Last updated: 31 July, 2026

Privacy Policy

This policy explains what personal data JJacket.com collects, why we collect it, who we share it with and what you can do about it. It applies to this website, to orders placed through it, and to emails and messages you exchange with our support team.

We have written it to be read rather than skimmed past. If anything here is unclear, email info@jjacket.com and ask.

The Short Version

1. Who Is Responsible for Your Data

JJacket.com is the data controller for the personal data described in this policy. That means we decide why and how it is processed, and we are the party you hold accountable.

2. What We Collect

Data you give us directly

• Identity and contact. Name, email address, phone number, billing address, shipping address.
• Order data. Items ordered, sizes, colours, order value, order history, discount codes used.
• Custom order data. Body measurements you send us for made-to-measure pieces.
• Account data. Username, encrypted password, saved addresses, wishlist contents.
• Support correspondence. Emails, photographs you send with a return or damage claim, and notes from phone calls.
• Marketing preferences. Whether you have subscribed to our emails and what you have opened or clicked.
• Reviews and posted content. Product reviews, ratings and any images you submit.

Data collected automatically when you browse

• Technical data. IP address, browser type and version, device type, operating system, screen size, language and time zone.
• Usage data. Pages viewed, time on page, referring URL, search terms used on the site, items added to cart or abandoned.
• Cookie data. Identifiers set by cookies and similar technologies — see the Cookie Policy for the full list and how to control them.

Data we receive from others

• Payment processors. Authorization results, the last four digits of your card, card type and fraud-risk score. Never the full number.
• Delivery status, tracking scans, delivery exceptions and proof of delivery.
• Advertising and analytics platforms. Aggregated campaign and audience data, where you have consented to those cookies.

What we do not collect: we do not ask for and do not want your government ID number, your social security number, your full card number or any special category data such as health, religious belief or political opinion. If you send any of this to us unprompted, we will delete it.

3. Why We Use It, and the Legal Basis

Where we rely on legitimate interest, we have assessed that our interest does not override your rights. You can object to that processing at any time using the contact details above.

4. Cookies and Tracking

We use cookies and similar technologies. Cookies that are strictly necessary for the cart, checkout and login run automatically because the site cannot function without them. Analytics, advertising and personalization cookies run only after you consent through the cookie banner.

You can change or withdraw consent at any time through the cookie settings link in the site footer. The full breakdown of what each cookie does and how long it lasts is in the Cookie Policy.

5. Who We Share It With

We share personal data only with organizations that need it to deliver a service to you or to us, and only the minimum they need. Every one of them is bound by contract to protect it and is prohibited from using it for their own purposes.

We do not sell your personal data for money, and we do not give or rent your details to unrelated third parties for their own marketing.

If the business is sold or reorganized, customer data may transfer to the buyer. Your rights under this policy travel with it and we would notify you before it happened.

6. Sending Data Across Borders

We are a business with a US presence and a fulfilment operation in the United Arab Emirates, and some of our service providers are in the United States, Europe and elsewhere. Your data therefore moves between countries.

Where data leaves the UK or the European Economic Area, we rely on one of the following:

• An adequacy decision covering the destination country.
• Standard Contractual Clauses approved by the European Commission or the UK equivalent, plus a transfer risk assessment.
• Your explicit consent, where neither of the above applies.

You can request a copy of the safeguards that apply to a specific transfer by emailing info@jjacket.com.

7. How Long We Keep It

Once a period expires, data is deleted or irreversibly anonymised.

8. How We Protect It

• The site runs over HTTPS with a valid TLS certificate on every page, not just checkout.
• Card data is entered directly into a PCI-DSS compliant processor’s form. It does not pass through or rest on our servers.
• Passwords are stored hashed, never in readable form.
• Access to customer records is limited to staff who need it, under individual logins.
• Platform, plugin and server software is patched on a regular schedule.

No system is perfectly secure and anyone claiming otherwise is selling something. What we can commit to is that if a breach occurs that is likely to result in a risk to your rights, we will notify the relevant supervisory authority within 72 hours and notify you directly without undue delay.

9. Your Rights

If you are in the UK, EU or European Economic Area

• Get a copy of the personal data we hold about you.
• Have inaccurate data corrected.
• Have your data deleted, where we have no overriding legal reason to keep it.
• Have us pause processing while a dispute is resolved.
• Receive your data in a machine-readable format, or have it sent to another controller.
• Object to processing based on legitimate interest, and to direct marketing at any time.
• Withdraw consent. At any time, without affecting processing already carried out.
• To your national supervisory authority. In the UK that is the Information Commissioner’s Office at ico.org.uk.

If you are in California

Under the CCPA as amended by the CPRA you have the right to know what personal information we collect and why, to request deletion, to request correction, to opt out of sale or sharing, to limit the use of sensitive personal information, and not to be discriminated against for exercising any of these rights.

Do Not Sell or Share My Personal Information. We do not sell personal information for money. However, advertising and analytics cookies may constitute “sharing” for cross-context behavioural advertising under California law. You can opt out by rejecting advertising cookies in the cookie banner, by using the cookie settings link in the footer, or by emailing info@jjacket.com with “Do Not Sell or Share” in the subject line. We also honour Global Privacy Control signals sent by your browser.

If you are in another US state

Residents of states including Colorado, Connecticut, Virginia, Utah, Texas, Oregon and Montana have comparable rights of access, correction, deletion, portability and opt-out of targeted advertising. Use the same contact route and we will apply whichever standard gives you the most protection.

How to exercise any of these rights

Email info@jjacket.com with Data Request in the subject line and tell us what you want. We may ask you to confirm your identity before we act, because handing your data to the wrong person would be a worse outcome than a slow reply. There is no charge unless a request is manifestly excessive or repetitive.

We respond within 30 days. If a request is complex we may extend that by a further 30 days and will tell you why.

10. Marketing Emails

We only send marketing email to people who asked for it. Every email carries a working unsubscribe link, and unsubscribing takes effect within 72 hours.

Unsubscribing from marketing does not stop transactional messages such as order confirmations, dispatch notices and refund confirmations. Those are part of supplying your order and you cannot opt out of them while an order is live.

11. Children

This site is not intended for children. We do not knowingly collect data from anyone under 16, and you must be 18 or the age of majority where you live to place an order.

If you believe a child has given us personal data, email info@jjacket.com and we will delete it promptly.

12. Automated Decision-Making

We use automated fraud screening at checkout, provided by our payment processor. It scores transactions on factors such as address mismatch, unusual order patterns and known-fraud indicators, and it can decline a payment.

It cannot take money from you and it cannot do anything worse than refuse an order. If your order is declined and you believe it was screened incorrectly, email us and a person will review it manually.

13. Links to Other Sites

Where we link to a third-party website, this policy stops at our boundary. We do not control their data practices and we are not responsible for them. Read their privacy policy before handing over anything.

14. Changes to This Policy

We update this policy when our practices, our providers or the law change. The date at the top shows the current version. Material changes are announced on the site and, where the change is significant, by email to subscribers.

15. Contact and Complaints

Come to us first. If you are not satisfied with how we have handled a privacy matter, you can complain to your national data protection authority — in the UK, the Information Commissioner’s Office; in the EU, your local supervisory authority; in California, the California Privacy Protection Agency.

Frequently Asked Questions