Jay Johnstone
Website: www.JayJohnstone.co.uk
Email: Hello@JayJohnstone.co.uk
Last updated: 16/06/2026

1. Who we are

This website is operated by Jay Johnstone (“we”, “us”, “our”).

We are the data controller responsible for your personal data under UK GDPR.

2. What personal data we collect

We may collect and process the following information:

When you place an order:

  • Name
  • Billing and delivery address
  • Email address
  • Phone number (if provided)
  • Order details and purchase history
  • Payment confirmation (payments are processed securely via third-party providers and not stored by us)

When you contact us (Avada Forms):

  • Name
  • Email address
  • Phone number (if provided)
  • Message content
  • Any additional information you choose to submit

When you subscribe to our newsletter:

  • Email address
  • Name (if provided)
  • Marketing preferences
  • Consent and subscription records (date/time/IP where required for compliance)

Automatically collected data:

  • IP address
  • Browser type and device information
  • Pages visited
  • Time spent on site
  • Referring website
  • Cookies and tracking data

3. How we use your data

  • Process and fulfil orders
  • Provide customer service and support
  • Respond to enquiries
  • Send order updates and confirmations
  • Send marketing emails (only where consent is given)
  • Improve website performance and user experience
  • Analyse website traffic and usage

4. Legal basis for processing

  • Contract – to fulfil orders and provide services
  • Consent – for newsletters, marketing and non-essential cookies
  • Legal obligation – for tax and accounting requirements
  • Legitimate interests – for website analytics and service improvement

5. Who we share your data with

We may share data with trusted third-party service providers:

  • Payment processors (e.g. Stripe / PayPal)
  • Delivery couriers and logistics providers
  • Email marketing platforms
  • Website hosting providers
  • Analytics providers (e.g. Google Analytics)
  • Security and anti-spam services

All third parties are required to handle your data securely and in compliance with GDPR.

6. Data retention

  • Order records: 6–7 years (legal/tax requirements)
  • Customer enquiries: 24 months
  • Newsletter data: until you unsubscribe or withdraw consent
  • Analytics data: anonymised or retained according to provider settings

7. Your rights under UK GDPR

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data
  • Restrict or object to processing
  • Withdraw consent at any time
  • Request data portability

To exercise these rights, contact: Hello@JayJohnstone.co.uk

8. Marketing communications

If you opt in, we may send you:

  • Product updates
  • Offers and promotions
  • News about our services

You can unsubscribe at any time via email links or by contacting us.

9. Cookies and analytics

We use cookies to:

  • Enable core website functionality
  • Support checkout and cart features
  • Analyse website traffic and performance
  • Improve user experience

See our Cookie Policy for full details.

10. Data security

We take appropriate technical and organisational measures including:

  • SSL encryption
  • Secure hosting environments
  • Access controls
  • Regular updates and monitoring

11. Changes to this policy

We may update this policy from time to time. Updates will be posted on this page.

12. Complaints (ICO)

If you are unhappy with how we handle your data, contact us first:
Hello@JayJohnstone.co.uk

If unresolved, contact the UK supervisory authority:

Information Commissioner’s Office (ICO)
Web: https://ico.org.uk
Phone: 0303 123 1113