Privacy policy

JAMAWHAT PRIVACY POLICY (UK + EU + USA + CANADA+AUSTRALIA)
Last updated: 16 April 2026
This Privacy Policy explains how Jamawhat collects, uses, and shares your personal information when you use our website or services (the “Services”), including users in the United Kingdom, European Economic Area (EEA), United States, and Canada.
By using our Services, you agree to this Privacy Policy.

1. WHO WE ARE
1. WHO WE ARE
Jamawhat is the data controller responsible for your personal information.
Contact:
Email: privacy@jamawhat.com
If you have questions, contact us at the email address above. We aim to respond within applicable legal timeframes. You may also complain to your local regulator:
UK: ICO (https://ico.org.uk)
EU: your local data protection authority
Canada: Office of the Privacy Commissioner (https://www.priv.gc.ca)
USA (California): California Privacy Protection Agency (https://cppa.ca.gov)
Jamawhat PO Box 7169, Poole, England, BH15 9EL, United Kingdom.
Email is the preferred contact method for all privacy-related enquiries.
2. ELIGIBILITY
Our Services are not intended for children under sixteen. We do not knowingly collect personal data from children.
3. PERSONAL INFORMATION WE COLLECT
We collect the following categories:
Identity & contact information (name, email, address, phone number)
Financial information (payment details processed via secure third parties)
Transaction data (orders, purchases, returns, cart activity)
Account data (login credentials, preferences)
Technical data (IP address, browser, device, OS)
Usage data (site interactions, pages viewed)
Marketing data (communication preferences)
Communications (customer support messages)
We may also create anonymised or aggregated data that cannot identify you.

4. HOW WE COLLECT YOUR INFORMATION
We collect information:
Directly from you, when you place orders, create accounts, subscribe, contact us, or participate in promotions.
Automatically
Through cookies, analytics tools, and similar technologies.
From third parties
Including:
Payment processors, Shipping providers, Analytics providers (e.g. Google Analytics), Advertising partners. Public sources where legally permitted.
5. HOW WE USE YOUR INFORMATION
We use your information to:
Provide and fulfil orders. Manage your account. Process payments and refunds. Provide customer support. Improve our website and services. Send marketing (where permitted). Detect and prevent fraud. Comply with legal obligations.
6. LEGAL BASIS (UK/EU USERS)
We process personal data under:
Contract performance
Legal obligation
Legitimate interests
Consent (mainly marketing)
You may withdraw consent at any time.

7. USA PRIVACY NOTICE (INCLUDING CALIFORNIA)
If you are a resident of certain US states (including California), you may have additional rights.
We do NOT sell personal information for money. However, we may share information for targeted advertising (as defined under California law).

Your rights may include:
Right to know what personal data we collect
Right to request deletion
Right to correct inaccurate data
Right to opt out of “sale” or “sharing” for advertising
Right to limit use of sensitive personal information (if applicable)
Right not to be discriminated against for exercising your rights
You may opt out of targeted advertising by contacting us or using available browser signals (such as Global Privacy Control where supported). We recognise Global Privacy Control (GPC) signals where required by applicable law.

8. CANADA PRIVACY NOTICE
For Canadian users:
We collect, use, and disclose personal information only for purposes you would reasonably expect in the course of business.
We obtain consent where required.
You may request access to or correction of your personal data.
You may withdraw consent at any time, subject to legal or contractual restrictions.
9. MARKETING COMMUNICATIONS
We will only send marketing if:
You have opted in, or
You are an existing customer (where permitted by law)
You may opt out at any time via unsubscribe links or by contacting us.
We do not share your personal data with third parties for their own marketing without your consent.
10. AUSTRALIA PRIVACY NOTICE
If you are located in Australia, you may have rights under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
Your rights may include:
Right to access the personal information we hold about you
Right to request correction of your personal information if it is inaccurate, out of date, or incomplete
Right to request deletion of your personal information in certain circumstances (where legally permitted)
Right to make a complaint about how your personal information is handled

We do not sell personal information or share it for monetary value. We may share personal information with third-party service providers where necessary to operate our website, process orders, or deliver marketing services. 

You may contact us at any time to exercise your privacy rights or make a complaint.
11. HOW WE SHARE YOUR INFORMATION
We may share data with:
Shopify (platform provider)
Payment processors
Shipping and logistics providers
IT and hosting providers
Analytics and marketing services
Professional advisers (legal/accounting)
Regulators and authorities where required.
Business partners or buyers in case of sale/merger
All third parties must protect your data and use it only for agreed purposes.

12. SHOPIFY PLATFORM
Our store is hosted on Shopify, which processes your data to:
Provide secure hosting and checkout.
Analyse performance
Improve services.
Your data may be stored internationally by Shopify.
See Shopify Privacy Policy: https://www.shopify.com/legal/privacy

13. INTERNATIONAL TRANSFERS
Your data may be transferred outside your country, including outside the UK, EU, USA, or Canada.
We use safeguards such as:
Standard Contractual Clauses (EU/UK)
Adequacy decisions
Other legally approved transfer mechanisms
14. DATA RETENTION
We retain personal data only as long as necessary for:
Order fulfilment
Legal/tax obligations
Dispute resolution
Business operations
Typically, we retain customer data for 6 years after the end of the customer relationship. Some anonymised data may be retained indefinitely.

15. DATA SECURITY
We use appropriate technical and organisational measures to protect your data.
However, no system is completely secure, and we cannot guarantee absolute security.

16. YOUR RIGHTS
Depending on your location, you may have rights to:
Access your data. Correct inaccurate data. Delete your data. Object to processing. Restrict processing. Data portability. Withdraw consent.
To exercise rights: privacy@jamawhat.com
We may need to verify your identity before responding.

17. COOKIES
Where required by law (such as in the UK and EEA), we obtain your consent before placing non-essential cookies on your device.
We use cookies for:
Website functionality
Analytics
Advertising and personalisation
You can disable cookies in your browser, but some features may not work properly.

18. THIRD-PARTY LINKS
We are not responsible for the privacy practices of third-party websites.

19. CHANGES TO THIS POLICY
We may update this Privacy Policy at any time. Updates will be posted here with a revised date.