Privacy

What we keep about you, why, and what you can ask us to do with it.

Who we are

JW Shop is run by JW GROUP LIMITED, company number 12544456, which decides how your data is used.

What we collect and why

Orders: your name, email, delivery and billing address, a phone number if you give one, and what you bought. We need these to deliver your order and to keep the records the law asks for.
Payments: handled by Stripe. We never see your card number.
Your account, if you make one: your name, email, a scrambled copy of your password and the addresses you save.
Emails with news and offers: your email, only if you ask for them.
Back in stock alerts: your email and the item.
Messages and cancellations: what you send us, so we can answer it.
Reviews: your rating, your review and the name you choose to show.
Security: when you send a form, a scrambled copy of your email and your internet address, so we can stop spam.
Visits: we count page views without cookies. Each view is kept against a code made from your internet address with a key that changes every day and is destroyed within 48 hours, so we cannot recognise you on a later day or on another site.

Our reasons

We use your data to carry out your order, because the law requires it, because you agreed, or for our legitimate interest in running a safe shop and answering you. Where you agreed, you can change your mind at any time.

Who else sees it

Stripe, to take payments.
The supplier who posts some of our items, and the delivery company, get your name and delivery address so they can deliver your order.
Cloudflare, which carries our website traffic and runs the spam check on some forms.
DigitalOcean, which hosts our server in London. Our emails are sent from that server.

They act on our instructions. Stripe and Cloudflare may handle data outside the UK, with the safeguards UK law requires. We never sell your data.

How long we keep it

Orders: 7 years from the order date, then deleted with everything linked to them, except a review you published.
Checkouts that were never paid: 90 days, then deleted.
Reviews: Published reviews stay while they are shown. A review we did not publish, or one you asked us to remove, is deleted after 90 days.
Back in stock alerts: Deleted 2 days after you ask if you do not confirm, 7 days after we email you, 7 days after you cancel, or after 180 days of waiting.
Your JW ID account and saved addresses: Kept while your JW ID is open. You can ask to close it in your JW ID account.
Emails with news and offers: A sign-up you never confirm is deleted after 30 days. If you unsubscribe, we keep a scrambled copy of your address so we never email it again.
Form security records: Kept only while they count repeat sends, an hour at most, then deleted overnight.
Visit records: Each page view is kept for 30 days. After that only daily totals are kept, with nothing about you in them.
Messages you send us, including cancellations: 6 years after the last message, then deleted.

Emails with news and offers stop when you unsubscribe.

Your rights

You can ask to see, correct or delete your data, to limit or object to how we use it, or to take a copy with you. Email support@jwshop.uk.

You can complain to the Information Commissioner's Office at ico.org.uk.

Cookies

Everything we store on your device is on our cookies page.