GDPR Compliance Statement

Last Updated: 8/1/2025

At JMJ Propulsion Labs, we are committed to protecting the privacy and personal data of all individuals who interact with our services. Although we are a U.S.-based government contractor headquartered in Detroit, Michigan, we respect and support the privacy rights of individuals in the European Union and European Economic Area under the General Data Protection Regulation (GDPR) (EU 2016/679).

This page outlines our GDPR-compliant processes and how we handle, protect, and respect your personal data.

1. Lawful Basis for Processing

We only collect and process personal data when we have a lawful basis under GDPR, including:

• Consent: Where you have given explicit permission.

• Contractual necessity: To fulfill a contract or pre-contractual request.

• Legal obligation: To comply with applicable legal requirements.

• Legitimate interests: When our processing is necessary for a legitimate purpose and your rights do not override those interests.

2. Data We Collect

We may collect personal data through our website, contact forms, email correspondence, or business transactions. Types of personal data may include:

• Full name

• Business or email address

• Phone number

• IP address or device identifiers (via analytics tools)

• Job title or company affiliation (for B2B inquiries)

We do not collect sensitive personal data (racial or ethnic origin, political opinions, biometric data, etc.) unless required by law for employment, security clearance, or government contracting.

3. Data Subject Rights

If you are located in the EU/EEA, you have the following rights under the GDPR:

• Right to Access – Know what personal data we hold and how we use it.

• Right to Rectification – Request correction of inaccurate or incomplete data.

• Right to Erasure – Request deletion of your data (“right to be forgotten”).

• Right to Restrict Processing – Temporarily pause processing of your data.

• Right to Data Portability – Receive your data in a structured, machine-readable format.

• Right to Object – Object to data processing based on legitimate interests or direct marketing.

• Right to Withdraw Consent – Revoke consent at any time, where consent was the legal basis.

To exercise any of these rights, email us at 📧 Connect@JMJpropulsionLabs.com. We respond to all requests within 30 days, in accordance with GDPR Article 12(3).

4. Data Storage and Transfers

All data is stored on secure servers located in the United States. If personal data is transferred from the EU/EEA to the U.S., we ensure adequate safeguards are in place through one or more of the following:

• Contractual clauses approved by the European Commission (SCCs)

• Vendor commitments to GDPR compliance

• Data minimization and encryption

5. Data Retention

We retain personal data only as long as necessary to:

• Fulfill contractual or business purposes

• Comply with legal and regulatory obligations

• Support cybersecurity and audit requirements in line with U.S. government contracting standards

When data is no longer needed, we securely delete or anonymize it.

6. Third-Party Processors

We may engage trusted third-party service providers (e.g., for website hosting, analytics, or secure communications). These processors are contractually bound to comply with GDPR and act only on our instructions.

We do not sell personal data to third parties.

7. Data Security

JMJ Propulsion Labs implements appropriate technical and organizational measures to protect personal data, including:

• Data encryption (in transit and at rest)

• Access control based on least privilege

• Intrusion detection and monitoring systems

• Compliance with NIST cybersecurity frameworks and DFARS/NIST SP 800-171, where applicable

8. Cookies & Tracking

We use cookies and analytics tools (e.g., Google Analytics) to improve site performance and user experience. For more information, please see our Cookie Policy.

You can manage your cookie preferences through your browser settings or by adjusting our website’s cookie banner.

9. Contact & Data Protection Officer (DPO)

If you have any GDPR-related questions or requests, please contact:

Data Protection Officer (DPO)

JMJ Propulsion Labs

📍4444 2nd Ave

Detroit, MI 48201

📧 Connect@JMJpropulsionLabs.com

📞 +1 248-722-0054

10. Updates to This GDPR Statement

We may revise this page as regulatory or operational changes occur. Please review this page periodically to stay informed of how we are protecting your data.