
At Journey Arc, we respect your privacy and are committed to protecting your personal information. This policy explains how we collect, use, and safeguard your data when you visit our website or make a purchase.
Information We Collect
Information You May Provide:
- Account details: Name, email address, shipping/billing addresses, phone number
- Order information: Purchase history, payment details (processed securely)
- Communications: When you contact us via email, social media, or customer service
- Marketing preferences: Email subscription choices and communication preferences
- Reviews and feedback: Product reviews, survey responses, social media interactions
Information We Collect Automatically:
- Website usage: Pages visited, time spent, device information, browser type
- Cookies and tracking: To improve your browsing experience and remember preferences
- Analytics: Via Google Analytics to understand how our site is used
- IP address and location: For fraud prevention and localised content
How We Use Your Information
- Order fulfilment: Processing, packaging, and shipping your purchases
- Customer service: Responding to enquiries, resolving issues, and providing support
- Marketing communications: Sending newsletters, product updates, and promotional offers (only with your consent)
- Website improvement: Analysing usage patterns to enhance your shopping experience
- Fraud prevention: Protecting against fraudulent transactions
- Legal compliance: Meeting our legal and regulatory obligations
- Personalisation: Tailoring content and recommendations to your interests
Legal Basis for Processing (UK GDPR)
We process your data based on:
- Contract performance: To fulfil your orders and provide services
- Legitimate interests: For marketing, analytics, and business operations
- Consent: For marketing emails and non-essential cookies
- Legal obligation: For tax, accounting, and regulatory compliance
Information Sharing
We never sell, rent, or trade your personal information.
We only share your data with trusted partners:
- Printful: Our fulfilment partner (for order processing and shipping)
- Shopify: Our e-commerce platform (for website functionality and payment processing)
- Klaviyo: Our email marketing platform (only if you subscribe)
- Payment processors: For secure transaction processing
- Analytics providers: Google Analytics (anonymised data)
- Legal requirements: When required by law, court order, or to protect our rights
Marketing Communications
- Email marketing: We'll only send promotional emails if you opt-in
- Social media: We may interact with your public social media content
- Unsubscribe: You can opt-out anytime using the unsubscribe link or contacting us
- Preferences: You can update your communication preferences in your account
Your Rights (UK/EU GDPR)
You have the right to:
- Access your personal data and receive a copy
- Rectify inaccurate or incomplete information
- Erase your data (subject to legal retention requirements)
- Restrict processing of your data
- Data portability (receive your data in a machine-readable format)
- Object to processing based on legitimate interests
- Withdraw consent for marketing communications anytime
- Lodge a complaint with the Information Commissioner's Office (ICO)
To exercise these rights, contact us at thejourneyarc@gmail.com
Data Security
We take your data security seriously:
- Secure platform: Our website is hosted on Shopify, which provides enterprise-grade security and SSL encryption
- Payment security: All payments are processed through PCI DSS compliant systems
- Access controls: We limit access to personal information to authorised personnel only
- Trusted partners: We only work with reputable service providers who maintain high security standards
- Regular monitoring: We regularly review our security practices and monitor our accounts
Cookies Policy
We use different types of cookies:
- Essential cookies: Required for website functionality
- Analytics cookies: To understand how you use our site
- Marketing cookies: For personalised content (with consent)
- Preference cookies: To remember your settings
Managing cookies: You can control cookies through your browser settings, though some website features may not work properly if disabled.
Data Retention
We retain your information for:
- Order and customer data: 7 years (for legal/tax purposes)
- Marketing data: Until you unsubscribe or request deletion
- Website analytics: 26 months (Google Analytics default)
- Customer service records: 3 years for quality and training purposes
International Data Transfers
Some of our service providers may process data outside the UK/EU. We ensure appropriate safeguards are in place through our choice of reputable, compliant service providers.
Third-Party Links
Our website may contain links to other sites. We're not responsible for their privacy practices. Please review their privacy policies before providing any information.
Children's Privacy
We don't knowingly collect information from anyone under 16. If you're a parent/guardian and believe we have collected information about your child, please contact us immediately.
Changes to This Policy
We may update this Privacy Policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal, or regulatory reasons.
Contact Information
Questions about this privacy policy or your personal data?
Email: thejourneyarc@gmail.com
Post: Victory Road, SW19 1HN - full address available upon request
For data protection enquiries: Contact us at the above email with "Data Protection" in the subject line.
Supervisory Authority: You can also contact the UK Information Commissioner's Office (ICO) at ico.org.uk