Privacy Policy for Jelly Journal
Last Updated: 19 April 2025
1. Introduction
Jelly Journal ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use our website (the "Service").
We process your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the Service.
2. Personal Data We Collect
2.1 Information You Provide to Us
When you register for an account, we collect:
- Username
- Email address
- Password (stored in encrypted form)
- First name (optional)
- Profile picture (optional)
When you use our Service, we collect:
- Information about Jellycat items you add to your collection
- Your notes and comments about items in your collection
- Purchase prices (if provided by you)
- Your preferences regarding email permissions
2.2 Information Automatically Collected
When you access or use our Service, we may collect:
- IP address
- Browser type and version
- Pages of our Service that you visit
- Time and date of your visit
- Time spent on pages
- Device information
2.3 Cookies and Similar Technologies
Our Service uses cookies and similar tracking technologies to track activity on our Service and hold certain information. Cookies are files with a small amount of data which may include an anonymous unique identifier.
The types of cookies we use are:
- Session Cookies: Temporary cookies that are deleted when you close your browser.
- Persistent Cookies: Remain on your device until you delete them or they expire.
- Essential Cookies: Required for the Service to function properly.
- Analytical/Performance Cookies: Allow us to recognise and count visitors and see how they move around our Service.
You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.
3. How We Use Your Personal Data
We use your personal data for the following purposes:
- To provide and maintain our Service
- To notify you about changes to our Service
- To allow you to participate in interactive features when you choose to do so
- To provide customer support
- To gather analysis or valuable information so that we can improve our Service
- To monitor the usage of our Service
- To detect, prevent and address technical issues
- To provide you with news and general information about Jellycat products that may be of interest to you
4. Legal Basis for Processing Personal Data
We process your personal data on the following legal bases:
- Performance of a Contract: Processing necessary for the performance of a contract to which you are a party or to take steps at your request before entering into such a contract.
- Legitimate Interests: Processing necessary for our legitimate interests, provided that these interests do not override your fundamental rights and freedoms.
- Consent: Where you have given consent to the processing of your personal data for one or more specific purposes.
5. Data Sharing and Disclosure
We do not sell your personal data to third parties. We may share your personal data with:
5.1 Service Providers
We may employ third-party companies and individuals to facilitate our Service ("Service Providers"), to provide the Service on our behalf, to perform Service-related services, or to assist us in analysing how our Service is used. These third parties have access to your personal data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.
5.2 Analytics Providers
We may use third-party Service Providers to monitor and analyse the use of our Service.
5.3 Affiliate Partnerships
Our Service includes affiliate links to products on third-party websites. When you click on these links and make a purchase, we may receive a commission. The third-party website will have its own privacy policy regarding data collection and processing.
5.4 Legal Requirements
We may disclose your personal data in good faith when we believe that such action is necessary to:
- Comply with a legal obligation
- Protect and defend our rights or property
- Prevent or investigate possible wrongdoing in connection with the Service
- Protect the personal safety of users of the Service or the public
- Protect against legal liability
6. Data Security
The security of your personal data is important to us, but remember that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.
We have implemented appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:
- Encryption of personal data where appropriate
- Regular testing and evaluation of the effectiveness of our security measures
- Regular backups of our systems
- Staff training on data protection and security
7. Data Retention
We will retain your personal data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your personal data to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our legal agreements and policies.
We will also retain usage data for internal analysis purposes. Usage data is generally retained for a shorter period, except when this data is used to strengthen the security or to improve the functionality of our Service, or we are legally obligated to retain this data for longer time periods.
8. Your Data Protection Rights
Under the UK GDPR, you have the following rights:
- Right to Access: You have the right to request copies of your personal data.
- Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
- Right to Erasure: You have the right to request that we erase your personal data, under certain conditions.
- Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
- Right to Object to Processing: You have the right to object to our processing of your personal data, under certain conditions.
- Right to Data Portability: You have the right to request that we transfer the data we have collected to another organisation, or directly to you, under certain conditions.
If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us using the details in the "Contact Us" section.
9. Children's Privacy
Our Service does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from anyone under the age of 13. If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us. If we become aware that we have collected personal data from children without verification of parental consent, we take steps to remove that information from our servers.
10. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top of this Privacy Policy.
You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
11. Contact Us
If you have any questions about this Privacy Policy, please contact us:
- Email: hi@jellyjournal.com
12. Complaints
If you have a complaint about our use of your personal data or response to your requests regarding your personal data, you may lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk).
