Last Updated: June 2026

We are committed to protecting and respecting your privacy. This policy explains how we collect, use, and look after your personal data when you visit our website, contact us, or use our services.

1. Important Information & Who We Are

Jo Smith is the data controller responsible for your personal data (referred to as “we”, “us” or “our” in this policy).

If you have any questions about this privacy policy, including any requests to exercise your legal rights, please contact our data team:

  • Full name: Jo Smith

  • Email address: jo@josmith.co.uk

2. The Data We Collect About You

Personal data means any information about an individual from which that person can be identified. We may collect, use, store, and transfer different kinds of personal data about you, grouped as follows:

  • Identity Data: Includes first name, last name, username, or title.

  • Contact Data: Includes billing address, delivery address, email address, and telephone numbers.

  • Technical Data: Includes internet protocol (IP) address, browser type and version, time zone setting, operating system and platform, and other technology on the devices you use to access this website.

  • Usage Data: Includes information about how you use our website, products, and services.

  • Marketing and Communications Data: Includes your preferences in receiving marketing from us and your communication preferences.

3. How We Use Your Personal Data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

  • To perform a contract we are about to enter into or have entered into with you.

  • Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.

  • Where we need to comply with a legal or regulatory obligation.

Purpose Limitation & Compatibility

In line with UK data protection laws, we only process your data for the purposes for which we collected it. If we need to use your personal data for an unrelated purpose, we will notify you and explain the legal basis which allows us to do so.

4. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies (like pixels) to distinguish you from other users.

Important Update: In accordance with the latest ICO guidelines under the Data (Use and Access) Act, we categorise our tracking technologies as follows:

  • Strictly Necessary: Essential for the website to function (e.g., remembering shopping baskets or security). These do not require your consent.

  • Statistical / Analytics: Used solely to collect aggregate information about how our site is used so we can make service improvements. While these are low-risk, we provide you with a clear, free option to object to this tracking via our cookie preference panel.

  • Marketing & Affiliate Pixels: We explicitly require your prior, active consent before deploying any tracking technologies used for targeted advertising or affiliate conversion tracking.

You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly.

5. How to Make a Data Protection Complaint

We aim to resolve any data privacy queries or concerns directly. In compliance with the statutory complaints duty under UK law, we operate a formal internal complaints procedure:

  • How to lodge a complaint: If you believe your data has been handled incorrectly, please email us directly at jo@josmith.co.uk with the subject line “Formal Data Protection Complaint”.

  • Our timeline: We will formally acknowledge receipt of your complaint within 30 days. We will investigate your concerns without undue delay, keep you informed of our progress, and provide a formal written outcome.

  • Escalation: If you remain unsatisfied with our response or how we handle your complaint, you have the right to lodge a formal complaint at any time with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues.

6. Your Legal Rights

Under certain circumstances, you have rights under UK data protection laws in relation to your personal data, including the right to:

  • Request access to your personal data (a “data subject access request”).

  • Request correction of the personal data that we hold about you.

  • Request erasure of your personal data.

  • Object to processing of your personal data where we are relying on a legitimate interest.

  • Request restriction of processing of your personal data.

  • Request the transfer of your personal data to you or to a third party.

  • Withdraw consent at any time where we are relying on consent to process your personal data.

If you wish to exercise any of the rights set out above, please contact us.