Privacy Policy
SJM respects your privacy. This policy explains what personal information we collect through sjm.ac, why we collect it, who we share it with and the choices you have. We handle personal information in line with the EU General Data Protection Regulation (GDPR) and, where they apply to you, other privacy laws such as the UK GDPR.
01Information we collect
| Type | Examples | Source |
|---|---|---|
| Contact & order | Name, email, phone, shipping and billing address, items bought, order history | You, at checkout |
| Payment | Payment confirmation, last 4 digits and card brand (never your full card number) | Our payment processor |
| Marketing | Email address, drop alert preferences | You, when you sign up |
| Support | Messages, photos and details you send us | You |
| Device & usage | IP address, browser, device type, pages viewed, referring site, approximate location | Automatically, via cookies and server logs |
02How we use it
- To process, ship and support your orders, including returns and authenticity claims.
- To send transactional emails such as order and shipping confirmations.
- To send drop alerts and marketing, only where you have opted in. Every marketing email has an unsubscribe link, in line with EU e-privacy rules.
- To prevent fraud, bots and abuse of limited drops.
- To understand how the Site is used and make it better (analytics, only with your cookie consent where required).
- To meet legal, tax and accounting obligations.
03Legal bases (EEA/UK visitors)
Where the GDPR or UK GDPR applies, we rely on: performance of a contract (processing your order), legitimate interests (fraud prevention, Site security, improving the store), consent (marketing emails, non-essential cookies) and legal obligation (tax records).
04Who we share it with
We do not sell your personal information. We share it only with service providers who help us run the store, under contracts that require them to protect it:
- Payment processors (e.g. Stripe) — to take payment.
- Shipping carriers and fulfilment partners — to deliver your order.
- Email providers — to send order and marketing emails.
- Hosting, security and CDN providers (e.g. Cloudflare) — to serve and protect the Site.
- Analytics providers — only if you accept analytics cookies.
We may also disclose information if required by law, to protect our rights or users' safety, or as part of a sale or merger of the business.
05International transfers
Our service providers may store or process data outside your province or country, including in the United States. When that happens your information may be accessible to authorities there under local law. We use providers with appropriate safeguards in place.
06How long we keep it
We keep order records for as long as needed for tax and accounting purposes (generally up to 10 years, depending on local tax law). Marketing data is kept until you unsubscribe. Support messages are kept for up to 2 years. Server logs are kept for up to 90 days.
07Your rights
Depending on where you live, you can ask to access, correct or delete your personal information, withdraw consent, object to or restrict certain processing, or get a copy of your data. California residents can also ask what we collect and request deletion; we do not sell or "share" personal information for cross-context behavioural advertising.
To make a request, email [email protected]. We will respond within 30 days and may need to verify your identity. If you're not satisfied, you can complain to the data protection supervisory authority in the EU country where you live.
08Security
The Site is served over HTTPS, payments are handled by PCI-compliant processors and access to customer data is limited to people who need it. No system is 100% secure, but we take reasonable steps to protect your information and will notify you and the authorities of any breach where the law requires.
09Children
The Site is not directed at children under 13 and we do not knowingly collect their personal information. If you believe a child has given us information, contact us and we will delete it.
10Cookies
See our Cookie Policy for details on cookies and how to control them.
11Changes
We may update this policy. If the changes are significant we will post a notice on the Site or email you. The "last updated" date above shows when it last changed.
✉Contact
Questions about this page? Email [email protected] and a real person will get back to you within 2 business days.