functional requirements

3.3 Communications Data

• Messages and enquiries submitted through our contact form

• Email correspondence with our team

• Any feedback or follow-up information you provide

3.4 Technical and Usage Data

• IP address

• Browser type and version

• Device type and operating system

• Pages visited and time spent on our website

• Referring website or source

3.5 Open-Source and Downloads Data
We do not require registration to access our open-source files. No personal data is collected solely for downloading files via our website. Any data collected through GitHub is subject to GitHub's own Privacy Policy.

4. How We Collect Your Data
We collect personal data through the following means:

• Contact and enquiry forms on our website, when you reach out to begin a dialogue

• Direct email or phone communication between you and our team

• Automatically, through cookies and similar tracking technologies when you visit our website (see Section 10 on Cookies)

• Third-party platforms, such as GitHub, where you interact with our open-source repositories (governed by their own privacy policies)

We do not purchase, rent, or obtain personal data from data brokers or third-party marketing lists.

5. Legal Basis for Processing
Under GDPR, we must have a lawful basis for processing your personal data. We rely on the following bases:
Data TypeLegal Basis
Identity and contact dataContract — processing is necessary to take steps at your request prior to entering into an agreement (Article 6(1)(b))
Health and measurement dataExplicit Consent — we obtain your explicit consent before processing any physical or structural assessment data (Article 9(2)(a))
Communications dataLegitimate Interests — to respond to your enquiries and maintain records of our correspondence (Article 6(1)(f))
Technical and usage dataLegitimate Interests — to maintain and improve our website (Article 6(1)(f))
Legal complianceLegal Obligation — where processing is required to comply with applicable law (Article 6(1)(c))
You have the right to withdraw consent at any time where consent is the legal basis for processing. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

​

6. How We Use Your Data
We use your personal data for the following purposes:

• To respond to enquiries and communicate with you about our services

• To take structural measurements and optimize personalized bionic device settings

• To provide after-care, calibration support, and ongoing assistance

• To improve and develop our open-source products and frameworks based on real-world feedback

• To maintain accurate business records as required by law

• To operate, maintain, and improve our website

• To comply with our legal and regulatory obligations

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

7. Who We Share Your Data With
We do not sell your personal data. We may share your data with the following categories of recipients only where necessary:
7.1 Service Providers (Data Processors)
We may share data with trusted third-party service providers who assist us in operating our web ecosystem, including:

• Website hosting and infrastructure providers

• Email communication platforms

• Cloud storage providers

All service providers are contractually required to handle your data securely, in accordance with GDPR, and only for the purposes we specify.
7.2 Professional Advisors
We may share data with legal, financial, or regulatory advisors where necessary to comply with our obligations or protect our legal rights.
7.3 Legal Authorities
We may disclose personal data to law enforcement or regulatory authorities where required by law or in response to a valid legal request.
We do not share sensitive personal or structural data with any third party without your explicit consent, except where strictly required by law.

8. International Data Transfers
Where personal data is transferred outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission

• Transfers to countries with an adequacy decision from the European Commission

We will not transfer your data internationally without ensuring a level of protection equivalent to that required under GDPR.

9. How Long We Retain Your Data
We retain personal data only for as long as necessary for the purposes for which it was collected, or as required by law.
Data TypeRetention Period
Inquiry and configuration records7 years from the date of last service
Structural and measurement dataDuration of the user relationship, plus 7 years
Communications and enquiry data2 years from the date of last contact
Technical and usage data12 months
After the applicable retention period, data is securely deleted or anonymised. You may request earlier deletion of your data (see Section 11 — Your Rights), subject to any legal obligations we have to retain it.

10. Cookies and Tracking Technologies
Our website uses cookies and similar technologies to improve your experience and understand how our website is used.
10.1 Types of Cookies We Use

• Strictly necessary cookies — essential for the website to function. These cannot be disabled.

• Analytics cookies — help us understand how visitors interact with our website (e.g., pages visited, time on site). These are only placed with your consent.

• Preference cookies — remember your settings and preferences for a better experience.

10.2 Your Cookie Choices
When you first visit our website, you will be presented with a cookie consent banner. You may accept all cookies, reject non-essential cookies, or manage your preferences at any time through our cookie settings.
You can also control cookies through your browser settings. Note that disabling certain cookies may affect the functionality of our website.
We do not use advertising or tracking cookies for third-party marketing purposes.

11. Your Rights Under GDPR
If you are located in the EEA or UK, you have the following rights regarding your personal data:

• Right of Access — Request a copy of the personal data we hold about you.

• Right to Rectification — Request correction of inaccurate or incomplete data.

• Right to Erasure ("Right to be Forgotten") — Request deletion of your personal data, subject to legal obligations.

• Right to Restriction of Processing — Request limitations on how we use your data.

• Right to Data Portability — Receive your data in a structured, machine-readable format.

• Right to Object — Object to processing based on legitimate interests.

• Right to Withdraw Consent — Withdraw consent at any time where consent is the legal basis.

• Right to Lodge a Complaint — Lodge a complaint with your national supervisory authority.

To exercise any of these rights, please contact us at info@jhdesigns.eu. We will respond within 30 days, as required by GDPR.

12. Data Security
We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, loss, alteration, or disclosure.
These measures include:

• Encrypted data storage and transmission (SSL/TLS)

• Access controls limiting who can view sensitive data

• Regular review of our data handling practices

• Secure deletion of data that is no longer required

While we take every reasonable precaution, no method of transmission over the internet is completely secure. We encourage you to contact us immediately if you suspect any unauthorised access to your data.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Data Protection Commission within 72 hours and, where required, notify affected individuals without undue delay.

13. Children's Privacy
Our Services are not directly targeted at children under the age of 16 without parental oversight. We do not knowingly collect personal data from children without verified parental or guardian consent.
Where an open-source bionic system parameters check is sought on behalf of a minor, all data will be collected from and processed with the explicit consent of the parent or legal guardian. Data relating to a minor will be handled with elevated safety precautions and restricted internal access.
If you believe we have inadvertently collected data from a child without appropriate consent, please contact us immediately and we will take steps to delete it.

14. Links to Third-Party Websites
Our website contains links to third-party platforms including GitHub. This Privacy Policy applies only to JH Designs' website and services. We are not responsible for the privacy practices of third-party websites. We encourage you to review the privacy policies of any external sites you visit.

15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements.
We will notify you of material changes by updating the "Last Updated" date at the top of this page. Where changes are significant, we may also notify you directly by email.
Your continued use of our Services after changes are posted constitutes acceptance of the updated Policy.

16. Contact Us
For any questions, requests, or concerns regarding this Privacy Policy or your personal data, please contact us:
JH Designs
Email: info@jhdesigns.eu
Website: www.jhdesigns.eu