Privacy Policy

Last Updated: 3rd September 2026

Joy Jen Studio Ltd (“we”, “us”, “our”) values your privacy and is committed to protecting your personal data. This policy explains what information we collect, how we use it, and your rights.

We use third-party services to operate our website, process orders, manage our newsletters and provide other business services. These providers may process personal data on our behalf or as independent controllers. Their own privacy policies may also apply to their processing of your personal data.

1. Who We Are

Joy Jen Studio Ltd is the data controller responsible for the personal data we process in connection with our website, Etsy shop, wholesale enquiries & orders, newsletters and other business activities.

You can contact us at: hello@joyjenstudio.com.

2. Information We Collect

We may collect the following information when you interact with us:

  • Website visitors – information such as your IP address, browser type, device information, cookies and analytics data, where applicable.

  • Etsy customers – name, delivery address, order details, messages and other information provided to us through Etsy that is necessary to fulfil your order and provide customer service.

  • Faire customers – name, delivery address, order details, messages and other information provided to us through Faire that is necessary to fulfil wholesale orders and provide customer service.

  • Wholesale customers and enquiries – name, business name, email address, telephone number, business address, order details and information contained in correspondence with us.

  • Newsletter subscribers – name, email address, marketing preferences and information about your subscription to our consumer or wholesale mailing lists.

  • Customer service and correspondence – information you provide when you contact us, including enquiries, feedback and communications relating to an order or our products.

  • Personalisation information – if you order a personalised product through Etsy or provide information for a gift message or other order note.

  • Financial and payment information – information needed for invoicing, accounting and payment records. Payments made through Etsy are processed by Etsy and its payment providers. Payments at studio open days may be processed using PayPal Point of Sale.

  • Device and browsing data – information collected through cookies and similar technologies, as described in Section 8.

Where we obtain contact information from publicly available sources, such as a business website, social media page or business directory, we may use it to contact businesses that we believe may be interested in Joy Jen Studio products, including for wholesale opportunities. We may also receive personal data from other people or organisations where it is necessary to respond to an enquiry or provide our products and services.

3. How We Use Your Data

We process your personal data to:

  • Operate and maintain our website.

  • Fulfil Etsy and Faire orders and provide related customer service.

  • Manage wholesale enquiries and process & fulfil wholesale orders received directly or through Faire.

  • Communicate with you about your orders, enquiries or other requests.

  • Send service-related messages where necessary, such as order or shipping communications.

  • Send our consumer or wholesale newsletters and other marketing communications where we are legally permitted to do so.

  • Manage your newsletter subscription and marketing preferences.

  • Maintain business, accounting and tax records and meet our legal obligations.

  • Protect our business, website and customers, including preventing fraud and maintaining website security.

  • Understand how our website is used and improve our products, services and customer experience, where permitted.

4. Legal Bases for Processing (UK GDPR)

We rely on the following legal bases when processing your personal data:

  • Contract – where processing is necessary to fulfil an order or provide services you have requested, including wholesale orders.

  • Legal obligation – where we need to process information to comply with legal, tax, accounting or other regulatory requirements.

  • Legitimate interests – where processing is necessary for purposes such as responding to enquiries, managing our business, improving our services, maintaining security and preventing fraud, provided that our interests do not override your rights.

  • Consent – where you have given consent for activities such as certain marketing communications or non-essential cookies where consent is required.

Where we rely on consent, you can withdraw it at any time.

5. Sharing Your Data

We only share personal data where necessary for the purposes described in this policy.

We may share information with:

  • Etsy and its relevant service providers, where necessary to process and fulfil Etsy orders.

  • Faire and its relevant service providers, where necessary to receive and manage wholesale orders and related customer information.

  • Squarespace, which hosts and operates our website and provides our email marketing service, including storing and sending our consumer and wholesale newsletters on our behalf.

  • PayPal Point of Sale, which we use to process payments made at studio open days and other in-person purchases.

  • Trunk Inventory, which manages our stock levels across different platforms.

  • Delivery providers, such as Royal Mail, DPD and other shipping companies, where necessary to deliver orders.

  • Accounting, payment or other business service providers, where necessary to operate our business, process payments or meet our legal obligations.

  • Professional advisers, where necessary, such as accountants or other professional service providers.

  • Law enforcement, regulators or other authorities, where we are legally required to do so.

  • A prospective buyer or successor to our business, where personal data needs to be transferred as part of a sale, merger, restructuring or similar business transfer.

We do not sell or rent your personal information to third parties.

6. Data Retention

  • Orders and financial records – retained for at least 6 years after the end of the relevant financial year where required for tax and accounting purposes.

  • Newsletter & marketing data – retained while you remain subscribed or otherwise within our marketing database, and for a reasonable period afterwards where necessary to maintain records of your preferences or opt-out.

  • Wholesale enquiries and customer records – retained for as long as reasonably necessary to manage the business relationship and meet legal or contractual obligations.

  • Customer service correspondence – retained for as long as reasonably necessary to deal with the enquiry and any related issues.

  • Browsing/analytics data – retained according to the relevant service provider's retention settings and our legitimate business needs.

7. Your Rights

Depending on the circumstances, you have rights under UK data protection law to:

  • Access and receive a copy of your personal data.

  • Ask us to correct inaccurate or incomplete information.

  • Request deletion of your personal data, subject to legal and other exceptions.

  • Request that we restrict how we use your personal data in certain circumstances.

  • Object to certain processing, including direct marketing.

  • Withdraw consent where we rely on consent to process your data.

  • Receive certain personal data in a portable format.

  • Object to or request information about certain automated decision-making where applicable.

We do not currently use personal data for solely automated decision-making that produces legal or similarly significant effects.

To exercise your rights, contact us at hello@joyjenstudio.com.

8. Cookies & Tracking

We use cookies and similar technologies on our website to ensure that it functions properly.

We may also use cookies or similar technologies to:

  • Understand how visitors use our website and measure its performance.

  • Improve our website, products and services.

  • Support marketing or personalised content, where applicable.

Where consent is required for non-essential cookies or similar technologies, we will ask for your consent before using them. You can manage your cookie preferences through our cookie banner or other preference tools provided on the website.

Some cookies may be necessary for the website to function and cannot be switched off through our cookie preference tools.

9. Children’s Privacy

Our website and services are intended for a general audience and are not specifically directed at children.

We do not knowingly collect personal data from children for the purpose of providing accounts or marketing communications. If you believe that a child has provided us with personal data, please contact us at hello@joyjenstudio.com and we will consider appropriate action.

10. International Transfers

Some of our service providers may process personal data outside the UK.

Where we transfer personal data internationally, we ensure that the transfer is permitted under applicable UK data protection law. This may include transfers to countries recognised as providing an adequate level of protection, or the use of appropriate safeguards or another lawful transfer mechanism where required.

11. How We Protect Your Data

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, alteration or disclosure.

Access to personal data is limited to those who need it for legitimate business purposes, and we use appropriate security measures when working with our service providers.

12. Policy Updates

We review this Privacy Policy at least once every 12 months. Any changes will be posted on this page with an updated date at the top.

13. Contact Us and Data Protection Complaints

If you have any questions about this Privacy Policy or how we use your personal data, please email us at hello@joyjenstudio.com.

If you have a concern about how we handle your personal data, you can make a data protection complaint by contacting us at the same email address. We will acknowledge your complaint within 30 days, investigate it without undue delay, keep you informed of progress where appropriate, and tell you the outcome.

If you are not satisfied with our response, or if you would prefer to raise your concern with the regulator, you have the right to complain to the UK Information Commissioner's Office (ICO). You can find information about making a complaint on the ICO's website.