Privacy Policy


Last updated: 19 February 2026

Just Fabrics Ltd (“we”, “us”, “our”) is committed to protecting your personal data and respecting your privacy.

This Privacy Policy explains how we collect, use and protect your personal information when you visit our website, place an order, contact us, or otherwise interact with us.

We comply with the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018.


1. Who We Are

Data Controller:
Just Fabrics Ltd
Unit A, Runnings Road
Kingsditch Trading Estate
Cheltenham
GL51 9NQ
United Kingdom

Company number: 04405585
ICO Registration Number: C1137159

Email: orders@justfabrics.co.uk
Telephone: 01242 530423


2. The Personal Data We Collect

We may collect and process the following categories of personal data:

Information You Provide Directly

  • Name
  • Billing address
  • Delivery address
  • Email address
  • Telephone number
  • Order details
  • Account login details (if you create an account)
  • Correspondence with us
  • Images submitted via our JF Creations feature

Transaction Information

  • Products purchased
  • Returns and exchanges
  • Payment confirmation information

Payment card details are processed securely via Shopify and our payment providers. We do not store full card details.

Marketing Information

  • Email marketing preferences
  • SMS marketing preferences (where you have opted in)

Technical & Usage Information

  • IP address
  • Device and browser information
  • Website interaction data
  • Cookies and tracking identifiers

Call Recordings

Some calls may be recorded for quality assurance, staff training and fraud prevention.
The lawful basis for this processing is our legitimate interests.


3. How We Use Your Personal Data

We only process personal data where we have a lawful basis to do so.

Contractual Necessity
To:

  • Process and fulfil your orders
  • Deliver goods
  • Manage returns and refunds
  • Provide customer support

Legal Obligation
To:

  • Comply with tax and accounting requirements
  • Respond to lawful requests from authorities

Legitimate Interests
To:

  • Improve our website and services
  • Prevent fraud
  • Protect our business
  • Analyse performance and customer behaviour
  • Record calls for training and security

Consent

Where required, we rely on your consent to:

  • Send marketing emails or SMS
  • Use non-essential cookies
  • Conduct personalised advertising

You may withdraw consent at any time.


4. Marketing & Communications

If you opt in to receive marketing communications, we may send promotional emails or SMS messages.

We use Klaviyo to manage our marketing communications.

You can unsubscribe at any time by:

  • Clicking the unsubscribe link in any marketing email
  • Replying STOP to SMS messages
  • Contacting us directly


5. Online Advertising & Enhanced Conversions

We use Google Ads Enhanced Conversions to measure the effectiveness of our advertising.

This involves securely hashing certain customer data (such as email address) using SHA-256 before transmitting it to Google for conversion tracking purposes.

We rely on your consent (via our cookie banner) for this processing.

For further information, please see Google’s Privacy Policy.


6. Cookies

We use cookies and similar technologies to:

  • Enable essential website functionality
  • Analyse traffic and performance
  • Personalise content
  • Deliver targeted advertising

You can manage your cookie preferences through our cookie consent banner.

Further details are available in our Cookie Policy.


7. Who We Share Your Data With

We may share your personal data with trusted third parties where necessary, including:

  • Shopify (our ecommerce platform provider)
  • Payment processors
  • Delivery couriers
  • Klaviyo (email & SMS marketing)
  • Trustpilot (review collection)
  • Google (advertising and analytics services)
  • Professional advisers (legal and accounting)
  • Fraud prevention and security services

We do not sell your personal data.


8. International Data Transfers

Some of our service providers (including Shopify, Klaviyo and Google) may process data outside the United Kingdom.

Where this occurs, we ensure appropriate safeguards are in place, including:

  • UK International Data Transfer Agreements (IDTAs)
  • Standard Contractual Clauses
  • Adequacy decisions recognised by the UK Government


9. Data Retention

We retain personal data only for as long as necessary, including:

  • Order records: typically retained for 6 years for accounting and tax purposes
  • Marketing data: retained until you withdraw consent
  • Call recordings: retained for a limited period for quality and security purposes
  • Website analytics data: retained in accordance with platform settings

When data is no longer required, it is securely deleted or anonymised.


10. Your Rights

Under UK GDPR, you have the right to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request erasure of your data
  • Request restriction of processing
  • Object to processing based on legitimate interests
  • Request data portability
  • Withdraw consent at any time (where applicable)

To exercise any of these rights, contact:

orders@justfabrics.co.uk

We may need to verify your identity before responding.

11. Complaints

If you are unhappy with how we process your personal data, please contact us first.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

www.ico.org.uk


12. Third Party Websites

Our website may contain links to third-party websites. We are not responsible for their privacy practices. Please review their policies separately.


13. Security

We implement appropriate technical and organisational measures to protect your personal data.

However, no method of internet transmission is completely secure, and we cannot guarantee absolute security.


14. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website with the updated date.