Privacy Policy

1. Who we are

This website, jajuns.co.uk, is run by JAJUNS LTD, a company registered in England and Wales under company number 17475881, with its registered address at 76-78 Paul Street, London, England, EC2A 4NE. We sell hand garden tools, accessories and gift sets online under the name Jajuns.

JAJUNS LTD is the controller of the personal data described in this policy. We follow the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

For any privacy question or request, email [email protected], call +44 7842 318406 or write to us at the address above.

2. Data we collect

When you place an order

• Your full name, email address and phone number.
• Delivery address, town or city and postcode.
• The items you order, quantities, prices, delivery charge and order number.
• Any order comment you add, such as a safe place to leave a parcel.
• The text of a gift card message, if you write one. This may include the name of the person receiving the gift.

When you pay

Card and other payment details are entered on, and processed by, our payment provider. We do not receive or store your full card number or security code. We receive confirmation that a payment succeeded, a transaction reference, the amount and, in some cases, the card type and last four digits.

When you email or call us

Your email address or phone number, the content of your messages and any details you choose to share, for example photos of a tool for a return.

When you browse the site

Our web host and font provider receive standard technical data, such as your IP address, browser type and the pages requested, so the site can be delivered. Your cart is kept only in the memory of the open page and is not saved to your device or our servers.

3. Purposes and legal bases

Where we rely on legitimate interests, we have balanced our interests against yours and you can object at any time (see section 9).

4. Who we share data with

We never sell your personal data. We share it only with service providers who need it to do their job for us, under written contracts that require them to protect it:

• Payment provider — to take and refund payments and screen for fraud.
• Courier and delivery companies — your name, delivery address, postcode and phone number so they can deliver standard parcels and bulky items and contact you about the delivery slot.
• Email and hosting providers — to host the website and send and store our email correspondence.
• Accountants and professional advisers — where needed for bookkeeping, tax and legal advice.
• Public authorities — such as HMRC or the police, only when the law requires it.

A gift card message is seen only by our team when preparing the order and by the recipient. It is not passed to couriers.

5. International transfers

Some of our providers, for example payment, email or hosting services, may process data outside the UK. When that happens we make sure the transfer is protected by UK adequacy regulations, or by the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with any extra measures needed. You can ask us for details of these safeguards.

6. How long we keep data

• Order, payment and delivery records — 6 years from the end of the financial year of the order, as required for tax and accounting.
• Gift card messages — 90 days after delivery, in case there is a query about the parcel, then deleted.
• Order comments — kept with the order record.
• Email correspondence — 2 years from our last message, or longer if it relates to an open claim or return.
• Marketing consent — until you unsubscribe, plus a short suppression record so we don't email you again.

7. Security

The site is served over an encrypted HTTPS connection. Access to order data is limited to the people who need it, accounts are protected with strong passwords and two-factor authentication where available, and our providers are chosen for their security standards. No system is perfectly secure, but if a breach is likely to put you at risk, we will tell you and the ICO as the law requires.

8. Cookies

This website does not use advertising, analytics or tracking cookies, and it does not store your cart in cookies or local storage. Fonts are loaded from Google Fonts, which receives your IP address in order to deliver them. Our payment provider may set strictly necessary cookies on its own pages to process payments securely and prevent fraud; these do not need consent. If we ever add optional cookies, we will ask for your consent first and update this policy.

9. Your rights

Under UK GDPR you have the right to:

• Access — get a copy of the personal data we hold about you.
• Rectification — have inaccurate or incomplete data corrected.
• Erasure — ask us to delete your data where we no longer have a reason to keep it.
• Restriction — ask us to pause using your data while a concern is resolved.
• Portability — receive data you gave us in a common, machine-readable format, or have it sent to another organisation.
• Objection — object to processing based on legitimate interests, and to direct marketing at any time.
• Withdraw consent — where we rely on your consent.

To use any of these rights, email [email protected]. We will reply within one month, and there is normally no charge. We may ask you to confirm your identity before acting on a request.

10. Withdrawing consent

If you have agreed to receive emails from us, you can withdraw that consent at any time by using the unsubscribe link in any email or by writing to [email protected]. Withdrawing consent does not affect processing that took place before you withdrew it, and it does not affect order-related emails we need to send to fulfil a purchase.

11. Complaints

If you are unhappy with how we have handled your data, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection: ico.org.uk, telephone 0303 123 1113.

12. Children

Our website and products are intended for adults. You must be 18 or over to place an order, and we do not knowingly collect personal data from children. If you believe a child has given us their data, contact us and we will delete it.

13. Changes to this policy

We may update this policy when our services or the law change. The new version will be posted on this page with a new "Last updated" date, and where a change is significant we will let customers know by email.

Last updated: 5 October 2026.