What is the scope of this Privacy Policy?
This Privacy Policy outlines how WITKOWSKI ECOMMERCE LTD (referred to as “we”, “us” or “our”, acting as data controller) collects, uses and discloses your personal information when you visit jorendale.com, use our services, place orders or otherwise communicate with our team (collectively the “Services”). This policy is drafted in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. For the purposes of this policy, “you” and “your” refer to any user of the Services, including customers, website visitors and other individuals whose information we process under this policy. Please read this policy carefully. By accessing or using any of our Services, you confirm your consent to the collection, use and disclosure of your information as described in this policy. If you do not agree with the terms set out here, you must not use or access any of the Services.
How will we update this Privacy Policy?
We may revise this Privacy Policy from time to time, including to reflect adjustments to our operational practices or to comply with updated legal and regulatory requirements in the UK. We will publish the revised version on the website, update the “Last Updated” date, and take any additional steps required by applicable UK law.
How do we collect and use your personal information?
To deliver our full range of Services, we collect personal information about you from a range of different sources over a 12-month period, as detailed in the sections below. The exact information we collect and process depends on how you interact with our brand. In addition to the specific uses listed further on, we may use the information we hold to communicate with you, deliver the Services, meet applicable legal obligations, enforce our Terms of Service, and protect or defend the Services, our legal rights, and the rights of our users and third parties.
What personal information do you provide to us directly?
Information you share with us voluntarily through our Services may include:
- Basic contact details: your full name, postal address, telephone number and email address
- Order related details: your name, billing address, shipping address, payment confirmations, email address and phone number
- Account login details: your chosen username, password and security verification questions
- Shopping behaviour data: items you view, add to your shopping cart or save to your wish list
- Customer support correspondence: information you choose to include in messages to us, such as when you submit enquiries through the Services Certain features of the Services require you to provide specific personal information directly. You may choose not to supply this information, but doing so may prevent you from accessing or using those features.
What information is collected automatically via tracking tools?
We also automatically collect certain data about your interactions with the Services (“Usage Data”). We may use cookies, tracking pixels and similar technologies (“Cookies”) to gather this information. Usage Data may include details about how you access and use our site and your account, including device specifications, browser information, network connection data, your IP address, and other records of your interactions with the Services.
What information do we receive from third-party sources?
We may also receive information about you from external third parties, including vendors and service providers who collect data on our behalf, such as:
- Platform providers that support our site and Services, including Shopify
- Payment processors, who collect payment details (for example bank account, credit or debit card information, billing address) to process transactions and fulfil your order, as part of performing our contract with you
- Third-party marketing partners We or third parties working with us may automatically collect certain information using online tracking technologies (including pixels, web beacons, software development kits, third-party libraries and cookies) when you visit our site, open or click an email we have sent you, or interact with our Services or advertisements. All information received from third parties will be handled in line with this Privacy Policy. We are not responsible for the accuracy of information supplied to us by third parties, nor for the privacy policies or practices of any external parties. For further details, see the “Third Party Websites and Links” section below.
For what purposes do we use your personal information?
Delivering products and services: We use your personal information to provide the Services and perform our contract with you. This includes processing payments, fulfilling orders, sending you notifications relating to your account, purchases, returns, exchanges or other transactions, creating and managing your user account, arranging shipment delivery, facilitating returns and exchanges, and enabling you to submit product reviews. We may share personal information with third-party marketing partners for legitimate commercial purposes. Marketing and advertising: We use your personal information for marketing and promotional purposes, such as sending marketing, advertising and offer communications by email, post or other channels, and displaying relevant product or service advertisements to you. This may include using your personal information to tailor our Services and advertising content both on our website and across other online platforms. Security and fraud prevention: We use your personal information to detect, investigate and respond to suspected fraudulent, unlawful or malicious activity. If you choose to use the Services and register for an account, you are responsible for keeping your account login credentials secure. We strongly recommend that you do not share your username, password or other access details with any third party. If you believe your account has been compromised, please contact us immediately. Customer support and service improvement: We use your personal information to deliver customer support and improve our overall service offering. This is in our legitimate interests to respond to your enquiries, deliver efficient support, and maintain our ongoing business relationship with you.
How do we use cookies and similar tracking technologies?
Like most online platforms, we use Cookies on our website. We use Cookies to support and improve our website and Services, including remembering your actions and preferences, running analytics and gaining a better understanding of how users interact with the Services, for our legitimate interest in managing, improving and optimising our services. We may also allow third parties and service providers to deploy Cookies on our website to better tailor services, products and advertising on our website and other online platforms. Most web browsers accept Cookies automatically by default. You can adjust your browser settings to remove or reject Cookies via your browser controls. Please note that removing or blocking Cookies may negatively impact your user experience and may cause some Services, including specific features and general functionality, to work incorrectly or become unavailable. In addition, blocking Cookies may not fully prevent information sharing with third parties such as our advertising partners.
When do we disclose your personal information to third parties?
In certain circumstances, we may disclose your personal information to third parties for legitimate purposes, subject to the terms of this Privacy Policy. These circumstances include:
- With vendors and other third parties who perform services on our behalf, including IT management, payment processing, data analytics, customer support, cloud storage, order fulfilment and shipping
- With business and marketing partners, including Shopify, to deliver services and advertising to you. For example, we use Shopify to support personalised advertising across third-party services. Our business and marketing partners will use your information in accordance with their own privacy notices.
- When you direct, request or otherwise consent to us disclosing specific information to third parties, for example to arrange product delivery, or through your use of social media widgets or login integrations, with your consent
- With our affiliates or other companies within our corporate group, for our legitimate interests in operating a successful business
- In connection with corporate transactions such as a merger or insolvency proceedings, to comply with applicable legal obligations (including responding to court orders, regulatory requests and similar legal demands), to enforce applicable Terms of Service, and to protect or defend the Services, our rights, and the rights of our users and third parties
Categories of information we may disclose:
- Identifiers: such as basic contact information and selected order and account details
- Commercial information: such as order records, purchase history and customer support correspondence
- Internet or similar network activity: such as website usage data Categories of recipients:
- Vendors and third parties providing services on our behalf (including internet service providers, payment processors, fulfilment partners, customer support partners and data analytics providers)
- Business and marketing partners
- Affiliated entities
We do not use or disclose sensitive personal information to infer personal characteristics about you. Over the past 12 months, we have disclosed personal information for advertising and marketing purposes as described below, in line with applicable UK data protection law. Categories of personal information:
- Identifiers such as basic contact details and selected order and account information
- Commercial information such as records of products or services purchased and shopping activity data
- Internet or similar network activity such as Usage Data Categories of recipients: Business and marketing partners
What rules apply to user generated content?
The Services may allow you to post product reviews and other user-generated content. If you choose to submit user generated content to any public area of the Services, that content will be publicly visible and accessible to anyone. We do not control who will have access to the information you choose to make public, and cannot guarantee that parties accessing such information will respect your privacy or keep it secure. We are not responsible for the privacy or security of any information you make publicly available, nor for the accuracy, use or misuse of any information you disclose or receive from third parties.
What about links to third-party websites?
Our site may include links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated with or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such external sites, including the accuracy, completeness or reliability of information found on those sites. Information you share on public or semi-public platforms, including information you post on third-party social networking sites, may also be viewable by other users of the Services and/or users of those third-party platforms, with no restriction on its use by us or by third parties. Our inclusion of such links does not by itself imply any endorsement of the content on those platforms or of their owners or operators, except as disclosed within the Services.
How do we handle children’s personal data?
The Services are not intended for use by children, and we do not knowingly collect any personal information from children. If you are the parent or guardian of a child who has provided us with their personal information, you may contact us using the details set out below to request deletion of that information. As of the effective date of this Privacy Policy, we have no actual knowledge that we have shared or disclosed personal information of individuals under the age of 16.
How do we secure and retain your personal information?
Please be aware that no security measures are perfectly secure or impenetrable, and we cannot guarantee “perfect security”. In addition, any information you send to us may not be secure while in transit. We recommend that you do not use unsecure channels to communicate sensitive or confidential information to us. How long we retain your personal information depends on a range of factors, including whether we need the information to maintain your account, deliver the Services, comply with legal obligations, resolve disputes or enforce other applicable contracts and policies, in line with UK data protection requirements.
What rights do you have regarding your personal information?
Under UK GDPR and the Data Protection Act 2018, you hold the rights listed below in relation to your personal information. However, these rights are not absolute, apply only in certain circumstances, and in some cases we may decline your request as permitted by law.
- Right of access: You have the right to request access to the personal information we hold about you, including details of how we use and share your information.
- Right to rectification: You have the right to request that we correct inaccurate personal information we hold about you.
- Right to erasure: You have the right to request that we delete the personal information we hold about you, where applicable.
- Right to data portability: Under certain circumstances and subject to exceptions, you have the right to obtain a copy of the personal information we hold about you and to request that we transfer it to a third party.
- Right to object to direct marketing: You have the right to opt out of processing of your personal information for direct marketing purposes. Please note that you can also control how your personal information is used for advertising purposes by adjusting your browser and device settings.
We will not discriminate against you for exercising any of these rights. Before responding substantively to a request, we may need to collect information from you to verify your identity, such as your email address or account details. Subject to applicable law, you may appoint an authorised agent to submit requests on your behalf to exercise your rights. Before accepting such a request from an agent, we will ask the agent to provide proof that you have authorised them to act on your behalf, and we may require you to verify your identity directly with us. We will respond to your request within the required timeframe as set out by applicable UK law.
How can you contact us about privacy-related matters?
Should you have any questions about our privacy practices or this Privacy Policy, or if you wish to exercise any of your available rights, please email us at support@jorendale.com