Privacy Policy

This policy explains what personal information JeezMart collects, why, and what rights you have over it. We've tried to write it in plain English rather than dense legal boilerplate, while still being precise about what we actually do.

Who We Are

JeezMart ("we", "us", "our") operates this website. Our registered company name is JEEZ LIMITED, a private limited company. Our address is Unit 1, 70 Woodhead Road, South Nitshill Ind Estate, G53 7NN. You can contact us at Support.jeezmart@gmail.com.

We are the data controller for the personal information described in this policy.

Personal Data We Collect

We only collect what we need to run the store, fulfil orders, and support our trade customers. Specifically:

• Account information: if you create an account, we collect your full name, email address, and password, which is hashed, so we never store or can see your password in plain text. If you sign in with Google, we receive your email address, name, profile photo, and Google account ID via our authentication provider.
• Address book: if you save one or more delivery addresses to your account, we hold your full name, street address, town or county, postcode, and phone number.
• Order information: for every order, whether placed as a guest or while logged in, we collect your email address, name, delivery address, phone number, courier tracking number, and, optionally, a TikTok affiliate referral code if you arrived via an affiliate link.
• Trade and dropshipper account applications: if you apply for a trade or dropshipper account, we collect the account information above plus your company name, company registration number, VAT number, business email, business website, business address, and any notes you provide in the free-text field of the application.
• Support chat: if you contact us through our support chat, we retain the text of your messages and any files you attach. This data is not kept indefinitely; it is subject to automatic deletion under our internal retention process.
• Reviews: if you leave a product review, we collect your star rating and review text, linked to a verified order. Reviews are moderated before they are published.
• Payment-related information: we do not collect or store your card number, expiry date, or CVV; see the Payments section below for how this works. The only payment-related data we hold internally is a payment reference ID from our payment processor (Stripe), the payment status, and the order amount.

We do not collect any other categories of personal data. In particular, we do not run advertising trackers, analytics cookies, or any tool that profiles you for marketing purposes. See our Cookie Policy for details.

Why We Use Personal Data, And Our Legal Basis

• Creating and managing your account: performance of a contract with you.
• Processing and delivering your order, including your address book: performance of a contract with you.
• Processing payment, including your payment reference and order amount: performance of a contract with you.
• Assessing trade and dropshipper applications: performance of a contract with you and our legitimate interest in vetting business customers.
• Responding to support queries: performance of a contract with you and our legitimate interest in providing customer service.
• Publishing moderated reviews: legitimate interest, with your consent to publish since you submit the review voluntarily.
• Complying with tax, accounting, and consumer-protection law: legal obligation.
• Preventing fraud: legitimate interest.

We do not currently use your personal data for direct marketing, and we do not currently operate a mailing list opt-in. If this changes in the future, we will update this policy and seek your consent first where the law requires it.

Payments & Card Security

We use Stripe to process payments, via Stripe's own hosted card fields (Stripe Elements). When you enter your card details at checkout, they are typed directly into fields controlled by Stripe and are sent directly to Stripe's servers. Your full card number and CVV never pass through, or get stored on, our own servers or database.

This significantly limits our own exposure to card-data compliance requirements, but to be precise about what we can and can't claim: PCI-DSS compliance is a certification held by Stripe for its own systems, not a blanket compliance status that we can claim on our own behalf without our own attestation. What we can truthfully say is that we do not store, and cannot access, your card details; they are handled entirely by Stripe.

For approved trade and dropshipper accounts, we also operate an internal store credit and wallet system. This is our own internal ledger, not a card payment method, and balances are recorded in our database in the same way as any other order data.

We do not use PayPal or any other payment gateway.

Who We Share Your Data With

We share personal data only with the following service providers, and only to the extent necessary for them to provide their service to us:

• Stripe, for payment processing. Your card details are sent directly by you, not via us, along with your email and order amount.
• Supabase, for our database, file storage, and the Google sign-in bridge, covering your account, order, and address data, plus product and support-chat attachment files.
• Brevo and Resend, for transactional emails such as order confirmations, dispatch notifications, verification, and password reset messages.
• Evri and other reputable couriers, for arranging delivery of your order using your name, delivery address, and phone number.
• Google, for "Sign in with Google" authentication, covering your email, name, profile photo, and Google account ID.
• Vercel, for website hosting, covering standard server and hosting log data such as IP address and request timestamps.

We do not sell your personal data to anyone. We do not share it with data brokers, advertisers, or analytics companies, because we don't use any.

If we ever add a new type of third-party tool that processes personal data, for example an analytics or marketing platform, we will update this policy, and where the law requires consent, we will ask for it before that tool goes live.

International Transfers

Some of the service providers listed above may store or process data on servers located outside the UK. Where this happens, those providers are responsible for ensuring appropriate safeguards are in place under UK data protection law, such as the use of standard contractual clauses or equivalent mechanisms, as part of their own compliance obligations to us as their customer.

How Long We Keep Data

Support chat messages and attachments are deleted automatically after a set period as part of our internal retention process. Account, order, and address data is kept for as long as your account is active and, after that, for as long as necessary to meet our legal obligations, for example tax and accounting record-keeping requirements, or to resolve disputes.

Cookies & Similar Technologies

We use only what's strictly necessary to run the site: a login session cookie and browser local storage for your shopping cart. We do not use analytics, advertising, or marketing cookies, and we don't currently need a cookie consent banner as a result. Full details are in our Cookie Policy.

Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you;
• Rectify inaccurate data;
• Erasure (the "right to be forgotten"), in certain circumstances;
• Restrict or object to certain processing;
• Data portability, in certain circumstances.

We don't yet have a self-service tool for downloading your data or deleting your account automatically. Instead, contact us at Support.jeezmart@gmail.com and we will handle your request manually, within the statutory timeframe of one month (30 days) required under UK GDPR.

We also do not currently operate a marketing mailing list, so there is no unsubscribe mechanism to describe. If that changes, this section will be updated alongside the introduction of a proper opt-in and opt-out process.

You also have the right to complain to the UK's data protection regulator; see How To Complain below.

Children

JeezMart is a general retail website and is not directed at, or intended for use by, children. We do not knowingly collect personal data from children.

How To Complain

If you're unhappy with how we've handled your personal data, please contact us first at Support.jeezmart@gmail.com so we can try to put things right. We aim to acknowledge any data-protection complaint within 30 days.

You also have the right to lodge a complaint directly with the UK's independent regulator, the Information Commissioner's Office (ICO), at www.ico.org.uk or by calling 0303 123 1113.

ICO Registration

As the data controller for this website, JeezMart is required to maintain registration with the UK's Information Commissioner's Office. Our registration status can be verified at any time at ico.org.uk.

Changes To This Policy

We may update this policy from time to time, for example if we add a new service provider, start using marketing cookies, or introduce self-service data tools. We'll update the "Last updated" date at the top when we do, and where the law requires your consent for a change, such as adding non-essential cookies, we'll ask for it first rather than relying on this notice alone.

Contact Us

JEEZ LIMITED
Unit 1, 70 Woodhead Road
South Nitshill Ind Estate, G53 7NN

Email: Support.jeezmart@gmail.com