Privacy & Cookie Policy

JS Group

Security and Privacy

Security:

JS Group online uses industry standard Transport Layer Security (TLS) encryption to ensure the highest security for credit card and personal details submitted to us over the Internet. Our security certificate is issued by DigiCert Inc and we use High Grade Encryption 256bit - US industry standard security software. Information passed between your computer and our website cannot be read in the unlikely event that it is intercepted by someone else.

Privacy Topics:

What information do we collect about you?
How will we use the information about you?
Marketing
Access to your information and correction
The Data Controller and contact details
Cookies
Other websites
Changes to our privacy policy
How to contact us

1. What information do we collect about you?

When you use our services.

During the registration process you will have signed-up to allow your funder to share certain information about you with us, in order for us to receive details of the funds available to spend. We collect the following pieces of information about you when you register with us, in addition to the information provided by your funder, or to place an order for our products or services:

Email address
Name
Contact telephone number
Chosen passwords (encrypted)
ID number
Delivery and billing addresses

These are saved on a central database when a visitor registers. We use this information to manage your account (e.g. for 2 factor authentication security), for the purposes of account management, order tracking and so that we may update you on the status of the order you placed. IP addresses used are stored in case of security / fraud issues. No other personal information is stored on our website.

You can update and edit this information at any time by accessing 'View My Account'.

When we process your information for running the service, award management & order tracking, it is lawful for us to do so because we need this information to provide our services in accordance with providing the service to you. As such we rely on "contract" as our lawful basis for processing.

If you complete a survey or enter a competition

We also collect information when you voluntarily complete customer surveys, provide feedback and participate in competitions.

It will be obvious to you when you provide your data for these purposes and clear whether any information is optional. Typically, this means, we collect and process you name and contact details as well as any information you choose to provide us (e.g. feedback, survey responses, etc.)

It is lawful for us to use your data for these purposes. When we use your information to ask you to complete a survey or provide feedback, we rely on our legitimate interest to help improve our services. If you enter a competition, our lawful basis will be contract.

If you contact us

We will collect certain information from you and possibly record that information against your account where relevant, if you contact us via email, via our website, etc. We will use this information to respond to your enquiry and as such rely on contract as our lawful basis for processing.

If you contact us via email, your email will be forwarded to the relevant mailbox and will be stored within the relevant person or team's mailbox on their device(s).

For marketing purposes

We would like to send you information about products and services which may be of interest to you. We may also use contents of abandoned baskets within a limited period of time (45 days) to re-market to you. If you have consented to receive marketing, you may opt out at a later date. You have a right at any time to stop us from contacting you for marketing purposes.

If you no longer wish to be contacted for marketing purposes, you can opt-out at any time. Please note that if you opt out you may still receive non-promotional messages, such as balance updates or service messages about your scheme.

Website usage information

Website usage information is collected using cookies and certain information is available via your internet browser, such as what browser you used and it's version, any referring website address, etc.) as well as standard website information such as IP addresses.

This information will only be considered your personal information if we are able to associate it to a specific account.

Data security

JS Group recognises the concern of our customers regarding privacy of information. The personal information which we hold will be held securely in accordance with our internal security policy and the law.

No personal credit or debit card information is stored by JS Group. We use SagePay to process all credit card orders. SagePay are an industry leading card payment gateway and financial information is held on a PCI-compliant secure database with very restricted access. These security measures prevent unauthorised release of or access to personal information.

A secure server is used and all payment information is input directly onto SagePay servers. We ensure that any personal information (such as address, telephone numbers or email given when placing an order) is stored securely on our servers.

All of our users' information, not just the personal information mentioned above, is restricted in our offices. Only employees who need the information to perform a specific job (for example, our finance department or a customer service representative, either in one of our stores, our distribution centre or head office) are granted access to personally identifiable information.

Retention of personal data

Unless stated elsewhere, we will not keep data for any longer than is necessary to manage customer accounts and transactions. We will keep this data for as long as it is lawful for us to do so (which could be up to 6 years after you stop using the service, or longer if required by law to do so).

2. How will we use the information about you?

In addition to what is set out above, we collect information about you to process your order, manage your account and, if you Consent, to email you about other products and services we think may be of interest to you. We use your information collected from the website to personalise your repeat visits to our website.

When processing your order, we may send your details to our third party suppliers and couriers (e.g. delivery address and contact telephone number), as necessary to enable them to process your order. We may subsequently share relevant information as required by legal or fraud prevention agencies.

If you are withdrawing funds from the website, we will pass limited information (name, email address, telephone number and transaction reference number), to our partner NatWest, so that you can securely pay your funds into your bank account. We do not collect or process bank details.

We will e-mail you to keep you up to date with your orders.

We have the right to contact users who have supplied their contact information in relation to orders placed and technical website related issues.

3. Marketing

Third-party processors

We use a number of third-party cloud-based services for the purposes of effectively running our business and providing our services to you. We also use a number of third-party organisations, e.g. accountants, HR support, etc.

In all cases where we are using a third-party service or company, we will only provide the minimal amount of information for the purposes of delivering the service to us and to meet our requirements.

We always carry out due diligence against all our third-party suppliers for the purposes of ensuring their compliance with data protection, maintaining adequate security of your data and ensuring they apply adequate data protection principles to the processing of the data we supply. We also make sure a legally binding contract (sometimes called a Data Processing Agreement or DPA) is also in place to protect your data.

Transfers of data outside the UK

If we intend to transfer your information outside the UK we will always ensure it is lawful for us to do so, by ensuring an appropriate safeguard for your data and your data rights are upheld.

Your rights

You have the following rights as an individual which you can exercise in relation to the data we store and process about you. You can find more information about your rights on the Information Commissioner's website: https://ico.org.uk/for-the-public/

If you would like to exercise your rights, or if you have any questions, please use the contact information below.

4. Access to your information and correction

Access to your data (Data Subject Access Request)

You have the right to ask us about what data we hold about you, how we process it and to ask us to provide you with a copy of the information, free of charge and within one calendar month of your request.

To make a request for any personal information we hold and process about you, we would prefer it if you could put it in writing or in an email to the addresses above. We will need to verify your identity before providing the information and where necessary may contact you further to ensure we understand what data you are requesting. We will send your information within 30 days and there is no charge for this.

Keeping your data up to date

It is important that any of your data that we process is kept up to date. We will from time to time ask you to verify your contact details but if you wish to update any information we hold about you, please contact us with your updated details.

Erasure of your data (the "right to be forgotten")

Under some circumstances you may request us to delete your data from our systems. Where this is possible (e.g. we don't have any legal purpose for continuing to process your data) we will erase it from our systems. If it's not possible for us to delete your data, we will explain the reasons why.

Restriction of processing

Under certain situations you can limit how we process your data (e.g. not to process it till is updated, stop your data being deleted)

How to withdraw consent and object to processing

Where we are processing your data and needed to ask your permission to do so, you are able to withdraw your consent at any time. If you wish to stop receiving our marketing emails you can do so, by clicking on the "unsubscribe" link at the bottom of the email or by contacting us.

You should also contact us, if you wish to raise concerns about the way we are processing your data or would like to raise an objection to the processing.

Portability

Your right to portability allows you to request a machine-readable format of the data you supplied to us and associated service logs (where we store them).

Automated decision making and profiling

We do not carry out any automated processing or profiling of your personal data.

Complaints

You have the right to lodge a complaint to us if you feel we are handling your data in an inappropriate way. We would rather you brought your complaint to us (using the contact details below) in the first instance, but if you are dissatisfied with our response to your complaint you also have the right to complain to the ICO at https://ico.org.uk/make-a-complaint.

5. Data Controller and Contact Details

For all information that we collect from you JS Group is the Data Controller and can be contacted at the address at the end of this policy. The funder is the Data Controller for any information they supply to us for fund management purposes, JS Group is the Data Processor in this instance.

6. Cookies

Cookies are small pieces of information sent by a web server to a web browser, which allows the server to uniquely identify the browser on each page. JS Group uses a range of cookies including 'session cookies' which are automatically deleted from your computer when you close your browser. You are always free to decline our cookies if your browser permits, although in that case you may not be able to place an order on our website and other websites may not work. Our cookies contain numerical identifiers only, no personal information or passwords are saved in the cookie.

When you first visit our website you will be prompted to accept all cookies, reject all cookies or manage which cookies we use. Cookies necessary for the performance of the website though cannot be rejected (unless you remove them via your browser). You can change these cookies settings anytime Manage Cookie Preferences

If you want to delete any cookies that are already on your computer, please refer to the instructions for your file management software to locate the file or directory that stores cookies. Our cookies will have the file names starting with johnsmith.co.uk. Information on deleting or controlling cookies is available at www.aboutcookies.org or www.allaboutcookies.org. You have the right to delete internet cookies placed on your hard drive. Please note that by deleting our cookies or disabling future cookies, it will erase the numerical identifier and our site will not recognise the visitor.

JS Group relies on the use of cookies to process orders. Whilst you do not need to allow your browser to accept cookies in order to browse much of our website, you must have cookies enabled if you wish to shop or register at JS Group. You can set your browser not to accept cookies. However as stated some of our website features may not function as a result.

7. Other websites

JS Group websites contain links to other websites and we are not responsible for the content or privacy practices of these external internet sites. Users should be aware and read the privacy policies of these external sites. This privacy statement is only applicable to information collected by JS Group.

8. Changes to our privacy policy

By entering this website you accept all the terms and conditions outlined in this privacy policy. This policy is effective as of 10th September 2026 and we reserve the right to change this policy at any time by notifying visitors of the existence and location of the new / revised privacy policy.

9. How to contact us

Please contact us if you have any questions about our privacy policy or information we hold about you:

JS Group can be contacted:
By post:
GDPR Department
JS Group
Engagement House
Units 3 & 4 West Quay Trade Park
West Quay Road
Southampton
SO15 1GZ
By email: ku/oc/htimsnhoj//RPDG

If you have any questions or comments about privacy, you can also contact us via our Enquiry Form