Jellybops Ltd Privacy Policy
This Privacy Policy describes how Jellybops Ltd (“we”, “us” or “our”) collects, uses and shares personal information when you purchase an item from us, contact us, request a personalised product, or otherwise use our services through Etsy.
This Privacy Policy does not apply to the practices of third parties that we do not own or control, including Etsy. You should also refer to Etsy’s own Privacy Policy for information about how Etsy processes your personal information.
Information We Collect
To fulfil your order, we may receive information that you have authorised Etsy to provide to us, including your:
name;
email address;
postal/delivery address;
order and product details;
personalisation wording, names, dates or messages supplied for your order; and
any photographs, images or other information that you voluntarily provide for use on a personalised product.
We only request and use information that is reasonably necessary to create your personalised item, fulfil your order, communicate with you and provide customer service.
Etsy's own example specifically anticipates sellers receiving names, email addresses, postal addresses, payment/order information and additional information required for custom orders.
Why We Need Your Information and How We Use It
We rely on appropriate legal bases to collect, use and share your personal information, including:
To provide our services and fulfil our contract with you, including making and personalising your products, processing your order, arranging delivery, answering queries and resolving order problems.
To comply with our legal obligations, including accounting, tax, fraud prevention and other regulatory requirements.
For our legitimate business interests, where those interests are not overridden by your rights, including operating and improving our business, maintaining appropriate business records, preventing misuse or fraud and complying with Etsy's Seller Policies and Terms of Use.
With your consent, where consent is specifically required, for example certain marketing communications. Where processing is based on consent, you may withdraw that consent.
These are broadly the same categories Etsy gives sellers in its sample privacy-policy guidance.
Personalised Products, Photographs and AI-Assisted Design Tools
Some Jellybops products are personalised using photographs, names, dates, messages or other information supplied by customers.
Where necessary to create your personalised product, artwork or proof, we may use trusted third-party graphic-design, image-processing and AI-assisted tools.
This may involve securely processing an image, photograph, personalisation wording or other information that you have supplied.
We only provide information that is reasonably necessary for the creation of your product. We do not intentionally provide unnecessary information such as your delivery address, payment information or Etsy account details to design or AI-assisted services.
Where we use AI-assisted tools, they are used to assist with creating or editing artwork and product imagery. We do not use automated decision-making or profiling to make decisions about customers.
Customer information submitted to us is not sold to AI providers for advertising purposes.
Customer Photographs
If you provide a photograph for a personalised product, you confirm that you have the necessary permission to provide that photograph to us and to have it reproduced as part of your requested product.
Where a photograph depicts another person, including a child, you should only provide it where you are entitled to do so.
Photographs supplied for personalised products will only be used for fulfilling the relevant order unless you separately give us permission to use them for another purpose, such as promotional material.
Information Sharing and Disclosure
We share customer information only where reasonably necessary.
This may include:
Etsy
We share and receive information through Etsy as necessary to provide our services and comply with Etsy's Seller Policies and Terms of Use.
Delivery companies and fulfilment providers
We may provide your name, delivery address and other necessary delivery information to postal operators, couriers and other delivery providers so that your order can be delivered.
Technology and design service providers
We may use trusted providers of software, cloud storage, graphic-design services, image-processing services and AI-assisted tools where reasonably necessary to create, manage or fulfil personalised orders.
Only information necessary to provide the relevant service is shared.
Professional and business service providers
We may disclose information where necessary to accountants, bookkeeping providers, IT providers or other professional advisers assisting us with legitimate business functions.
Legal requirements
We may collect, use, retain or disclose information where we reasonably believe this is necessary to comply with a legal obligation, court order or government request; establish or defend legal claims; prevent fraud or unlawful activity; enforce our agreements; or protect the rights and safety of our customers, Jellybops or others.
Etsy similarly tells sellers to identify Etsy itself, service providers such as delivery companies, legal disclosures and other limited disclosures in their privacy policies.
Data Minimisation and Security
We take reasonable steps to limit personal information to what is required for the relevant purpose.
For personalised design work, wherever reasonably possible we avoid sharing unrelated identifying information with third-party design or AI-assisted services.
We take reasonable organisational and technical measures to protect customer information against unauthorised access, loss, misuse or disclosure.
However, no online service or method of electronic storage can guarantee absolute security.
Data Retention
We retain personal information only for as long as reasonably necessary to:
fulfil orders and provide customer support;
maintain appropriate business and accounting records;
resolve disputes;
enforce agreements; and
comply with applicable legal, tax and regulatory requirements.
Order and transaction records may therefore be retained for longer than production files, photographs or artwork used solely to produce a personalised item.
Where photographs or design files are no longer reasonably required for fulfilment, customer service, record keeping or a legal purpose, we may delete them earlier than the underlying order record.
Etsy expressly says sellers should disclose their retention period or the criteria used to determine it rather than simply keeping data indefinitely.
Transfers of Personal Information Outside the UK
Some of the technology or service providers used by Jellybops or Etsy may process or store information outside the United Kingdom.
Where a restricted international transfer of personal information takes place, we take reasonable steps to ensure that an appropriate lawful transfer mechanism or safeguard is in place where required by UK data-protection law.
Depending on the circumstances, this may include transfers to countries covered by UK adequacy regulations or the use of approved contractual safeguards.
Current ICO guidance confirms that restricted transfers may require safeguards such as the UK International Data Transfer Agreement or the UK Addendum, together with the appropriate data-protection assessment.
