Privacy Policy

Last updated: 1 November 2026

This privacy notice explains what personal data we collect when you use the Jast Breathe website, why we collect it, who we share it with and the rights you have under UK data protection law (the UK GDPR and the Data Protection Act 2018).

1. Who we are

This website is run under the name Jast Breathe. We decide how and why your personal data is used, which makes us the “controller” of that data.

Our full legal business name and postal address will be published here before the shop opens. In the meantime, you can contact us about anything in this notice using our contact form.

2. The personal data we collect

When you send us a message

Our contact form asks for your name, your email address, an optional subject and your message. When you submit the form, your message is sent to our business email inbox so that we can reply. The form is not used to sign you up to marketing.

The form also records basic statistics about how it is used, such as when it was viewed and for how long, linked to a random identifier for that visit. These statistics are kept on our website and help us check the form works. Based on our checks, they do not include the text you type.

When you browse our website

Like most websites, our hosting provider processes technical information when you visit, such as your IP address, browser type and the pages you request. This is needed to deliver the website to you and keep it secure.

Our website also uses a small amount of storage on your device. Our Cookie Policy explains exactly what is used and why.

When ordering opens

Online ordering is not available yet. When it opens, we will need the following to process your order:

• your name, email address, and billing and delivery addresses
• a phone number, if we ask for one at checkout to help with delivery
• the items you order, the price you pay and the status of your order and payment
• any messages you send us about your order, returns or refunds

We plan to use Stripe to take card payments. You will enter your card details into Stripe’s secure payment fields, and we will not store your full card details on our website.

3. Why we use your data and our lawful basis

UK data protection law says we must have a lawful basis for using your personal data. We rely on:

• Replying to your messages: our legitimate interest in answering enquiries, or taking steps at your request before you enter into a contract with us.
• Running and securing our website: our legitimate interest in providing a website that works properly and is protected against misuse.
• Processing and delivering your order (when ordering opens): performing our contract with you.
• Keeping tax and accounting records (when ordering opens): complying with our legal obligations.

We do not send marketing emails. If we decide to do so in the future, we will only send them where the law allows, for example with your consent, and every message will include a simple way to opt out.

4. Who we share your data with

We do not sell your personal data. We only share it with organisations that help us run our website and business, and only as far as they need it:

• Hostinger, which hosts our website and provides the tools we use to run it.
• Our business email provider, which receives and stores the messages you send us.
• Stripe (when ordering opens), to take payments securely and help prevent fraud.
• A delivery company (when ordering opens), which will receive your name, delivery address and the details needed to deliver your parcel. We expect to use Royal Mail; we will confirm this here before the shop opens.
• Professional advisers, such as an accountant or solicitor, where needed.

We may also share information where the law requires us to, for example with HM Revenue & Customs or to respond to a lawful request.

5. Data processed outside the UK

Some of our service providers may process data outside the UK. Where that happens, UK data protection law requires the data to be protected by an appropriate safeguard, such as UK adequacy regulations or the UK International Data Transfer Agreement. You can contact us for more information about this.

6. How long we keep your data

• Messages you send us: only for as long as we need them to deal with your enquiry and any follow-up.
• Order information (when ordering opens): for as long as we need it to fulfil your order, deal with returns, refunds or claims, and keep the records the law requires for tax and accounting.
• Technical information: for the periods our hosting provider uses to keep the website secure and running.

When we no longer need your data, we will delete it or make it anonymous.

7. Your rights

Under UK data protection law you have the right to:

• ask for a copy of the personal data we hold about you
• ask us to correct data that is wrong or incomplete
• ask us to delete your data
• ask us to restrict how we use your data
• object to us using your data where we rely on our legitimate interests
• ask us to transfer data you gave us to you or another organisation, in some circumstances
• withdraw your consent at any time, where we rely on consent

Some of these rights only apply in certain situations. To use any of them, send us a message using our contact form. We do not usually charge a fee, and we must normally respond within one month.

8. Concerns and complaints

If you are unhappy with how we have used your personal data, please contact us first so that we can try to put things right.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator. You can contact the ICO through its website at ico.org.uk/make-a-complaint or by calling its helpline on 0303 123 1113.

9. Children

We do not knowingly collect personal data from children. Any minimum age for placing an order will be set out in our Terms & Conditions before ordering opens.

10. Changes to this notice

We will update this notice when our business details are added, when ordering opens and whenever the way we use personal data changes. The date at the top shows when it was last updated.