How this portal handles your information
Who we are
This portal is run by JJHA Property Management LLC, a family office. You can reach us about anything on this page at secure@jjhafamily.com.
What we hold about you
- The email address a member of the family invited, and the name they gave for you.
- How you proved the address: which sign-in you used and the account identifier that provider gave us, or that a code was emailed and entered, with the internet address the code was requested from. Codes themselves are kept only in scrambled form and for 24 hours.
- The documents shared with you and the notes that came with them.
- A record of each time you signed in, opened a share, viewed or downloaded a document, including the date, time, your internet address and browser type. The person who shared with you can see the opens and downloads.
- If you tick “remember this device”, a scrambled token that lets that browser skip the code for 30 days.
Why, and on what basis
To deliver documents you are entitled to receive, to make sure only you receive them, and to keep a record of what was shared with whom. Under the GDPR and UK GDPR our lawful basis is our legitimate interest in secure, accountable delivery (Article 6(1)(f)), and where the sharing is part of an engagement with you, the performance of that engagement. Remembering your device rests on your consent, which you give by ticking the box and withdraw by signing out of that device or writing to us.
How long we keep it
A share is available until its stated date. Its documents are deleted from the portal 30 days after that date, or 30 days after the sender withdraws it. Sign-in and access records — including the internet address and browser type recorded with each — are kept for 24 months, after which they are removed. Codes are kept for 24 hours. A signed-in session lasts 12 hours. Your address stays on our list of people we have shared with until you ask us to remove it.
Who else sees it
If you sign in with Google, Microsoft or Apple, those companies handle the sign-in under their own privacy policies; we receive only your address and an account identifier. The portal is hosted on servers in the United States. We do not use analytics, advertising or tracking of any kind, and we never sell or share your information.
Your rights
You can ask for a copy of what we hold about you, ask us to correct it, ask us to delete it, object to our use of it, or ask us to restrict it, by writing to secure@jjhafamily.com. If you are in the EU or UK you can also complain to your data protection authority. Asking us to delete your information ends any share still available to you; the sign-in and access records are kept for the 24 months as our security record.
Cookies
| Cookie | Purpose | Kind | Lasts |
|---|---|---|---|
portal_session |
Keeps you signed in after you prove your address | Strictly necessary | 12 hours, or until you sign out |
portal_device |
Lets this browser skip the code next time | Optional — set only if you tick “remember this device” | 30 days |
There are no third-party cookies and no tracking cookies. Because the only cookie we set without asking is required for the portal to work, we tell you about it rather than ask for consent.