Who are we?
This website https://www.jojoboutique.co.uk/ is owned and operated by JoJo Boutique Limited (registered in England and Wales under company number 06964795) (called in this notice ‘JoJo Boutique,’ ‘we,’ ‘our’ or ‘us’).
Purpose of this notice
This privacy policy sets out how JoJo Boutique uses and protects any information that you give JoJo Boutique when you use this website.
JoJo Boutique is committed to ensuring that your privacy is protected. Should we ask you to provide certain information by which you can be identified when using this website, then you can be assured that it will only be used in accordance with this privacy statement.
JoJo Boutique may change this policy from time to time by updating this page. You should check this page from time to time to ensure that you are happy with any changes. This policy is effective from May 2018 and has been updated in accordance with GDPR compliance processes.
What we collect
We may collect the following information:
- Name
- Contact information including email address
- Demographic information such as postcode, preferences and interests
- To obtain a copy of the information we hold about you, please email info@jojoboutique.co.uk
We may also collect general user tracking information related to our website use using Google Analytics (see below). This information is collected and stored whenever a request is made for any page or image on our servers. This information can be analysed and presented in the aggregate or organized by user sessions.
What we do with the information we gather
We require this information to understand your needs and provide you with a better service, and in particular for the following reasons:
- Internal record keeping.
- We may use the information to improve our services.
- We may periodically send promotional emails about our Auctions, specific lots or other information which we think you may find interesting using the email address which you have provided.
- From time to time, we may also use your information to contact you for market research purposes. We may contact you by email, phone, or mail. We may use the information to customise the website according to your interests.
- We may use general tracking information (generated by Google Analytics, see below) for analysis and reporting on site activity. For example, we may want to know how long the average user spends on our site, or which pages or features get the most attention. This information is used to analyse the success of our website, i.e. to gauge the popularity of one feature or offering over another, or on our ability to understand how people use our website. Tracking and aggregating usage information will allow us to develop this understanding.
How we use cookies
A cookie is a small file which asks permission to be placed on your computer’s hard drive. Once you agree, the file is added and the cookie helps analyse web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.
We use a third party product “Google Analytics”, a web analytics service provided by Google, Inc. (“Google”), to help us analyse how our site is used. The information collected is anonymous and is statistical data about users’ browsing actions and patterns. It is used to generate site web statistics and inform improvements to the website. In using Google Analytics, information about your use of our site, including your IP address, operating system and browser type may be transmitted to, and stored by, Google. This information will be subject to Google’s Privacy Policy. See Google’s Privacy Policy
Overall, cookies help us provide you with a better website by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us.
You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. NOTE this may prevent you from taking full advantage of the website as it will NOT work correctly.
Controlling your personal information
We will not sell, distribute or lease your personal information to third parties unless we have your permission or are required by law to do so. We may use your personal information to send you newsletters, information you may be interested in and notification of upcoming sales.
Online Payment Security
If you use our website to place an order with us, we will ask you to supply us with the information we need in order to process your order. We collect this information because it is necessary for the performance of our contract with you.
We share information about your on-line transactions with our suppliers and service providers where this is necessary to manage on-line payments, or to fulfil and deliver on-line orders. Otherwise, we will not share your information with any third party unless:
- we have your permission,
- we are required to do so by law,
- this is necessary so that we can enforce our terms of use, rights or property or the rights or property of any third party, or
- this is necessary in connection with the sale of business or its assets (in which case your details will be disclosed to our advisers and any prospective purchaser’s advisers and will be passed to the new owners).
PCI DSS (Payment Card Industry Data Security Standards) is the most rigorous standard in the payment industry today. PCI DSS standards are enforced by VISA, MasterCard and the banks and specify the technical aspects of a payment service as well as operational policies and procedures. JoJoBoutique are working with AIB, SagePay, PayPal, AMEX, WorldPay to ensure that all these security obligations are being fulfilled and your data is as safe as can be.
Direct marketing
We will use contact details you give us to deliver promotional information that you request or that we feel may interest you. We will also use this information to gain insights into the needs and interests of our customer base and to evaluate the effectiveness of our marketing activities.
Unless we have obtained your contact details in the course of an online sale or negotiation for a sale and you have indicated you are happy to receive our marketing communications, we will only contact you for marketing purposes by email and/or SMS if you have consented to this.
When we use your data for our direct marketing purposes we do so for our legitimate interests in promoting our business and the goods we offer.
We keep information for direct marketing purposes for as long as you continue to be interested in receiving our marketing communications.
You can tell us to stop using your details for marketing purposes by contacting us (see contact details below) and can opt out of email marketing at any time by using our unsubscribe feature.
Where necessary we share this data with our suppliers and service providers.
Otherwise we will not share your information with any third party unless:
- we have your permission,
- we are required to do so by law,
- this is necessary so that we can enforce our terms of use, rights or property or the rights or property of any third party, or
this is necessary in connection with the sale of business or its assets (in which case your details will be disclosed to our advisers and any prospective purchaser’s advisers and will be passed to the new owners).
Information we hold for direct marketing purposes is stored within, and not transferred outside of, the European Economic Area.
How we keep our systems secure
We have security measures in place to protect the loss, misuse and alteration of the information under our control. These security measures include firewalls, data backup procedures and where appropriate, encryption and secure internet transactions. Despite these measures, “perfect security” on the internet does not exist.
Storage of your personal data
We will only keep your personal data for as long as we need to in order to fulfil the relevant purpose(s) it was collected, as set out above in this Notice, and for as long as we are required to keep it for legal purposes. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this policy.
Data subjects’ rights
Data protection laws provide data subjects with the following rights, (subject to certain exemptions and conditions in some cases) to:
- request access to their personal information (commonly known as a “data subject access request”). This enables them to receive a copy of the personal information we hold about them and to check that we are lawfully processing it;
- request correction of the personal information that we hold about them. This enables them to have any incomplete or inaccurate information we hold about them corrected;
- request erasure of their personal information. This enables them to ask us to delete or remove personal information where there is no good reason for us continuing to process it. Data subjects also have the right to ask us to delete or remove their personal information where they have exercised their right to object to processing (see below);
- request the restriction of processing of their personal information. This enables them to ask us to suspend the processing of personal information about them, for example if they want us to establish its accuracy or the reason for processing it;
- request a copy of their personal information which they have provided to us, in a structured, commonly used and machine-readable format and the right to transfer it, or to require us to transfer it directly, to another controller; and
- complain to the supervisory authority, which in the United Kingdom is the Information Commissioner’s Office.
Data subjects also have the right to object to the processing of their personal information where we are relying on a legitimate interest (or those of a third party) and there is something about their particular situation which makes them want to object to processing on this ground. They also have the right to object where we are processing their personal information for direct marketing purposes.
Data subjects will not have to pay a fee to access their personal information (or to exercise any of the other rights above). However, we may charge a reasonable fee if their request for access is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances.
We may need to request specific information from the data subject to help us confirm their identity and ensure their right to access the information (or to exercise any of their other rights). This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it.
Contacting us
If you have any queries, comments or requests regarding this Policy, or you would like to exercise any of your rights as a data subject set out above, you can contact our Data Protection Officer in the following ways:
- by email to info@jojoboutique.co.uk
- by telephone at 01444 413551
- by post to JoJoBoutique Ltd., 1 Bank Building, 45 High Street, Cuckfield, West Sussex RH17 5HR.