Privacy Policy

1. Overview & Data Controller

Welcome to JessAura London (“JessAura”, “we”, “us”, or “our”). We are committed to protecting the privacy, dignity, and personal data of every client who visits our digital boutique at jessaura.co.uk.

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the data controller responsible for your personal information is JessAura London Ltd, registered in the United Kingdom.

2. Personal Data We Collect

We may collect and process the following categories of personal information:

• Identity & Contact Data: Name, delivery and billing address, email address, and contact telephone number when you place an order or create an account.
• Transaction & Order Data: Details of the pieces you purchase, sizes, bespoke order instructions, order timestamps, fulfillment status, and returns records.
• Payment Information: All payment transactions are encrypted and processed through certified Tier-1 payment partners (such as Stripe, Apple Pay, and PayPal). JessAura never stores your full credit or debit card numbers on our servers.
• Account & Preference Data: Login credentials managed securely via Clerk, saved shipping addresses, saved wishlist items, and marketing communication preferences.
• Technical & Browsing Data: IP address, browser type and version, device identifier, time zone setting, operating system, and pages viewed during your visit.

3. How We Use Your Data

Your personal data is processed for the following legitimate purposes:

• Order Fulfilment: Processing your purchases, arranging delivery via tracked courier (e.g., Royal Mail, DPD), and sending order confirmation and dispatch updates.
• Customer Concierge: Answering sizing questions, fabric care advice, exchange requests, and order inquiries via email and WhatsApp.
• Account Management: Allowing registered clients to view past orders, track deliveries, save multiple delivery addresses, and manage their personal wishlists.
• Marketing & Private Drop Previews: Delivering curated newsletter updates, seasonal Kerala edit drops, and exclusive invitations only where you have explicitly opted in.
• Security & Fraud Prevention: Protecting our store and clients against fraudulent transactions, unauthorized access, and cyber threats.

4. Legal Grounds for Processing

Under UK data protection laws, we only process your personal data when we have a lawful basis:

• Contractual Necessity: To fulfill our contract with you when you purchase pieces from our store.
• Consent: Where you have provided clear consent (for example, subscribing to our VIP newsletter or accepting marketing cookies). You may withdraw consent at any time.
• Legitimate Interests: To improve our website performance, understand client browsing preferences, and ensure store security.
• Legal Obligation: To comply with financial accounting, VAT record-keeping, and legal requirements.

5. Third-Party Sharing

We never sell, rent, or trade your personal data. We only share essential information with trusted service partners who assist us in operating our boutique:

• Logistics & Delivery Couriers: Royal Mail, DPD, DHL, and local parcel carriers to deliver your orders.
• Payment Processors: Stripe, Apple Pay, Google Pay, and PayPal for PCI-DSS compliant secure checkout.
• Cloud Infrastructure & Database: Convex Cloud and Vercel for fast, encrypted cloud database and website hosting.
• Authentication Services: Clerk for enterprise-grade encrypted user login and multi-factor security.

6. Cookies & Tracking Technologies

Cookies are small text files stored on your device that help our website function efficiently and remember your preferences.

• Essential Cookies: Required for fundamental site functions, such as your shopping bag, secure checkout, and active login session.
• Performance & Analytics Cookies: Help us understand which collection pages are most visited so we can refine our client experience.
• Preference Cookies: Remember your currency and layout preferences.

You can adjust your cookie settings at any time by clicking the button below or managing your browser preferences.

7. Your GDPR Rights (Registered & Guest Users)

Under the UK and EU GDPR, you have the following rights regarding your personal information:

• Right of Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can correct or update inaccurate personal details directly in your Account Settings or by contacting us.
• Right to Erasure (Right to be Forgotten): You can request the deletion of your account and personal data from our systems.
• Right to Data Portability: You can request your account details and order records in a machine-readable format.
• Right to Withdraw Consent: You can opt out of marketing communications at any time with one click in the email footer or in your account preferences.

To exercise any of these rights, registered clients can visit Account Settings or contact our Data Protection Concierge at concierge@jessaura.co.uk.

8. Security & Data Retention

We maintain strict technical and organizational safeguards to protect your personal data against unauthorized disclosure, alteration, or loss. All traffic is encrypted over 256-bit SSL/TLS.

We retain personal transaction records only as long as necessary to fulfill the purposes for which they were collected, including statutory UK tax and warranty obligations (typically 6 years for accounting compliance).

9. Data Concierge & Inquiries

If you have any questions about this Privacy Policy or wish to exercise your data rights, please reach out to us: