Privacy policy

JP Designs (“we”, “us”, or “our”) operates this website and online store (the “Services”). This Privacy Policy explains how we collect, use, store, and disclose personal information when you visit our website, make a purchase, request a custom or memorial commission, or otherwise communicate with us.

This Privacy Policy should be read alongside our Terms of Service. Where there is any conflict, this Privacy Policy governs matters relating to personal data.

By using our Services, you acknowledge that you have read and understood this Privacy Policy.

1. Personal Information We Collect

We collect personal information that is necessary to operate our business and provide our Services. This may include:

Information you provide directly

Name
Email address
Billing and shipping address
Payment details (processed securely by third-party payment providers)
Order details, including custom or memorial requests
Communications you send to us (e.g. emails, enquiries, design approvals)

Information collected automatically

IP address
Device, browser, and operating system information
Usage data relating to how you interact with our website
Cookies and similar technologies (see Cookies section below)

We do not knowingly collect personal data from children.

2. How We Use Your Personal Information

We process personal information only where there is a lawful basis to do so under UK GDPR. We use your information to:

Fulfil orders and provide our Services
Process payments and prevent fraud
Communicate with you about orders, custom artwork approvals, or enquiries
Provide customer support
Improve our website and Services
Send marketing communications where you have consented or where permitted by law
Comply with legal obligations

We do not sell personal information.

3. Marketing Communications

If you opt in to marketing communications, we may send you emails about our products, commissions, or updates.

You can opt out at any time by:

Using the unsubscribe link in our emails, or
Contacting us directly

Even if you opt out of marketing, we may still contact you regarding orders or important service messages.

4. Disclosure of Personal Information

We may share personal information only where necessary, including with:

Shopify, which hosts our website and processes data on our behalf
Payment processors (e.g. card payment providers)
Shipping and fulfilment providers
Analytics and website performance providers
Legal or regulatory authorities where required by law

All service providers are required to handle personal data securely and in accordance with applicable law.

5. Relationship With Shopify

Our store is hosted on Shopify. Shopify processes personal information to provide and improve its services. Shopify may process personal data independently as a data controller in certain circumstances.

To learn more about how Shopify processes personal information, visit:
https://privacy.shopify.com/en

6. Cookies and Analytics

We use cookies and similar technologies to:

Enable essential site functionality
Understand how visitors use our website
Improve performance and user experience

We may use analytics services (such as Google Analytics) to collect aggregated, anonymised usage data.

You can manage cookies through your browser settings. Blocking cookies may affect website functionality.

You can manage certain data sharing and privacy preferences through our Your Privacy Choices page

7. Data Retention

We retain personal information only for as long as necessary to:

Fulfil orders
Maintain business records
Comply with legal and tax obligations
Resolve disputes or enforce agreements

Custom and memorial order records may be retained longer for legal and contractual purposes.

8. Data Security

We take reasonable technical and organisational measures to protect personal information. However, no system is completely secure, and we cannot guarantee absolute security.

Payment information is processed securely by third-party providers and is not stored by us.

9. Your Rights (UK & EEA)

If you are located in the UK or EEA, you have rights under data protection law, including:

Right of access
Right to rectification
Right to erasure
Right to restrict processing
Right to data portability
Right to object to processing
Right to withdraw consent (where applicable)

To exercise your rights, please contact us using the details below. We may need to verify your identity before responding.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).

You can find instructions for requesting deletion of personal data on our Data Deletion Instructions page

10. International Data Transfers

Personal information may be transferred outside the UK or EEA, including to Shopify servers. Where this occurs, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for their privacy practices and encourage you to review their policies separately.