Privacy Policy

1. Introduction

Jane Store is committed to protecting your privacy and handling your personal data with care and transparency. This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website or make a purchase. We comply with the General Data Protection Regulation (GDPR) and applicable European data protection laws.

2. Data We Collect

When you interact with our website, we may collect the following categories of personal data:

• Identity data: Name, contact details you provide when placing an order or contacting support.
• Contact data: Email address, phone number, shipping and billing address.
• Transaction data: Details about products you purchase, payment method (we do not store full credit card numbers).
• Technical data: IP address, browser type, device information, and browsing behaviour on our website.
• Communication data: Messages you send through our contact form, email, or social media channels.

3. How We Use Your Data

We use your personal data only for legitimate business purposes:

• Processing and delivering your orders
• Communicating about your order status and delivery updates
• Responding to your enquiries and providing customer support
• Improving our website experience and product offerings
• Complying with legal obligations and preventing fraud
• Sending marketing communications (only with your explicit consent)

4. Legal Basis for Processing

Under GDPR, we process your personal data on the following legal bases: contractual necessity (to fulfil your orders), legitimate interest (improving our service and preventing fraud), legal obligation (tax and accounting requirements), and your consent (for marketing communications). You may withdraw consent at any time.

5. Data Sharing

We do not sell, rent, or trade your personal data. We only share data with trusted third parties essential to our operations:

• Shipping carriers to deliver your orders
• Payment processors to handle transactions securely
• IT and hosting providers that power our website
• Legal and regulatory authorities when required by law

All third parties are bound by data processing agreements and are required to protect your data to the same standard we do.

6. Data Retention

We retain your personal data only as long as necessary for the purposes described in this policy. Order and transaction data is kept for the legally required period (typically 7-10 years for tax and accounting purposes). Marketing consent data is kept until you withdraw consent. Browsing and technical data is anonymized or deleted within 26 months.

7. Your Rights Under GDPR

As a data subject in the European Economic Area, you have the following rights:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Correct inaccurate or incomplete data.
• Right to erasure: Request deletion of your data (subject to legal obligations).
• Right to restrict processing: Limit how we use your data in certain circumstances.
• Right to data portability: Receive your data in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interests or direct marketing.
• Right to withdraw consent: Withdraw previously given consent at any time.

8. Cookies

Our website uses essential cookies for functionality and security. We may also use analytics cookies to understand how visitors use our site. You can manage cookie preferences through your browser settings. We do not use intrusive tracking or advertising cookies without your explicit consent.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes encrypted data transmission (SSL/TLS), secure payment processing, and restricted access controls.

10. Contact & Complaints

For any privacy-related questions, to exercise your rights, or to make a complaint, please contact us at privacy@janestore.eu or through our contact form. You also have the right to lodge a complaint with your local data protection supervisory authority in your EU member state.