Privacy Policy

About this privacy policy01

This privacy framework applies solely to jesthaven.shop, orders processed through it, and incoming correspondence. It does not govern external web destinations reached via outgoing hyperlinks, which maintain distinct data practices.

Data controller and designated contact points02

The designated controller is JestHaven Appliances Ltd., based at 5 Bond Street, London, W5 5AP, United Kingdom. Data protection requests should be submitted to [email protected] or communicated by telephone to +44 20 4832 5984.

Merchant

JestHaven Appliances Ltd.

Registered address

5 Bond Street, London, W5 5AP, United Kingdom

Email

[email protected]

Phone

+44 20 4832 5984

Categories of personal information collected03

We restrict our data intake strictly to what is necessary for each explicit purpose detailed below.

3.1 Information you provide directly

Customer name, consignment address, email coordinates, and contact telephone number collected during purchase, as well as the substance of written inquiries or product critiques. These records remain archived for the statutory fiscal period, with dialogue files retained for up to 3 years from the most recent contact.

3.2 Payment and transaction data

Order references, overlay variants requested, invoice totals, selected settlement channel, and dispatch progress. Payment card credentials are never collected or archived on this website. Records remain preserved throughout statutory accounting terms.

3.3 Automatically collected information

Network IP identifiers, browser parameters, terminal types, visited URLs, referring pages, and access timestamps documented by the hosting server and designated cookies. These remain stored for 30 days within server records and up to 14 months within consolidated metrics.

3.4 Marketing and advertising data

The marketing placement, advertisement, or referral link guiding your arrival, retained solely to establish acquisition attribution for a term not exceeding 90 days.

3.5 Information supplied by external fulfillment partners

Dispatch notifications provided by courier services and payment verifications transmitted by our transaction partners, reconciled against your specific order reference.

3.6 Children

This website is not configured for or addressed to individuals under 18. We do not knowingly retain information concerning minors; parents or guardians may request immediate removal by writing to [email protected].

Mandatory particulars required for processing04

Full name, destination address, email, and phone contact are indispensable for shipping your cosmetic overlay and providing transit notices. Without these entries, fulfillment cannot occur. Additional details remain entirely discretionary.

Intended applications of collected records05

• To prepare, dispatch, and document your cosmetic order, as well as manage 14-day return protocols and relevant refunds.
• To answer incoming communications and transmit transit notifications via email or short text message.
• To maintain site stability, identify fraudulent checkout attempts, and analyze general site usage patterns.
• To distribute informational announcements only when formally requested; each dispatch contains a functional opt-out mechanism.
• To fulfill mandatory statutory criteria, notably standard corporate book-keeping obligations.

Circumstances governing data disclosure06

We do not trade or sell personal records. Information is disclosed solely to the operational providers listed below, each bound by formal processing agreements under our instruction.

6.1 Payment processing

The selected transaction intermediary receives only the necessary details to authorize and reconcile the monetary transfer.

6.2 Shipping and fulfilment partners

The appointed logistics carrier receives recipient names, delivery coordinates, and contact telephone numbers to ensure consignment routing and transit coordination.

6.3 Service providers

Infrastructure hosting services, automated email conduits, and customer support databases process operational data strictly on our behalf.

6.4 Advertising and analytics partners

Analytical and commercial cookies, loaded solely with affirmative consent, share behavioral figures with third-party networks in line with our Cookie Policy.

6.5 Legal and regulatory disclosures

We disclose records when legally compelled to do so or where required to assert our rights during formal transaction disputes.

6.6 Business transfers

In the event of a corporate transfer or corporate reorganization, customer registers pass to the acquiring entity under equivalent data protections.

International data transfers07

External processors may manage files outside United Kingdom. Under such circumstances, transfers rely on established adequacy findings or standard contractual clauses to preserve baseline data safeguards.

Your rights and choices08

Pursuant to UK GDPR and the Data Protection Act 2018, you retain data subject rights.

8.1 Inspection, amendment, deletion, and portability

You may request visibility into your archived data, correct inaccuracies, seek erasure, acquire digital copies in standard file types, limit processing, or retract consent without affecting earlier lawful handling.

8.2 Marketing choices

Every marketing transmission includes a direct opt-out link. Analytical and advertising scripts may likewise be disabled via the consent controls at your discretion.

8.3 Exercising your rights

Submit requests to [email protected]. We may request identity verification and will reply within 30 days. You also retain the right to submit a grievance to the competent data supervisor in United Kingdom.

Data security09

All platform traffic operates over HTTPS encryption. Transaction records remain stored within restricted-access infrastructure accessible solely to authorized staff and vetted partners. Card information is neither collected nor archived locally.

Data retention10

Order documentation and fiscal invoices are retained for mandatory legal durations before permanent deletion. Customer correspondence persists for up to 3 years from the latest interaction, raw access logs for 30 days, and aggregated statistics for up to 14 months. Direct marketing permissions remain valid until revoked.

Third-party websites and services11

Third-party links directing to payment processors, social platforms, or external utilities lead to independent sites operating distinct privacy policies, for which we assume no responsibility.

Changes to this policy12

We revise these provisions whenever procedural or legal requirements shift. The active revision remains visible on this page, accompanied by the latest revision date displayed above.