Privacy policy
Last updated: 30 September 2026
Who we are
This policy explains how Jones Lewis Limited handles personal data when you visit joneslewis.co.uk, place an order or write to us. We are the controller of that data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
- Company
- JONES LEWIS LIMITED
- Company number
- 17470889
- Registered address
- 402 Old Chester Road, Birkenhead, United Kingdom, CH42 3XF
- [email protected]
- Phone
- +44 7946 318274
We have not appointed a Data Protection Officer because the law does not require one for a business of our type. Any privacy question can be sent to the e-mail address above.
Data we collect
Order and delivery data
When you place an order you give us:
- your full name;
- e-mail address;
- phone number;
- delivery address, town or city and postcode;
- any comment you add to the order, such as delivery instructions;
- the items ordered, quantities, prices, delivery charge, order number and order date.
E-mail correspondence
Our contact button opens your own e-mail program; the website has no contact form. If you write to us, we receive your e-mail address, name as it appears in your mailbox and whatever you choose to include in the message and attachments.
Payment data
Card details are entered with and processed by our payment provider. We do not receive or store your full card number, expiry date or security code. We only receive confirmation that the payment went through, the amount, a transaction reference and, in some cases, the card type and last four digits.
Technical data
When the site loads, your browser sends standard technical information — IP address, browser type and the page requested — to our hosting provider and to Google Fonts, which serves the typefaces used on this site. We do not use analytics or advertising tools.
The shopping cart works only in your browser's memory while the page is open. It is not saved to your device and is cleared when you close or reload the page.
Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Processing your order, taking payment, arranging delivery, sending order and dispatch e-mails, contacting you about the details of your order | Contract (Article 6(1)(b) UK GDPR) |
| Handling cancellations, returns and refunds under the Consumer Contracts Regulations 2013 | Contract and legal obligation (Article 6(1)(b) and (c)) |
| Keeping invoices and accounting records for HMRC and under the Companies Act 2006 | Legal obligation (Article 6(1)(c)) |
| Answering e-mails and questions that are not about an order | Legitimate interests (Article 6(1)(f)) — replying to people who contact us |
| Preventing fraud, protecting the website and defending legal claims | Legitimate interests (Article 6(1)(f)) |
| Sending news about new products, only if you have asked us to | Consent (Article 6(1)(a)) |
If you do not give us the details needed for an order, we cannot accept or deliver it. We do not make decisions about you based solely on automated processing.
Payments
Payments are handled by an independent payment provider. For the payment itself, including fraud checks and compliance with anti-money-laundering rules, the provider acts as a separate controller and processes your data under its own privacy policy. We recommend reading that policy on the payment page. Card data never passes through our systems.
Who we share data with
We do not sell personal data. We share it only with:
- Courier and postal services — your name, delivery address, postcode, phone number and e-mail so they can deliver the parcel and send tracking updates. They receive only what is needed for delivery.
- Our payment provider — as a separate controller, as described above.
- E-mail and hosting providers — who store our website and mailbox on our behalf as processors under written contracts.
- Our accountant — order and invoice records needed to prepare accounts and tax returns.
- Public authorities — such as HMRC, the police or a court, where the law requires it.
International transfers
We aim to keep data in the United Kingdom. Some providers, including e-mail, hosting, payment services and Google Fonts, may process data outside the UK, for example in the European Economic Area or the United States. Where this happens we rely on UK adequacy regulations, the UK Extension to the EU–US Data Privacy Framework, or the International Data Transfer Agreement or UK Addendum to the EU Standard Contractual Clauses. You can ask us for more information about these safeguards.
How long we keep data
| Data | Period |
|---|---|
| Orders, invoices, refunds and related payment references | 6 years from the end of the financial year in which the order was placed, for HMRC and Companies Act 2006 requirements |
| Delivery details shared with couriers | Kept by us with the order record; couriers keep them under their own retention rules |
| E-mails about an order or return | Up to 2 years after the order is complete, or longer if needed for a dispute or legal claim |
| Other e-mail enquiries | Up to 12 months after our last reply |
| Product news consent | Until you withdraw consent |
When a period ends we delete the data or anonymise it.
Security
The site is served over an encrypted HTTPS connection. Access to order data and our mailbox is limited to people who need it, protected by strong passwords and two-factor authentication. Our providers are chosen for their security standards and bound by contract. No system is completely secure, but if a breach is likely to put your rights at risk we will tell you and the ICO as the law requires.
Cookies
Our website does not set cookies and does not use local storage, analytics or advertising trackers. The cart lives only in the page's memory. Our payment provider may use strictly necessary cookies on its own payment pages for security and fraud prevention; these are covered by its own cookie policy. If we ever add non-essential cookies, we will ask for your consent first.
Your rights
Under UK GDPR you have the right to:
- Access — get a copy of the personal data we hold about you;
- Rectification — have inaccurate or incomplete data corrected;
- Erasure — ask us to delete data, unless we must keep it, for example for tax records;
- Restriction — ask us to limit how we use your data while a question is resolved;
- Portability — receive data you gave us for an order in a machine-readable format or have it sent to another organisation;
- Objection — object to processing based on legitimate interests, and to direct marketing at any time;
- Withdraw consent — where we rely on consent, at any time.
To use any of these rights, e-mail [email protected]. We reply within one month, free of charge. We may ask for information to confirm your identity before acting on a request.
Withdrawing consent
If you have agreed to receive product news, you can withdraw at any time by replying "unsubscribe" to any message or writing to [email protected]. Withdrawing consent does not affect processing carried out before you withdrew it, and it does not affect your orders.
Complaints
If you are unhappy with how we handle your data, please contact us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority: ico.org.uk, telephone 0303 123 1113, or Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
Children
Our shop is intended for adults. You must be 18 or over to place an order. We do not knowingly collect data from children under 13; if you believe a child has given us personal data, contact us and we will delete it.
Changes to this policy
We may update this policy when our services, providers or the law change. The date at the top of this page shows when it was last updated. If a change significantly affects how we use data you have already given us, we will let you know by e-mail.
Last updated: 30 September 2026.