Privacy Policy

Data Controller

Janine Tonkin is the data controller (i.e., the company responsible for collecting and controlling your data) and we control how it is used. We are responsible for ensuring your data is held securely and that your rights as a user are respected. We are committed to protecting the personal data of our visitors. Janine Tonkin (collectively "Merchant Store Name," "we," "us," "data controller") respects your privacy. We ensure that your privacy is protected when using our website or when placing online orders with us. Janine Tonkin provides you with goods and services and is the data controller of the personal data that you provide when you order goods.

The Data Protection Officer (DPO) for Janine Tonkin can be contacted via the contact form that can be found at the bottom of this page.

This Privacy Policy describes how your personal information is collected, used, and shared when you visit or make a purchase from janinetonkin.com (the “site”) and janine-tonkin.sumupstore.com (the "site").

We do not market our products, nor do we target any individual product, at anyone under 18. We cannot identify individuals who are 18 or under within our database.

What Is This Privacy Policy?

This privacy policy provides information on how Janine Tonkin collects personal data through your use of our website, including any data you may provide when you purchase a product, sign up to receive marketing information from us, participate in a competition, use an application, or submit an event enquiry form.

The data we collect is used to receive your order, process your payment, and send your purchase to you. We may also deliver marketing communications, personalise your visit to our site, and provide assistance via our support teams.

If you have any queries regarding this privacy policy or any questions about exercising your rights in respect of your personal data, please contact us at [email protected].

Lawful Basis for Processing Your Data

We must have a valid reason to use your data. There are four primary reasons for our use of your data: contractual obligations, legal obligations, consent which you provide to us, and our legitimate business interests.

If you feel we’ve not handled something correctly, you have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). However, we would appreciate the chance to deal with your concerns before you approach the ICO, so please contact us first at [email protected].

Changes to Your Circumstances

It is very important that the personal data we hold about you is accurate and up to date. Please keep us informed if your personal data changes.

Data Retention

We keep your personal data for a limited period. The specifics of these retentions and the retention length will vary by customer. After this period, your data will be permanently erased or otherwise rendered anonymous. This action cannot be undone.

When you place an order through the site, we will maintain your order information for as long as necessary to carry out our services to you or for as long as we are required by relevant laws. After this period, your personal data will be deleted.

Data Types & How It Is Used

Below is a summary of the personal data we collect, why we collect it, and how we use it. If it is not clear, please email us for clarification.

ID Data, Order Data, and PR Data (contact details)- Why and what we do with it:  

 - Your full name, address, email address, phone number, and date of birth (should you choose to provide it) when you register for an account with Janine Tonkin.  

- We register your account with us and store your details so that you can log in when you visit again.  

- We check whether you’re old enough to use our website.  

- We use these details to process your order. Without your address, we cannot perform our contract with you and send you our products.  

- We may send you status updates regarding your order

– We believe communication is key to customer service. 

 - We may send you information about our products and offers if you opt in to receive updates – you can opt out at any time.

Personal Data We Collect

When you make a purchase or attempt to make a purchase through the site, we collect certain information from you, including your name, billing address, shipping address, payment information (including credit card numbers), email address, and phone number. We refer to this information as "Order Information."

When you visit the site, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse the site, we collect information about the individual web pages or products that you view, the websites or search terms that referred you to the site, and information about how you interact with the site. We refer to this automatically-collected information as "Device Information."

We collect Device Information using the following technologies:- Cookies: Data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies and how to disable them, visit allaboutcookies.org.- Log files: Track actions occurring on the site and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.- Web beacons, tags, and pixels: Electronic files used to record information about how you browse the site.

How Do We Use Your Personal Information?We use the Order Information that we collect generally to fulfill any orders placed through the site (including processing your payment information, arranging for shipping, and providing you with invoices and/or order confirmations). Additionally, we use this Order Information to:- Communicate with you.- Screen orders for potential risk or fraud.- When in line with the preferences you have shared with us, provide you with information or advertising related to our products or services.

We process your information to fulfill contracts we might have with you (for example, if you make an order through the site) or otherwise to pursue our legitimate business interests listed above.

We use the Device Information that we collect to help us screen for potential risk and fraud (in particular, your IP address) and to improve and optimize our site (for example, by generating analytics about how our customers browse and interact with the site and to assess the success of our marketing and advertising campaigns).

Contract Data and Transaction Data (contact history)- Why and what we do with it:   - We keep records of what you’ve said to us, whether over the phone, by email, or on instant chat (and even on social media from time to time), as well as your ID Data and Contract Data.  - This allows us to provide better customer support.  - We need this to address any comments or questions you may have and to contact you in response.  - We also use this information to understand what we are doing well and where we can improve, train our staff, enhance our website, and make our products the best they can be.

Unique Data (purchase history and saved items)- Why and what we do with it:   - We keep an eye on details of your previous orders, your browsing history on our website, and products you had or have in your basket.  - This helps us provide customer support and handle returns/refunds.  - To figure out what products/offers you might be interested in and send you information on these.  - So that we can display relevant adverts when you’re browsing third-party websites and social media.

Informational Data (information about your device and how you use our website)- Why and what we do with it:   - Information about your computer, tablet, or phone (including IP address, browser type, operating system software type, and device type).  - To figure out what products/offers you might be interested in and send you information on these.  - To enable you to store your preferences on your devices, so you can log in easily.  - To make improvements to our website and ensure we provide a unique and tailored experience for our customers.

PR Data and ID Data (responses to surveys, competitions, and promotions)- Why and what we do with it:   - Your name, email address, and any other information you provide when you participate in competitions or events we operate on our website, in-store, or via any other media (including through our social media channels).  - If we can’t use your details when you enter our competitions, then we can’t complete our contract with you, and you won’t be able to win our great prizes!  - We will use the data from the surveys you complete to improve our website and products.  - If you submit an event enquiry, we will need to contact you to discuss it.

Consent and Legal Basis for ProcessingGenerally, we do not rely on consent as a legal basis for processing your personal data, although we will obtain your consent before sending third-party direct marketing communications via email or text message. You have the right to withdraw consent to marketing at any time by contacting us.

You are not obligated to provide any personal information to us, but if you do not, you may not be able to purchase our products via the website or receive the customer service that we aim to provide.

We also anonymize and aggregate personal information (so that it does not identify you) for purposes including testing our IT systems, research, data analysis, improving our website, and developing new products. We also share this information with third parties.

We will only use your personal data when the law allows us to.

Data Sharing

We do not, and will not, sell any of your personal data to any third party. However, we may share your data with the following categories of companies as an essential part of being able to provide our services to you:- Companies that help us complete your order: Payment service providers, delivery companies.- Professional service providers: Marketing agencies and website hosts who help us deliver our services to you.- Legal advisers, bankers, auditors, and insurers: Our regulators, including HM Revenue & Customs, and any third parties to whom we choose to sell or transfer any part of our business or assets.

Sharing Your Personal Information

We share your Personal Information with third parties to help us use your Personal Information as described above. For example, we use SumUp to power our online store. We also use Google Analytics to help us understand how our customers use the site. You can read more about how Google uses your Personal Information [here](https://policies.google.com/privacy). You can opt-out of Google Analytics [here](https://tools.google.com/dlpage/gaoptout).

We may share information with service providers under contract who help with parts of our business operations. These service providers only use your information in connection with the services they perform for us and not for their own or any additional benefit.

Finally, we may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant, or other lawful request for information we receive, or to otherwise protect our rights.

Transferring Information Internationally

We may transfer information collected about you to third parties acting on our behalf that may be located in countries outside of the European Economic Area (EEA) or countries deemed by the European Commission to have satisfactory data protection. These other countries may not offer the same level of protection for the information collected about you. However, we will always continue to collect, store, and use your information in accordance with this Privacy Policy and the applicable data protection legislation. We will ensure we share data only with organizations that satisfy an adequate level of data protection in line with applicable data protection legislation and that satisfactory contractual agreements are in place with any such parties.

Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. We also limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know. They will only process your personal data on Janine Tonkin's instructions and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

Your Data Rights

Under law, you are entitled to the following rights:- The right to withdraw consent to marketing.- The right to object to our processing of your personal data versus our interests.- The right to data portability to transfer your data to another party.- The right to request the deletion of your personal data in some cases.- The right to request a copy of the personal data that we hold about you.- The right related to decision making and how bespoke suggestions are made to you. We use your data to make tailored recommendations to you. We do not use automated decision-making that would have a potentially damaging effect on you.

You may at any time withdraw consent where we are relying on consent to process your personal data. If you wish to exercise any of the rights set out above, please contact us using the contact form at the bottom of this page.

Your Rights Under GDPR

If GDPR is applicable to you, you have the right to access personal information we hold about you and to ask that your personal information be amended, updated, or deleted. You also have the right to ask us to cease processing your data, object to profiling activities and solely automated processing, request that we restrict the processing of your personal data, and/or request that your data be transferred to a third party (data portability) under certain circumstances. If you would like to exercise this right, please contact us through the contact information below.

You have the right to withdraw your consent to the processing of your data at any time if the processing is based on your consent and can do so by contacting the DPO at the address provided.

If you would like to exercise any of your rights set out above, you can contact us using the contact form at the bottom of this page. You also have a right to lodge a complaint with the relevant data protection authority. The relevant authority for each country can be found on the European Commission website.

CCPA Compliance

To offer you Sum Up's payment options, we will pass to Sum Up certain aspects of your personal information, such as contact and order details, and shipping information which you will have also provided when creating your account with them. General information on Sum Up's privacy policy can be found [here](https://www.sumup.com/privacy/). Your personal data is handled in accordance with applicable data protection law and in accordance with the information in Sum Up's privacy policy.

Changes to Privacy Policy

We keep our Privacy Policy under review in order to reflect changes in privacy regulations. This Privacy Policy was last updated on 20/05/2024. We will contact you if we make significant changes to the Privacy Policy. We may update this privacy policy from time to time to reflect, for example, changes to our practices or for other operational, legal, or regulatory reasons.

Contact Us

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us using the contact form at the bottom of this page.