Privacy policy

 

Privacy Policy Last Updated: October 2026

At JoBolt (www.joboltstore.com), we respect your privacy. This policy explains how we collect, use, share and protect personal information when you visit our website, place an order or contact us.

1. Who We Are JoBolt operates this online store and is responsible for the personal information used to manage our business and customer relationships.

  • Data controller: [Insert your full name if a sole trader, or your registered Company Name here]

  • Contact address: The Bridle Road, Purley, London, CR8 3JB, United Kingdom

  • Email: admin@jo-bolt-store.net

2. Personal Information We Collect Depending on how you interact with us, we may collect:

  • Your name, billing address and delivery address.

  • Your email address and telephone number.

  • Order details, transaction information and purchase history.

  • Account information, where you create an account.

  • Messages, enquiries and information you provide to customer support.

  • IP address, device and browser information.

  • Browsing activity, cookie identifiers and interactions with our website, subject to applicable consent requirements.

Payments are handled by our payment providers. We do not store full payment-card numbers ourselves, but we may receive payment status, transaction references and limited payment-related information. We receive information directly from you and, where relevant, from our platform, payment providers, delivery partners and other service providers.

3. How We Use Your Information We use personal information to:

  • Process payments, fulfil orders and arrange delivery.

  • Send order confirmations and delivery updates.

  • Manage accounts and respond to enquiries.

  • Handle returns, refunds and complaints.

  • Protect our store against fraud, misuse and security threats.

  • Maintain business, tax and accounting records.

  • Understand and improve our website and services.

  • Send marketing communications where you have consented.

  • Support analytics and advertising where used, subject to applicable consent requirements.

4. Legal Bases for Processing Where UK GDPR or EU GDPR applies, we rely on the following legal bases, depending on the purpose:

  • Contract: To process your order, arrange delivery and provide services you request.

  • Legal obligation: To meet applicable legal, tax, accounting and regulatory requirements.

  • Legitimate interests: To provide customer support, protect our business, prevent fraud and improve our services, where those interests are not overridden by your rights and freedoms. Where consent is required, we do not rely on legitimate interests instead.

  • Consent: For marketing communications and non-essential tracking where consent is required. You can withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Sharing Your Information We share personal information where necessary with service providers that help us operate our store, including:

  • Shopify, which provides our e-commerce platform.

  • Fulfilment partners, including partners located in the European Union, which prepare and dispatch orders.

  • Delivery companies, which use delivery and contact information to transport parcels and provide updates.

  • Payment providers, which process payments and help prevent fraud.

  • Technology and customer-support providers.

  • Analytics and advertising providers, where their services are used and subject to applicable consent requirements.

  • Professional advisers, such as accountants or legal advisers, where necessary.

Depending on the integrations used and your privacy choices, analytics and advertising providers may receive device identifiers, IP addresses, browsing activity and purchase events. This information is not necessarily anonymous. We may also disclose information where required by law or where necessary to establish, exercise or defend legal claims. Service providers may process information on our behalf or, for certain purposes, act as independent data controllers under their own privacy notices.

6. International Data Transfers Our platform and some service providers operate internationally. Your personal information may therefore be processed outside the UK or European Economic Area. Where applicable data protection law requires safeguards for an international transfer, appropriate transfer arrangements must be in place. These may include an applicable adequacy decision or approved contractual safeguards. You can contact us for information about the transfer arrangements relevant to your personal information.

7. How Long We Keep Your Information We retain personal information for as long as reasonably necessary for the purposes described in this policy, including fulfilling orders, providing support, meeting legal and accounting obligations, resolving disputes and preventing fraud. Retention periods depend on the type of information, the purpose for which it is held and applicable legal requirements.

If you unsubscribe from marketing, we may retain limited information on a suppression list to ensure we respect your choice. If you request account or data deletion, we may still retain records that we are legally required or otherwise lawfully entitled to keep. Information no longer needed will be deleted or anonymised.

8. Your Data Protection Rights Depending on your location and the circumstances, you may have the right to:

  • Access your personal information and receive a copy.

  • Correct inaccurate or incomplete information.

  • Request deletion of your information.

  • Request restrictions on its use.

  • Object to processing based on legitimate interests.

  • Object to direct marketing at any time.

  • Receive certain information in a portable format.

  • Withdraw consent where processing relies on consent.

  • Lodge a complaint with a data protection supervisory authority.

These rights are subject to applicable conditions and exceptions. For example, we may need to retain certain records to meet legal obligations. To make a request, email admin@jo-bolt-store.net. We may need to verify your identity before responding. We will respond within the timeframe required by applicable law, generally one month, with extensions permitted in certain circumstances.

9. Cookies and Similar Technologies Our website and integrations may use cookies and similar technologies for essential functions, such as maintaining your basket and supporting secure checkout. Non-essential technologies may also be used for analytics, personalisation and advertising. Where legally required, these technologies require your consent. You can also manage cookies through your browser settings. Blocking essential cookies may affect how parts of the website work. Unsubscribing from marketing emails does not, by itself, change cookie or advertising consent preferences.

10. Marketing Communications Where you have opted in, we may send emails about products, promotions and store updates. You can unsubscribe at any time using the link in a marketing email or by contacting admin@jo-bolt-store.net. We may still send necessary service messages, such as order confirmations, delivery updates and responses to your enquiries. These are separate from marketing communications.

11. Security We use reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, alteration and misuse. Our store uses Shopify and other service providers to support its operation. No online system or method of transmission can be guaranteed completely secure.

12. Changes to This Policy We may update this policy to reflect changes in our services, data practices or legal requirements. The current version will be published on this page with an updated date. Where required by law, we will provide additional notice or obtain consent before using information for a new purpose.

13. Contact and Complaints For privacy questions or to exercise your rights, contact:

  • Email: admin@jo-bolt-store.net

  • Contact address: The Bridle Road, Purley, London, CR8 3JB, United Kingdom

UK customers can complain to the Information Commissioner’s Office at https://ico.org.uk. EU customers can complain to the relevant data protection supervisory authority, including the authority in their country of residence. Information about EU supervisory authorities is available at https://www.edpb.europa.eu. We welcome the opportunity to address your concerns, but you do not have to contact us before making a complaint to a supervisory authority.