Privacy Policy – Joint Lock

Effective date: 19.07.2025

This Privacy Policy outlines how the Joint Lock online store, operating at: www.joint-lock.co.uk, collects, stores, and processes personal data.

Data Controller:
Jointlock
East Ayrshire, Scotland
Email: shop@jointlock.co.uk
Phone: +44 7736 222005

Legal Basis

We process personal data in accordance with applicable laws, specifically:

UK GDPR (United Kingdom General Data Protection Regulation)
Data Protection Act 2018

What Data We Collect

We collect user data in the following situations:

When creating an account in the store
When placing an order
When subscribing to the newsletter
When contacting us via form or email

The data we may collect includes:

First and last name
Shipping address
Email address
Phone number
Login credentials (for account holders)
Payment information (in the case of PayPal)

Purpose and Legal Basis for Processing

Personal data is processed for the following purposes:

Order fulfilment (Article 6(1)(b) UK GDPR)
Account creation and management (Article 6(1)(b))
Customer support and communication (Article 6(1)(f))
Marketing (e.g. newsletters) – only with consent (Article 6(1)(a))
Compliance with legal obligations, such as accounting (Article 6(1)(c))

Data Recipients

Your data may be shared with the following entities:

Royal Mail – for order delivery
PayPal – for online payment processing
Analytical and marketing tools, such as:
- Google Analytics
- Meta (Facebook) Pixel
- Shopify Analytics
- Mailchimp (or another newsletter service)

These third parties process data solely on the basis of data processing agreements and do not use the data for their own purposes.

Data Transfers Outside the UK

Due to servicing customers from the USA, data may be transferred outside the UK, but only to countries providing an adequate level of data protection (e.g. the USA – based on appropriate safeguards such as Standard Contractual Clauses or the Data Privacy Framework).

Data Retention

Your data will be stored for the following durations:

For the duration required to fulfil the order and for accounting purposes (minimum 6 years)
Until consent is withdrawn (in the case of marketing)
Until the user deletes their account (for account data)

Your Rights

You have the right to:

Access your data
Rectify your data
Delete your data (“right to be forgotten”)
Restrict processing
Data portability
Object to processing
Withdraw consent at any time

To exercise your rights, please contact us at: shop@jointlock.com

If you believe your data is being processed unlawfully, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).

Cookies

Our website uses cookies for the following purposes:

To ensure the proper functioning of the service
To collect statistics (Google Analytics)
To run remarketing campaigns (Meta Pixel, Google Ads)
To remember user preferences

You can manage cookies through your browser settings.

User Account

Users may create an account in the store, which provides access to order history and a simplified checkout process. Account data is stored until the account is deleted by the user.

Changes to This Privacy Policy

We reserve the right to update this Privacy Policy. Updates will be published on this page. For significant changes, users with an account or newsletter subscription will be notified by email.

Contact – Data Controller:
Joint Lock
Email: shop@jointlock.co.uk
Phone: +44 7736 222005