1. Introduction
This Privacy Policy explains how JOVAP by ANDREA GARLAND LTD ("we", "our", "us") collects, uses, and protects your personal data when you use our website https://jovap.com ("the Site"), purchase our products, or contact us. We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Data controller
The data controller responsible for your personal information is:
JOVAP by ANDREA GARLAND LTD
39 Steeple Close, Poole, Dorset, BH17 9BJ, United Kingdom
Email: support@jovap.com
Company No: 08014388 | VAT: GB132311468
3. Data we collect
We collect the following categories of data when you interact with our Site or make a purchase:
- Identification details: name, email address, and contact information provided at checkout or through contact forms.
- Transaction data: order details, billing information, and payment reference numbers (we do not store full card details).
- Communication data: messages, feedback, or support requests you send to us.
- Customisation data: design preferences or files you submit for made-to-order digital products.
- Technical data: IP address, device type, browser, and limited usage data for site functionality and security.
- Newsletter data: email address (if you choose to subscribe).
4. How we use your data
We use your personal data to:
- Process and deliver your digital orders;
- Provide customer service and respond to enquiries;
- Manage transactions and send order confirmations;
- Deliver made-to-order digital content and revisions;
- Send optional newsletters or updates (only if you consent);
- Comply with legal, accounting, and tax obligations;
- Improve the Site, products, and user experience.
5. Legal basis for processing
Under UK GDPR, we rely on the following legal bases:
- Contract: processing your order and fulfilling our contractual obligations.
- Consent: sending marketing emails or newsletters (only if you opt-in).
- Legal obligation: maintaining records required by law.
- Legitimate interests: improving site functionality and preventing fraud.
6. Cookies
At present we do not use cookies for analytics or marketing. In the future we may use cookies to enhance user experience, perform analytics, or support advertising. If we do so, a clear cookie banner will appear allowing you to consent or manage preferences in accordance with UK privacy law.
7. Sharing your data
We do not sell or rent personal data. We may share limited data with:
- Service providers such as payment processors (e.g., Stripe) to process payments securely;
- Website hosting and maintenance providers necessary for site operation;
- Professional advisers and legal or tax authorities where required by law.
All third parties are required to process your data lawfully, securely, and only for specified purposes.
8. Data storage & security
We store your data on secure servers located within the United Kingdom or European Economic Area (EEA). We apply technical and organisational measures to prevent unauthorised access, loss, or misuse of personal information. Access is restricted to authorised personnel only.
9. Data retention
We retain personal data only as long as necessary to fulfil the purposes for which it was collected or to comply with legal and accounting obligations. After this period, data will be deleted or anonymised.
10. Your rights
Under UK GDPR you have the following rights:
- Access your personal data and obtain a copy;
- Request correction of inaccurate or incomplete data;
- Request deletion of data (where lawful to do so);
- Object to processing based on legitimate interests;
- Withdraw consent at any time for marketing communications;
- Request data portability in a machine-readable format;
- Lodge a complaint with the UK Information Commissioner’s Office (ICO).
To exercise any of these rights, contact us at support@jovap.com.
11. International transfers
If we transfer personal data outside the UK or EEA, we will ensure appropriate safeguards are in place, such as standard contractual clauses approved by the UK or EU authorities, to ensure data protection standards equivalent to those in the UK.
12. Marketing communications
We may offer a newsletter or promotional emails. You will only receive these communications if you have opted in. You may unsubscribe at any time using the link in the email or by contacting us directly.
13. Third-party links
Our Site may contain links to third-party websites. We are not responsible for the content or privacy practices of those websites. You should read their own privacy policies before providing personal data.
14. Children
Our Site is not intended for use by children under 16 years old. We do not knowingly collect personal data from minors. If you believe a child has provided us with personal information, please contact us and we will remove it promptly.
15. Updates to this policy
We may update this Privacy Policy from time to time. The latest version will always be published on this page with the date of the last update. We recommend reviewing this page periodically.
16. Contact us
For privacy-related enquiries, data access requests, or complaints, contact us at:
JOVAP by ANDREA GARLAND LTD
39 Steeple Close, Poole, Dorset, BH17 9BJ, United Kingdom
Email: support@jovap.com
Phone: +44 7348 033304
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data has been handled unlawfully.