Privacy policy

This Privacy Policy explains how billyjc.shop collects, uses, stores, shares and otherwise processes personal information when customers and visitors access our website, communicate with us or purchase products through our online store.

We are committed to handling personal information responsibly and in accordance with applicable privacy and data-protection requirements.

For privacy enquiries or data-protection complaints, contact:

Email: info@billyjc.shop

1. Scope of This Privacy Policy

This Privacy Policy applies to personal information processed in connection with:

• Visits to billyjc.shop;
• Product browsing;
• Customer accounts;
• Orders;
• Payments;
• Delivery;
• Returns;
• Refunds;
• Customer-service communications;
• Marketing communications;
• Website analytics;
• Fraud prevention;
• Security; and
• Other ecommerce operations associated with our store.

2. Information We May Collect

Depending on how you interact with our website, we may collect information including:

Identity Information

• Name;
• Account username where applicable; and
• Other information necessary to identify an order or customer account.

Contact Information

• Email address;
• Delivery address;
• Billing address; and
• Telephone number where provided.

Order Information

• Products purchased;
• Product variations;
• Quantities;
• Order value;
• Order number;
• Order history;
• Returns;
• Refunds; and
• Customer-service history.

Payment and Transaction Information

Payment transactions may be processed by Shopify or independent payment providers.

We may receive transaction-related information such as:

• Payment status;
• Payment method category;
• Transaction identifier;
• Billing information; and
• Fraud-screening results.

We do not necessarily receive or store complete payment-card information where payment data is processed directly by an independent payment provider.

Technical Information

We or our service providers may collect:

• IP address;
• Browser type;
• Device type;
• Operating system;
• Approximate location derived from IP information;
• Device identifiers;
• Website activity;
• Referring website;
• Session information; and
• Security-related information.

Customer Communications

When you contact us, we may collect:

• Your email address;
• Your name;
• Order details;
• The content of your message;
• Attachments or photographs you provide; and
• Information required to investigate your enquiry.

3. How We Collect Information

Personal information may be collected:

• Directly from you;
• Automatically through website technologies;
• Through Shopify;
• From payment-service providers;
• From fraud-prevention providers;
• From fulfilment partners;
• From delivery providers;
• From analytics providers;
• From advertising or marketing providers where legally permitted; and
• From other service providers used to operate our store.

4. Purposes for Which We Use Personal Information

We may process personal information to:

• Provide our website;
• Process purchases;
• Confirm orders;
• Process payments;
• Detect fraudulent transactions;
• Fulfil orders;
• Arrange delivery;
• Communicate delivery information;
• Process cancellations;
• Process returns and refunds;
• Respond to customer enquiries;
• Provide account functionality;
• Maintain order records;
• Prevent abuse;
• Protect our website;
• Resolve disputes;
• Comply with legal obligations;
• Maintain accounting and transaction records;
• Analyse website performance;
• Improve our services;
• Conduct marketing where permitted; and
• Establish, exercise or defend legal claims.

5. Lawful Bases

Where UK data-protection law requires a lawful basis, the basis used will depend on the relevant processing activity.

Depending on the circumstances, we may rely on:

• Performance of a contract;
• Steps taken at your request before entering into a contract;
• Compliance with legal obligations;
• Legitimate interests;
• Consent; or
• Another lawful basis permitted under applicable law.

ICO guidance identifies transparency about purposes and lawful bases as part of the UK GDPR right-to-be-informed framework.

6. Contractual Processing

We may process information where necessary to perform a contract with you.

Examples include:

• Processing your order;
• Taking payment;
• Shipping goods;
• Providing order information;
• Managing cancellations;
• Handling returns; and
• Providing contractual customer support.

Without necessary order and delivery information, we may be unable to fulfil a purchase.

7. Legitimate Interests

Where permitted, we may process information for legitimate business interests such as:

• Preventing fraud;
• Protecting our systems;
• Analysing website performance;
• Improving our services;
• Maintaining records;
• Responding to complaints; and
• Protecting legal rights.

Where legitimate interests are relied upon, we seek to consider whether those interests are overridden by the rights and interests of affected individuals.

8. Consent

Where consent is required, we may ask you to provide it before the relevant processing occurs.

You may withdraw consent where applicable.

Withdrawal does not necessarily affect processing that occurred lawfully before withdrawal or processing based on another lawful basis.

9. Shopify

Our online store may use Shopify to provide ecommerce infrastructure, website hosting, checkout functionality and related services.

As part of operating the store, information may be processed through Shopify systems.

Shopify may process certain information under its own contractual and privacy arrangements.

10. Payment Providers

Payment information may be processed by payment gateways or other payment-service providers.

These providers may process information for:

• Payment authorisation;
• Transaction settlement;
• Fraud prevention;
• Regulatory compliance; and
• Security.

Their processing may also be governed by their own privacy notices.

11. Fulfilment and Delivery Providers

We may share information necessary to fulfil and deliver an order with suppliers, warehouses, fulfilment partners and carriers.

This information may include:

• Recipient name;
• Delivery address;
• Telephone number where necessary;
• Email address where necessary;
• Product and parcel details; and
• Delivery instructions.

We seek to limit disclosure to information reasonably necessary for the relevant purpose.

12. Fraud Prevention and Security

We may use transaction and technical information to:

• Detect suspicious transactions;
• Prevent unauthorised purchases;
• Protect customer accounts;
• Identify malicious website activity;
• Prevent abuse;
• Investigate security incidents; and
• Protect our business and customers.

13. Cookies and Similar Technologies

Our website may use cookies and similar storage or access technologies to support:

• Shopping-cart functionality;
• Checkout;
• Security;
• User preferences;
• Analytics;
• Website performance;
• Advertising; and
• Other online-store functions.

UK rules concerning cookies and similar technologies are principally addressed through PECR alongside UK GDPR requirements where personal data is involved. The ICO states that non-essential cookies and similar technologies generally require appropriate consent, subject to applicable exemptions.

Where legally required, we seek to obtain appropriate consent before using non-essential technologies.

14. Analytics

We may use analytics services to understand how visitors interact with our website.

Analytics information may help us understand:

• Page visits;
• Website navigation;
• Traffic sources;
• Device categories;
• Website performance;
• Conversion activity; and
• Technical problems.

Where consent is required for analytics technologies, such technologies should be activated consistently with applicable consent requirements.

15. Marketing Communications

Where permitted by applicable law, we may send marketing communications concerning products, promotions or other store information.

Electronic direct marketing in the UK is subject to both data-protection law and PECR requirements.

Customers may unsubscribe from marketing communications using an unsubscribe method provided in the communication or by contacting:

info@billyjc.shop

Transactional communications concerning an existing order may still be sent where necessary.

16. Sharing of Personal Information

We may share personal information with appropriate third parties where necessary, including:

• Shopify;
• Payment processors;
• Fulfilment providers;
• Delivery carriers;
• Cloud-service providers;
• Hosting providers;
• Security providers;
• Fraud-prevention providers;
• Analytics providers;
• Customer-service providers;
• Professional advisers;
• Government authorities where legally required; and
• Other service providers supporting our operations.

We do not intend to disclose personal information without an appropriate legal or operational basis.

17. Business Transactions

If our business or relevant assets are reorganised, sold, transferred, merged or acquired, personal information may be disclosed as part of the relevant transaction where lawful.

Appropriate confidentiality and data-protection measures should apply where required.

18. International Transfers

Some service providers may process information in countries outside the United Kingdom.

Where personal information is transferred internationally, we seek to use transfer mechanisms or safeguards required by applicable UK data-protection law.

19. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and to meet applicable legal, tax, accounting, fraud-prevention, contractual or dispute-resolution requirements.

Different categories of information may be retained for different periods.

When information is no longer reasonably required, we may delete, anonymise or securely dispose of it, subject to applicable legal obligations.

20. Information Security

We use reasonable organisational and technical measures intended to protect personal information.

However, no internet-based system, website, communication channel or storage system can be guaranteed to be completely secure.

Customers should protect their account credentials and contact us if they suspect unauthorised account activity.

21. Your Data-Protection Rights

Depending on the circumstances and applicable law, individuals may have rights concerning their personal information, including rights to:

• Request access;
• Request correction;
• Request deletion;
• Request restriction;
• Object to certain processing;
• Request data portability;
• Withdraw consent where processing relies on consent; and
• Raise a complaint concerning the handling of personal information.

Some rights are subject to legal conditions, exemptions or limitations.

22. Exercising Your Rights

To make a privacy request, contact:

info@billyjc.shop

We may request information reasonably necessary to confirm identity and locate the relevant information before responding.

We will handle valid requests in accordance with applicable data-protection law.

23. Data-Protection Complaints

If you are dissatisfied with how we have handled your personal information, you may submit a data-protection complaint to:

info@billyjc.shop

Current UK rules require organisations to provide an appropriate way for individuals to make data-protection complaints, acknowledge complaints within 30 days, take appropriate steps to investigate them, keep complainants appropriately informed and communicate an outcome without undue delay.

We will seek to handle data-protection complaints consistently with those requirements.

Individuals may also have the right to raise concerns with the UK Information Commissioner's Office.

24. Children's Privacy

Our website is intended for general retail use and is not designed to solicit personal information from children who are legally unable to enter into the relevant transaction independently.

Where parental or guardian involvement is legally required, purchases should be made with appropriate adult involvement.

25. Third-Party Links

Our website may contain links to third-party websites.

Third-party websites operate independently and may have their own privacy practices.

We are not responsible for the privacy practices of independent third-party websites.

26. Changes to This Privacy Policy

We may update this Privacy Policy where reasonably necessary to reflect:

• Legal developments;
• Regulatory guidance;
• Changes to our services;
• Changes to service providers;
• New website functionality; or
• Changes to our data-processing activities.

The updated version will be published on billyjc.shop with an updated revision date where appropriate.

27. Contact Us

Privacy enquiries, rights requests and data-protection complaints may be sent to:

billyjc.shop
Email: info@billyjc.shop