This policy explains what personal data JJacket.com collects, why we collect it, who we share it with and what you can do about it. It applies to this website, to orders placed through it, and to emails and messages you exchange with our support team.

We have written it to be read rather than skimmed past. If anything here is unclear, email info@jjacket.com and ask.

The Short Version

• We collect what we need to take your order, ship it, support you afterwards and keep the business lawful. Not more.
• We never see or store your full card number.
• We do not sell your personal data for money.
• Advertising and analytics cookies run only if you consent, and you can withdraw consent at any time.
• You can ask for a copy of your data, ask us to correct it, or ask us to delete it.

1. Who Is Responsible for Your Data

JJacket.com is the data controller for the personal data described in this policy. That means we decide why and how it is processed, and we are the party you hold accountable.

Controller	JJacket.com
Privacy contact	info@jjacket.com (subject line: Data Request)
Phone	+1-510-833-7711
US address	625 Center Street, Oregon City, OR 97045, United States
UAE sales office	Warba Center, 308, Deira, Dubai, United Arab Emirates
Response time	Within 30 days of a verified request

 

2. What We Collect

Data you give us directly

• Identity and contact. Name, email address, phone number, billing address, shipping address.
• Order data. Items ordered, sizes, colours, order value, order history, discount codes used.
• Custom order data. Body measurements you send us for made-to-measure pieces.
• Account data. Username, encrypted password, saved addresses, wishlist contents.
• Support correspondence. Emails, photographs you send with a return or damage claim, and notes from phone calls.
• Marketing preferences. Whether you have subscribed to our emails and what you have opened or clicked.
• Reviews and posted content. Product reviews, ratings and any images you submit.

Data collected automatically when you browse

• Technical data. IP address, browser type and version, device type, operating system, screen size, language and time zone.
• Usage data. Pages viewed, time on page, referring URL, search terms used on the site, items added to cart or abandoned.
• Cookie data. Identifiers set by cookies and similar technologies — see the Cookie Policy for the full list and how to control them.

Data we receive from others

• Payment processors. Authorization results, the last four digits of your card, card type and fraud-risk score. Never the full number.
• Delivery status, tracking scans, delivery exceptions and proof of delivery.
• Advertising and analytics platforms. Aggregated campaign and audience data, where you have consented to those cookies.

What we do not collect: we do not ask for and do not want your government ID number, your social security number, your full card number or any special category data such as health, religious belief or political opinion. If you send any of this to us unprompted, we will delete it.

3. Why We Use It, and the Legal Basis

What we do with it	Why	Legal basis
Process and dispatch your order	To supply what you bought	Performance of a contract
Take payment and screen for fraud	To get paid and to protect both of us	Contract, and legitimate interest in preventing fraud
Send order, dispatch and delivery emails	To tell you what is happening	Performance of a contract
Handle returns, refunds and warranty claims	To honour our policies	Contract, and legal obligation
Cut a made-to-measure jacket	To use the measurements you gave us	Performance of a contract
Answer support enquiries	To help you	Contract, and legitimate interest
Keep order, payment and tax records	Because the law requires it	Legal obligation
Send marketing emails	To tell you about new pieces	Consent, withdrawable at any time
Analytics and site improvement	To see what is broken and what is working	Consent, via cookie banner
Advertising and retargeting	To reach people likely to want a jacket	Consent, via cookie banner
Publish reviews you submit	To help other buyers decide	Consent, and legitimate interest

 

Where we rely on legitimate interest, we have assessed that our interest does not override your rights. You can object to that processing at any time using the contact details above.

4. Cookies and Tracking

We use cookies and similar technologies. Cookies that are strictly necessary for the cart, checkout and login run automatically because the site cannot function without them. Analytics, advertising and personalization cookies run only after you consent through the cookie banner.

You can change or withdraw consent at any time through the cookie settings link in the site footer. The full breakdown of what each cookie does and how long it lasts is in the Cookie Policy.

5. Who We Share It With

We share personal data only with organizations that need it to deliver a service to you or to us, and only the minimum they need. Every one of them is bound by contract to protect it and is prohibited from using it for their own purposes.

Category	What they receive	Why
Payment processors	Name, billing address, email, order value, card data entered directly on their form	To take payment securely and screen for fraud
Couriers and logistics partners	Name, shipping address, phone number, email, parcel contents description	To deliver your parcel and provide tracking
Customs and import brokers	Name, shipping address, item description, declared value	To clear your parcel and prepay duty
Website and hosting providers	Technical and usage data, stored order records	To run and secure the website
Email and marketing platforms	Name, email address, engagement data	To send transactional and marketing email
Analytics and advertising platforms	Pseudonymous identifiers, usage data, conversion events	Only where you have consented to those cookies
Professional advisers and authorities	Whatever is legally required	Accounting, legal advice, or a lawful request

 

We do not sell your personal data for money, and we do not give or rent your details to unrelated third parties for their own marketing.

If the business is sold or reorganized, customer data may transfer to the buyer. Your rights under this policy travel with it and we would notify you before it happened.

6. Sending Data Across Borders

We are a business with a US presence and a fulfilment operation in the United Arab Emirates, and some of our service providers are in the United States, Europe and elsewhere. Your data therefore moves between countries.

Where data leaves the UK or the European Economic Area, we rely on one of the following:

• An adequacy decision covering the destination country.
• Standard Contractual Clauses approved by the European Commission or the UK equivalent, plus a transfer risk assessment.
• Your explicit consent, where neither of the above applies.

You can request a copy of the safeguards that apply to a specific transfer by emailing info@jjacket.com.

7. How Long We Keep It

Data	Retention period
Order and transaction records	7 years from the order date, for tax and accounting law
Account details	Until you close the account, then 30 days
Custom order measurements	2 years from the order date, so a repeat order can reuse them
Support correspondence	3 years from the last message
Marketing contact details	Until you unsubscribe, then 30 days
Analytics data	Up to 26 months, depending on the platform
Cookie consent records	12 months from the date consent was given
Fraud and chargeback records	7 years, to defend against future claims

 

Once a period expires, data is deleted or irreversibly anonymised.

8. How We Protect It

• The site runs over HTTPS with a valid TLS certificate on every page, not just checkout.
• Card data is entered directly into a PCI-DSS compliant processor’s form. It does not pass through or rest on our servers.
• Passwords are stored hashed, never in readable form.
• Access to customer records is limited to staff who need it, under individual logins.
• Platform, plugin and server software is patched on a regular schedule.

No system is perfectly secure and anyone claiming otherwise is selling something. What we can commit to is that if a breach occurs that is likely to result in a risk to your rights, we will notify the relevant supervisory authority within 72 hours and notify you directly without undue delay.

9. Your Rights

If you are in the UK, EU or European Economic Area

• Get a copy of the personal data we hold about you.
• Have inaccurate data corrected.
• Have your data deleted, where we have no overriding legal reason to keep it.
• Have us pause processing while a dispute is resolved.
• Receive your data in a machine-readable format, or have it sent to another controller.
• Object to processing based on legitimate interest, and to direct marketing at any time.
• Withdraw consent. At any time, without affecting processing already carried out.
• To your national supervisory authority. In the UK that is the Information Commissioner’s Office at ico.org.uk.

If you are in California

Under the CCPA as amended by the CPRA you have the right to know what personal information we collect and why, to request deletion, to request correction, to opt out of sale or sharing, to limit the use of sensitive personal information, and not to be discriminated against for exercising any of these rights.

Do Not Sell or Share My Personal Information. We do not sell personal information for money. However, advertising and analytics cookies may constitute “sharing” for cross-context behavioural advertising under California law. You can opt out by rejecting advertising cookies in the cookie banner, by using the cookie settings link in the footer, or by emailing info@jjacket.com with “Do Not Sell or Share” in the subject line. We also honour Global Privacy Control signals sent by your browser.

If you are in another US state

Residents of states including Colorado, Connecticut, Virginia, Utah, Texas, Oregon and Montana have comparable rights of access, correction, deletion, portability and opt-out of targeted advertising. Use the same contact route and we will apply whichever standard gives you the most protection.

How to exercise any of these rights

Email info@jjacket.com with Data Request in the subject line and tell us what you want. We may ask you to confirm your identity before we act, because handing your data to the wrong person would be a worse outcome than a slow reply. There is no charge unless a request is manifestly excessive or repetitive.

We respond within 30 days. If a request is complex we may extend that by a further 30 days and will tell you why.

10. Marketing Emails

We only send marketing email to people who asked for it. Every email carries a working unsubscribe link, and unsubscribing takes effect within 72 hours.

Unsubscribing from marketing does not stop transactional messages such as order confirmations, dispatch notices and refund confirmations. Those are part of supplying your order and you cannot opt out of them while an order is live.

11. Children

This site is not intended for children. We do not knowingly collect data from anyone under 16, and you must be 18 or the age of majority where you live to place an order.

If you believe a child has given us personal data, email info@jjacket.com and we will delete it promptly.

12. Automated Decision-Making

We use automated fraud screening at checkout, provided by our payment processor. It scores transactions on factors such as address mismatch, unusual order patterns and known-fraud indicators, and it can decline a payment.

It cannot take money from you and it cannot do anything worse than refuse an order. If your order is declined and you believe it was screened incorrectly, email us and a person will review it manually.

13. Links to Other Sites

Where we link to a third-party website, this policy stops at our boundary. We do not control their data practices and we are not responsible for them. Read their privacy policy before handing over anything.

14. Changes to This Policy

We update this policy when our practices, our providers or the law change. The date at the top shows the current version. Material changes are announced on the site and, where the change is significant, by email to subscribers.

15. Contact and Complaints

JJacket.com

Email: info@jjacket.com (subject line: Data Request)

Phone: +1-510-833-7711

US address: 625 Center Street, Oregon City, OR 97045, United States

UAE sales office: Warba Center, 308, Deira, Dubai, United Arab Emirates

Come to us first. If you are not satisfied with how we have handled a privacy matter, you can complain to your national data protection authority — in the UK, the Information Commissioner’s Office; in the EU, your local supervisory authority; in California, the California Privacy Protection Agency.

Frequently Asked Questions

Does JJacket sell my personal information?

We do not sell personal information for money. Advertising and analytics cookies may count as sharing under California law. You can opt out through the cookie banner, the footer settings link, or by emailing info@jjacket.com.

Does JJacket store my card number?

No. Card details go straight to a PCI-DSS compliant payment processor. We receive only the last four digits, the card type and the authorisation result, which is all we need to match a payment to an order.

How do I ask JJacket to delete my data?

Email info@jjacket.com with Data Request in the subject line. We respond within 30 days. Completed order and tax records must be kept for a legally required period and cannot be deleted on request.

Is my data sent outside my country?

Yes. Orders are fulfilled from the United Arab Emirates and some providers sit in the United States and Europe. Transfers out of the UK or EEA rely on adequacy decisions or Standard Contractual Clauses.

How long does JJacket keep my order history?

Seven years from the order date, because tax and accounting law requires it. Your account details are deleted 30 days after you close the account, and marketing details 30 days after you unsubscribe.

Do you honour Global Privacy Control signals?

Yes. If your browser or extension sends a Global Privacy Control signal, we treat it as a valid opt-out of sale and sharing for that browser without you needing to contact us separately.

What happens to the measurements I send for a custom jacket?

They are used to cut your jacket and kept for two years so a repeat order can reuse them. You can ask us to delete them sooner by emailing info@jjacket.com.