Privacy Policy
Last updated: 1st July 2026
Effective date: 1st July 2026
This Privacy Policy explains how Jackorist (“Jackorist”, “we”, “us”, or “our”) collects, stores, and protects your personal information when you visit our website or place an order at https://www.jackorist.com (the “Site”) or otherwise communicate with us.
We are committed to handling your personal information in accordance with UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
By using the Site, you acknowledge that you have read and understood this Privacy Policy.
1. Information We Collect
1.1 Information you provide directly
- Full name
- Email address
- Shipping address and billing address
- Phone number
- Payment information (processed by our payment processor — we do not store full card numbers)
- Order history and order preferences
- Communications you send us (support emails, contact form submissions, product reviews, exchange requests)
- Marketing preferences and consent signals
1.2 Information we collect automatically
- IP address
- Browser type, version, and language
- Device type, model, and operating system
- Pages viewed, links clicked, time spent on pages, scroll depth
- Referring URL and exit URL
- Cookies and similar tracking technologies (see Section 6)
1.3 Information from third parties
- Delivery status updates from our shipping carriers
- Marketing attribution data from Google Ads
- Fraud and risk indicators from our payment processor’s fraud analysis tools
- Publicly posted information (for example, product reviews or tagged social media posts)
1.4 We do not knowingly collect special category (sensitive) personal data, as defined under UK GDPR, through the Site.
2. How We Use Your Information
We use your personal information for the following purposes, each tied to the categories of data listed in Section 1:
- Order processing and fulfilment — name, address, phone, email, payment, order history
- Order confirmations, shipping updates, and exchange coordination — name, email, phone, order history
- Customer support — name, email, communications, order history
- Fraud prevention and risk screening — IP address, device information, payment information, order history
- Legal and tax compliance (including VAT and HMRC record-keeping) — order history, billing information
- Marketing communications (Google Ads, email newsletters) — email, browsing behaviour, order history, marketing preferences — only where you have provided the required consent or where we rely on a lawful basis to do so
- Site analytics and improvement — device information, browsing behaviour
- Responding to, correction, and deletion requests — identity verification information you provide
3. How and Why We Collect Your Information
We collect your personal information when you:
- Create an account or place an order on the Site
- Subscribe to our email newsletter
- Contact us via email, contact form, or social media
- Submit an exchange or return request
- Leave a product review
- Interact with the Site (automatically, via cookies and similar technologies)
- Participate in promotions, surveys, or competitions we run
Under UK GDPR, we only process personal information where we have a lawful basis to do so — most commonly to perform our contract with you (fulfilling your order), to comply with a legal obligation, for our legitimate interests (such as fraud prevention and site improvement), or where you have given consent (such as marketing emails).
4. Sharing Your Information
We disclose your personal information only to the following categories of third parties, and only to the extent necessary:
- Payment processors — to securely process card and online payments
- Shipping and delivery partners — to deliver your orders
- Website hosting providers — to operate and secure the Site
- Analytics providers — Google Analytics (to understand how the Site is used)
- Advertising providers — Google Ads (to serve relevant advertising and measure campaign performance, where you have consented)
- Email service providers — for transactional emails and, where you have consented, marketing emails
- Customer support platforms — to manage and respond to enquiries
- Professional advisors — accountants, lawyers, and auditors, under confidentiality obligations
- Authorities — where required by law, court order, or to lawfully protect our rights, property, or safety, or the rights, property, or safety of others
We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.
5. International Data Transfers
Some of the third parties listed in Section 4 may store and process data outside the United Kingdom, including in the European Union and the United States.
Before disclosing your personal information to an overseas recipient, we take reasonable steps to ensure the recipient handles your information in a manner consistent with UK GDPR, including relying on the UK International Data Transfer Agreement (IDTA), UK Addendum to the EU Standard Contractual Clauses, or an equivalent adequacy decision.
6. Cookies and Tracking Technologies
We use cookies and similar technologies to operate the Site, remember your preferences, understand how the Site is used, and deliver relevant advertising.
6.1 Categories of cookies we use
- Strictly necessary — required for the Site to function (cart, checkout, account login, security)
- Performance and analytics — to measure Site performance (Google Analytics)
- Marketing — to serve relevant advertising and measure campaign performance (Google Ads)
6.2 You can control cookies through your browser settings or our cookie consent banner. Blocking strictly necessary cookies may prevent parts of the Site from functioning correctly.
7. Data Retention
We retain your personal information only for as long as necessary for the purposes described in this Policy, to comply with our legal obligations, to resolve disputes, and to enforce our agreements. Specifically:
- Order and tax records — 6 years from the end of the tax year they relate to, in line with HMRC record-keeping requirements
- Account information — until you request deletion, subject to the order-record retention above
- Marketing preferences and contact logs — until you withdraw consent, and for a limited period thereafter to demonstrate proof of consent in compliance with UK PECR
- Support communications — 3 years from the date of the communication
- Site analytics — per the retention setting configured in Google Analytics
When personal information is no longer needed and we are not legally required to retain it, we will delete or permanently de-identify it in accordance with the UK GDPR storage limitation principle.
8. Your Rights Under UK Data Protection Law
Under UK GDPR and the Data Protection Act 2018, you have the right to:
- Access the personal information we hold about you
- Request correction of personal information that is inaccurate, out of date, incomplete, or misleading
- Request that we erase your personal information, subject to our legal obligations to retain certain records
- Restrict or object to certain processing of your information
- Request a copy of your data in a portable format (data portability)
- Withdraw your consent to marketing communications at any time, using the unsubscribe link in any marketing email or by emailing us
- Lodge a complaint about how we have handled your personal information (see Section 13)
To exercise any of these rights, email us at info@jackorist.com with the subject line “Privacy Request”. We will respond within one month. We may need to verify your identity before actioning your request.
9. Data Security
We protect your personal information using industry-standard measures:
- TLS/SSL encryption for all data transmitted between your browser and the Site
- PCI-DSS compliant payment processors handle all card data — we never see or store full card numbers
- Access to personal information is limited to authorised team members and service providers on a need-to-know basis
- Regular security reviews, software updates, and access audits
No system is completely secure. In the event of a data breach that is likely to result in serious harm, we will notify you and the Information Commissioner’s Office (ICO) as required under UK data protection law.
10. Children’s Privacy
10.1 The Site is not directed at children under the age of 16, and we do not knowingly collect personal information from children under that age without the consent of a parent or guardian.
10.2 If you believe we have collected personal information from a child without appropriate consent, please contact us at info@jackorist.com and we will take reasonable steps to delete it.
11. Automated Decision-Making
11.1 We do not use automated decision-making processes (including profiling) to make decisions that would have a legal or similarly significant effect on you.
11.2 We do use automated tools for fraud screening, but a human reviews any order that is flagged before the order is cancelled or refunded on the basis of that screening.
11.3 If our use of automated decision-making changes, we will update this Policy in advance of any change taking effect.
12. Changes to This Policy
12.1 We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal, or regulatory reasons. The “Last updated” date at the top reflects the most recent revision.
12.2 For material changes, we will provide a prominent notice on the Site and, where you have an account with us, by email, before the change takes effect.
13. How to Contact Us and Make a Complaint
For any privacy question, access request, correction request, deletion request, or complaint, please contact:
- Company Name: Jackorist
- Company Registration Number: 17308397
- Registered In: England and Wales, United Kingdom
- Business Address: Suite C253, 4–6 Greatorex Street, London, E1 5NF, United Kingdom
- Phone: +44 7732 730363
- Customer Support Email: info@jackorist.com
- Support Hours: Monday–Friday, 9:00 AM – 6:00 PM (GMT). Closed Saturday and Sunday.
We will acknowledge your complaint within 7 days and respond substantively within 30 days.
If you are not satisfied with our response, or if you believe we have breached UK data protection law, you may lodge a complaint with the Information Commissioner’s Office (ICO):
- Website: ico.org.uk
- Phone: 0303 123 1113
- Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom
