Privacy policy

JAZÉ ("we", "us") respects your privacy. This policy explains what we collect and why, in line with UK GDPR and the Data Protection Act 2018.

What we collect

Orders: your name, email, delivery address and phone number — to fulfil your order and send updates about it. Payments are processed by Stripe; your card details never touch our servers. Accounts: your email, name, order history, Jazé points and referral activity. Marketing: your email, only if you opt in — you can unsubscribe at any time by replying to any of our emails or contacting us, and we will remove you promptly. Stock alerts and reviews: the email or name you choose to give us.

What we never do

We never sell your data. We share it only with the services that run the shop: Stripe (payments), our hosting provider (Vercel), our database provider, and our email provider — each under their own GDPR-compliant terms.

Cookies & local storage

We use a session cookie to keep you signed in, and your browser's local storage for your bag, wishlist and currency preference. We do not use third-party advertising cookies.

Privacy-friendly visitor analytics

When analytics is enabled, we record the page visited, referring website, campaign tags, approximate country and device category. To count repeat page views during one day, our server combines the connection IP address and browser user-agent with a secret, rotating daily value. We store only the resulting pseudonymous identifier, not the raw IP address. Raw page-view records are deleted after 90 days. We use this information under our legitimate interests to understand shop performance, prevent abuse and improve the site; it is not used for advertising profiles or shared with advertising networks.

Processors and international transfers

Vercel hosts and delivers the website, our managed database provider stores shop records, Stripe processes payments, and our configured email provider delivers service and opted-in marketing messages. These providers process only the information needed to provide their service. Some processing may take place outside the UK under the provider's applicable UK transfer safeguards and contractual terms.

How long we keep information

Order and accounting records are retained for 6 years where required for UK tax and legal obligations. Raw visitor analytics are retained for 90 days. Expired password-reset links, rate-limit records and temporary security approvals are automatically removed. Other account information is kept while the account is active or until a valid deletion request, subject to records we must retain by law.

Your rights

You can request a copy of your data, correction, or deletion at any time by contacting us (see the Contact page). We keep order records for 6 years for UK tax purposes.

Last updated: July 2026