Privacy Policy
Privacy Policy
Last updated: July 2026
JustImagine ("we", "us", "our") is committed to protecting your personal information. This policy explains what data we collect, why we collect it, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who We Are
JustImagine operates the website justimagine.mobi ("the Site"). For UK GDPR purposes, we are the data controller.
What Data We Collect
- Order information: name, email address, billing address, shipping address, payment details (processed securely by Shopify Payments — we do not store card numbers).
- Account information (if you create an account): email address, name, order history.
- Communication data: messages you send us by email or contact form.
- Usage data: IP address, browser type, pages visited, and time on site — collected via cookies and analytics tools.
Why We Use Your Data (Legal Bases)
- Contract performance: to process and fulfil your order, send order confirmations, and handle returns.
- Legal obligation: to comply with tax, accounting, and consumer law requirements.
- Legitimate interests: to improve the Site, prevent fraud, and respond to your queries.
- Consent: to send marketing emails, where you have opted in. You may withdraw consent at any time by clicking "Unsubscribe" in any email.
How We Share Your Data
We share your data with:
- Shopify Inc.: our e-commerce platform, which processes orders and stores data on our behalf.
- Third-party suppliers: your name and shipping address are passed to our fulfilment partners to ship your order. These suppliers are contractually required to handle your data securely and not use it for any other purpose.
- Carriers: your name and address are shared with the delivery carrier handling your shipment.
- Payment processors: Shopify Payments and/or Stripe, operating under their own privacy policies.
We do not sell your personal data to any third party.
International Transfers
Some of our service providers (including Shopify) may process data outside the UK. Where this occurs, appropriate safeguards are in place in accordance with UK GDPR requirements.
Data Retention
We retain order and transaction records for 7 years to comply with UK tax and accounting regulations. Marketing data is retained until you withdraw consent. Other data is kept for no longer than necessary.
Cookies
We use essential cookies required for the Site to function, and (with your consent) analytics cookies to understand how visitors use the Site. You can manage your cookie preferences via our cookie banner or your browser settings.
Your Rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request erasure of your data (subject to legal retention obligations)
- Object to or restrict certain processing
- Data portability
- Withdraw marketing consent at any time
To exercise any of these rights, please contact us through our contact form. We will respond within 30 days.
Complaints
You have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk if you believe we have mishandled your data.
Contact
You can reach us through our contact form.