Privacy policy
Last updated: 7 July 2026
LoveandJam operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). LoveandJam is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.
The data controller responsible for your personal information is Valérie Ferrat, trading as Love and Jam, contactable at contact@loveandjam.co.uk.
Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in this Privacy Policy.
Personal Information We Collect or Process
When we use the term "personal information," we are referring to information that identifies or can reasonably be linked to you. Personal information does not include information that is collected anonymously or that has been fully de-identified.
We may collect or process the following categories of personal information, depending on how you interact with the Services and as permitted or required by applicable law:
Contact details — including your name, billing address (where applicable), phone number, and email address. Collected on the basis of contract performance (to fulfil your order) and, where you have opted in, legitimate interests (to communicate with you about your purchase).
Financial information — including payment card details, transaction details, and payment confirmation. Collected on the basis of contract performance. Note: full payment card details are processed by our payment provider (Shopify Payments / third-party processors) and are not stored by us.
Account information — including your username, password, security questions, and preferences. Collected on the basis of contract performance and legitimate interests (account security).
Transaction information — including the products you view, add to your cart, or purchase, and your order history. Collected on the basis of contract performance and legitimate interests (to improve our Services).
Communications with us — including information you provide when contacting customer support. Collected on the basis of legitimate interests (to respond to your enquiries).
Device and usage information — including your IP address, browser type, device identifiers, and how you navigate the Services. Collected on the basis of legitimate interests (store security, analytics, and performance improvement).
Cookies and tracking data — we use cookies and similar technologies, including Google Analytics, to understand how visitors use our Services. Where required by law, we will ask for your consent before placing non-essential cookies. You can manage your cookie preferences at any time via our cookie banner.
How We Use Your Personal Information
Depending on how you interact with us or which of the Services you use, we may use your personal information for the following purposes:
Provide, tailor, and improve the Services (lawful basis: contract performance; legitimate interests) — to process your payments, fulfil your orders, deliver digital content, remember your preferences, send account notifications, manage your account, enable you to post reviews, and create a personalised shopping experience.
Marketing and advertising (lawful basis: consent; legitimate interests) — to send marketing communications by email or other channels, and to show you relevant advertisements on the Services or other websites. Where required by law, we will only send you marketing communications with your consent. You may opt out at any time by clicking "unsubscribe" in any marketing email or contacting us at contact@loveandjam.co.uk.
Security and fraud prevention (lawful basis: legitimate interests; legal obligation) — to authenticate your account, provide a secure payment experience, detect and investigate fraudulent or malicious activity, and protect the security of our Services.
Communicating with you (lawful basis: contract performance; legitimate interests) — to provide customer support and respond to your enquiries.
Legal compliance (lawful basis: legal obligation) — to comply with applicable law, respond to valid legal process, and enforce or investigate potential violations of our terms or policies.
How We Disclose Personal Information
In certain circumstances, we may disclose your personal information to third parties for legitimate purposes subject to this Privacy Policy:
Service providers — we share your information with vendors who perform services on our behalf, including:
- Shopify Inc. (platform and payment infrastructure)
- Payment processors (e.g. Shopify Payments, Stripe)
- Email marketing providers (e.g. Klaviyo)
- Analytics providers (e.g. Google Analytics)
- Digital product delivery providers (e.g. BIG Digital Downloads)
Marketing and advertising partners — we may share information with business and marketing partners to show you relevant advertising. You have the right to opt out of targeted advertising at any time by contacting us at contact@loveandjam.co.uk or adjusting your cookie preferences via our cookie banner.
At your direction — when you consent to or request disclosure, such as through social media integrations or login tools.
Legal and compliance reasons — to comply with applicable legal obligations, respond to lawful requests from authorities, enforce our terms, or protect our rights and those of our users.
Business transfers — in connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
International transfers — some of our service providers (including Google and Klaviyo) are based in the United States. Where your personal information is transferred outside the UK or EU/EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the relevant authority.
Relationship with Shopify
The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services for you. Information you submit to the Services will be transmitted to and shared with Shopify as well as third parties that may be located in countries other than where you reside, in order to provide and improve the Services for you.
In addition, to help protect, grow, and improve our business, we use certain Shopify enhanced features that incorporate data and information obtained from your interactions with our Store, along with other merchants and with Shopify. In these circumstances, Shopify is responsible for the processing of your personal information, including for responding to your requests to exercise your rights over use of your personal information for these purposes.
To learn more about how Shopify uses your personal information and any rights you may have, please visit the Shopify Consumer Privacy Policy Depending on where you live, you may exercise certain rights with respect to your personal information via the Shopify Privacy Portal.
Third Party Websites and Links
The Services may provide links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of information found on these sites. Information you provide on public or semi-public venues, including information you share on third-party social networking platforms may also be viewable by other users of the Services and/or users of those third-party platforms without limitation as to its use by us or by a third party. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators, except as disclosed on the Services.
Children's Data
The Services are not intended for use by children under the age of 16 (or 13 in the UK). We do not knowingly collect personal information from children under these ages. If you are the parent or guardian of a child who has provided us with their personal information, please contact us at contact@loveandjam.co.uk to request that it be deleted. We do not sell personal information of any individuals, including minors.
Security and Retention of Your Information
Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee complete security. We recommend that you do not use unsecured channels to communicate sensitive or confidential information to us.
We retain your personal information for as long as necessary to fulfil the purposes for which it was collected, including:
- Order and transaction records — retained for 7 years to comply with HMRC tax record-keeping requirements
- Account information — retained for as long as your account is active, and deleted within a reasonable period following account closure upon request
- Marketing data — retained until you unsubscribe or withdraw consent, after which it is removed from active marketing lists promptly
- Customer support communications — retained for up to 3 years from the date of the last interaction
- Analytics and usage data — retained in anonymised or aggregated form indefinitely; identifiable data retained for up to 26 months (Google Analytics default)
When personal information is no longer required, we will delete or anonymise it securely.
Your Rights and Choices
Depending on where you live, you may have some or all of the rights listed below in relation to your personal information. These rights are not absolute and may apply only in certain circumstances.
Right to access — you may request access to the personal information we hold about you.
Right to deletion — you may request that we delete personal information we hold about you, subject to certain legal exceptions.
Right to rectification — you may request that we correct inaccurate personal information we hold about you.
Right to portability — you may request a copy of your personal information in a structured, commonly used format, and ask us to transfer it to a third party where technically feasible.
Right to object or restrict processing — you may ask us to stop or restrict our processing of your personal information for certain purposes, including direct marketing.
Right to withdraw consent — where we rely on consent to process your personal information, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
Right not to be subject to automated decision-making — you have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects on you.
Managing marketing preferences — you may opt out of marketing emails at any time by clicking "unsubscribe" in any email we send. We may still send you non-promotional communications related to your account or orders.
Right to complain — if you are based in the UK, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk. If you are based in the EU/EEA, you may contact your local data protection supervisory authority.
To exercise any of these rights, please contact us at contact@loveandjam.co.uk. You may also manage rights related to data processed by Shopify via the Shopify Privacy Portal. We will respond to your request within one month, as required by applicable law. We may need to verify your identity before processing your request.
Complaints
If you have complaints about how we process your personal information, please contact us at contact@loveandjam.co.uk and we will do our best to resolve your concern.
If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority:
- UK: Information Commissioner's Office (ICO) — ico.org.uk
- EU/EEA: your local supervisory authority — a full list is available at edpb.europa.eu
International Transfers
Please note that we may transfer, store and process your personal information outside the country you live in, including in the United States (where providers such as Google and Klaviyo are based).
If we transfer your personal information out of the European Economic Area or the United Kingdom, we will rely on recognised transfer mechanisms like the European Commission's Standard Contractual Clauses, or any equivalent contracts issued by the relevant competent authority of the UK, as relevant, unless the data transfer is to a country that has been determined to provide an adequate level of protection.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on this website, update the "Last updated" date and provide notice as required by applicable law.
Contact
We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on this website, update the "Last updated" date, and provide notice as required by applicable law.
Contact
For the purpose of applicable data protection laws, we are the data controller of your personal information.
Should you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, please contact us at:
Love and Jam / Valerie Ferrat Abbeymount Studios, 2 Easter Road, Edinburgh EH7 5AN contact@loveandjam.co.uk