1. Who We Are

Jaffa Saba is an independent brand based in England. We operate jaffasaba.com. For any privacy-related queries, contact us at jaffasabainfo@gmail.com.

2. What Data We Collect

When you make a purchase or create an account, we may collect:

• Name and contact details (email address, phone number)
• Billing and shipping address
• Payment information (processed securely by Shopify — we do not store card details)
• Order history and transaction data
• Email address if you subscribe to our newsletter

When you browse the site, we may also collect technical data such as your IP address, browser type, and pages visited through Shopify's built-in analytics.

3. How We Use Your Data

We use your data to:

• Process and fulfil your orders
• Send order confirmations and shipping updates
• Respond to customer service enquiries
• Send marketing emails if you have opted in (you can unsubscribe at any time)
• Improve the performance and experience of the site

4. Legal Basis for Processing

Under UK GDPR, we process your data on the following bases:

• Contract — to fulfil your order
• Legitimate interests — to improve our services and prevent fraud
• Consent — for marketing communications, which you can withdraw at any time

5. Data Sharing

We do not sell or share your personal data with third parties for their own marketing purposes. Your data may be shared with:

• Shopify Inc. — our e-commerce platform provider, who processes data on our behalf
• Shipping carriers — solely for the purpose of delivering your order
• Payment processors — to handle transactions securely

All third parties are required to handle your data in accordance with applicable data protection law.

6. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy, or as required by law. Order data is typically retained for 7 years for accounting purposes. You may request deletion of your data at any time (subject to legal obligations).

7. Your Rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing
• Data portability
• Withdraw consent at any time (where processing is based on consent)

To exercise any of these rights, contact us at jaffasabainfo@gmail.com. We will respond within 30 days.

8. Cookies

Our site uses cookies to enable core functionality such as shopping cart and checkout. Shopify may also use cookies for analytics and fraud prevention. You can control cookies through your browser settings, though disabling them may affect site functionality.

9. Security

We take reasonable technical and organisational measures to protect your data. Payment information is encrypted and processed by Shopify in accordance with PCI DSS standards. However, no method of transmission over the internet is completely secure.

10. Changes to This Policy

We may update this policy from time to time. Any changes will be posted on this page with an updated date. Continued use of the site after changes constitutes acceptance of the updated policy.

11. Complaints

If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.