Your privacy is important to me. This policy explains how I collect, use and protect your personal information when you visit or shop at JoJones. It also explains your rights under applicable data protection law, including the EU General Data Protection Regulation (GDPR).

‍ ‍

For information about how this website uses cookies and similar technologies, please see the separate Cookie Policy.

‍ ‍

1. Who Is Responsible for Your Data

‍ ‍

The data controller responsible for your personal information is:

‍ ‍

Joanna Jones Wapniarnia Pierwsza 38 64-980 Trzcianka, Poland

‍ ‍

Email: jojonesenfant@gmail.com Tel: +48 795 274 993

‍ ‍

If you have any questions about this policy or about how your data is handled, you can contact me using the details above.

‍ ‍

2. What Information I Collect

‍ ‍

When you place an order or contact me, I may collect the following information:

‍ ‍

• Your name

• Email address

• Telephone number

• Billing and shipping address

• Order details, including any information needed to fulfil a personalised order

• Correspondence and messages you send me (for example, customer service enquiries)

‍ ‍

Payment information is processed securely by the payment providers available at checkout. I do not directly receive or store your full payment card details.

‍ ‍

3. Legal Bases for Processing

‍ ‍

Under the GDPR, I only process your personal data where I have a valid legal basis to do so. Depending on the situation, the relevant basis may be:

‍ ‍

• Performance of a contract (Art. 6(1)(b) GDPR) – to process and fulfil your order, arrange delivery and respond to your requests relating to a purchase.

• Compliance with a legal obligation (Art. 6(1)(c) GDPR) – to meet accounting, tax and other legal requirements.

• Consent (Art. 6(1)(a) GDPR) – where you subscribe to the newsletter or agree to optional analytics or marketing cookies. You may withdraw your consent at any time.

• Legitimate interests (Art. 6(1)(f) GDPR) – to operate and secure my online store, handle enquiries and complaints, and prevent fraud, provided these interests are not overridden by your rights and freedoms.

‍ ‍

4. How I Use Your Information

‍ ‍

I use your personal information to:

‍ ‍

• Process and fulfil your orders

• Arrange delivery of your order

• Communicate with you about your order or enquiries

• Handle customer service and complaints

• Comply with legal, accounting and tax obligations

• Operate, maintain and secure my online store

‍ ‍

I only use your information for marketing where I have an appropriate legal basis to do so, such as your consent.

‍ ‍

5. Who May Receive Your Data

‍ ‍

Where necessary to provide my services, your information may be shared with trusted service providers involved in operating the store, processing payments and delivering orders. These include:

‍ ‍

• Squarespace – the platform that hosts and powers the online store.

• Payment providers, including Stripe and PayPal – to process payments securely at checkout.

• Delivery and courier companies – to arrange and complete the shipping of your order.

‍ ‍

These providers only process your data as needed to deliver their services, and are required to protect it appropriately.

‍ ‍

6. International Data Transfers

‍ ‍

Some service providers may process your data outside the European Economic Area (EEA).

‍ ‍

Where this occurs, appropriate safeguards required by applicable data protection law will be applied — for example, transfers based on an adequacy decision by the European Commission or on Standard Contractual Clauses — to ensure your data receives an equivalent level of protection.

‍ ‍

You may contact me at any time for more information about these safeguards.

‍ ‍

7. How Long I Keep Your Data

‍ ‍

I keep personal information only for as long as necessary to fulfil the purposes described in this policy and to comply with applicable legal, accounting and tax obligations.

‍ ‍

When your data is no longer needed, it is securely deleted or anonymised.

‍ ‍

8. Newsletter & Marketing

‍ ‍

If you choose to subscribe to the JoJones newsletter, I will use your email address to send you news, new collections and occasional updates.

‍ ‍

• You can unsubscribe at any time using the link included in each marketing email.

• Newsletter subscription is entirely optional and is not required to place an order.

• Consent under the GDPR must be freely given, specific, informed and unambiguous — subscribing is always your choice, and withdrawing consent is just as easy as giving it.

‍ ‍

9. Your Rights

‍ ‍

Under applicable data protection law, including the GDPR, you may have the right to:

‍ ‍

• Access your personal data and obtain a copy of it

• Correct inaccurate or incomplete data

• Delete your data ("right to be forgotten")

• Restrict or object to certain processing

• Request data portability

• Withdraw consent at any time, where processing is based on consent

‍ ‍

To exercise any of these rights, please contact me at jojonesenfant@gmail.com.

‍ ‍

You also have the right to lodge a complaint with the competent data protection authority. In Poland, this is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych – UODO).

‍ ‍

10. Changes to This Policy

‍ ‍

I may update this policy from time to time to reflect changes in my practices or for legal reasons. The "Last updated" date at the top of this page indicates when it was most recently revised. Please review it periodically.

‍ ‍

11. Contact

‍ ‍

For any questions about this Privacy Policy or about how your personal data is handled, please contact:

‍ ‍

Joanna Jones Email: jojonesenfant@gmail.com Tel: +48 795 274 993