Privacy policy

Privacy & Cookies Policy

1.  Who We Are (Data Controller)

JACK1T is a trading name of GB Worldwide LTD, registered office Unit 203, 2-4 Exmoor Street, London W10 6BD, United Kingdom, which operates https://jack1t.com (the “Service”) and is the controller of your personal data. This page informs you of our policies regarding the collection, use and disclosure of personal information when you use our Service. For any privacy question, or to exercise your rights, contact our Privacy Compliance Officer at clientservices@jack1t.uk or by post at the address above.

2.  What We Collect

When you purchase something from our website, as part of the buying and selling process, we collect the personal information you give us such as your name, address and email address. We need this information in order to process your payment and ship your order. When you browse our website, we also automatically receive your computer’s internet protocol (IP) address to help us learn about your browser and operating system and improve your shopping experience. If you opt in to our newsletter, we may send you emails about new products, events, sales and other offers. Any further information you choose to give us, such as date of birth or email preferences, is used only to give you a better experience.

3.  Our Lawful Bases for Processing

Under the UK GDPR and EU GDPR we rely on the following lawful bases:

       Performance of a contract — to process and deliver your order, handle returns and provide customer service.

       Legal obligation — to keep tax, accounting and consumer-law records.

       Consent — for marketing emails, non-essential cookies, and any virtual try-on image/biometric data. You may withdraw consent at any time.

       Legitimate interests — to secure our site, prevent fraud and returns abuse, and improve our products and service, balanced against your rights.

4.  How We Use Your Information & Consent

When you provide us with personal information to complete a transaction, verify your card, place an order, arrange a delivery or return a purchase, we use it for that specific reason. If we ask for your personal information for a secondary reason, like marketing, we will ask for your consent or give you the opportunity to decline. Every marketing email contains an unsubscribe link, and you can withdraw consent at any time by contacting clientservices@jack1t.uk.

5.  Virtual Try-On Tool

If you use our AI-generated virtual try-on feature, we may process a photograph you upload and/or body-measurement data to generate your visualisation. Where this data can identify you, it may constitute biometric (special category) data, which we process only with your explicit consent.

       We use your image and measurements solely to produce your try-on visualisation.

       We delete uploaded images and derived data promptly after your session and do not use them to train AI models unless you give separate, explicit consent.

       The feature is powered by a third-party technology provider acting as our processor under a data-processing agreement; we do not sell this data.

       The tool is not intended for anyone under 18, and you must not upload images of other people or of children.

       Outputs generated by the tool (your visualisation) are identified as AI-generated, in line with the EU AI Act (Regulation (EU) 2024/1689).

6.  Who We Share Your Information With

We may disclose your personal information if we are required by law to do so or if you violate our Terms of Service; we will never sell your information to a third party. In general, third-party providers we use will only collect, use and disclose your information to the extent necessary to perform their services for us. Key providers include:

       Shopify — hosts our online store and stores your data on secure servers behind a firewall.

       Payments — card data is encrypted under PCI-DSS; purchase transaction data is kept only as long as necessary to complete your purchase.

       Klarna (all regions), Clearpay (UK) and Afterpay (US) — if you choose a Buy Now, Pay Later option, we share contact and order details so the provider can assess eligibility and manage your instalment plan, under their own privacy policies.

       Couriers — Royal Mail, DPD and other carriers, to deliver your order.

       Analytics & advertising — Google and Meta (Facebook) provide remarketing and analytics; these run only where you have consented via our cookie banner. Rakuten Advertising provides affiliate tracking.

7.  International Data Transfers

Some of our providers are located outside the UK/EEA. Where we transfer your personal data internationally, we rely on appropriate safeguards — such as the UK International Data Transfer Agreement or Addendum, or the EU Standard Contractual Clauses, together with any additional measures required — so that your data remains protected to UK/EU standards. You can ask us for a copy of the relevant safeguard.

8.  How Long We Keep Your Data

We keep your personal data only as long as necessary for the purposes above: order and account data for the duration of our relationship and for the periods required by tax and consumer law (generally up to 6 years); marketing data until you unsubscribe or withdraw consent; and virtual try-on images/derived data only for your session (deleted promptly afterwards). When data is no longer needed, we securely delete or anonymise it.

9.  Your Rights

If you are in the UK or EU/EEA, you have the right to: access your data; have it corrected or erased; restrict or object to processing; data portability; and withdraw consent at any time. To exercise any of these, contact clientservices@jack1t.uk. You also have the right to complain to a data-protection authority — in the UK, the Information Commissioner’s Office (ico.org.uk); in the EU, your local supervisory authority. We will respond to requests within one month.

10.  Security

To protect your personal information, we take reasonable precautions and follow industry best practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed. Card information is encrypted using SSL and stored with AES-256 encryption. Although no method of transmission over the internet is 100% secure, we follow all PCI-DSS requirements and additional generally accepted industry standards.

11.  Cookies

We use cookies to run our store and, with your consent, for analytics and advertising. When you first visit, our cookie banner lets you accept or reject non-essential cookies, and you can change your choice at any time. Essential cookies (needed for the site and checkout to work) do not require consent. The cookies we use include:

       Shopify — _session_id, _shopify_visit, _shopify_uniq, cart, _secure_session_id, storefront_digest (session, security and store functionality).

       Google — analytics and AdWords remarketing; you can opt out via Google Ads Settings and the Google Analytics Opt-out Browser Add-on.

       Facebook (Meta) — remarketing; you can opt out via Facebook’s ad settings and the EDAA (youronlinechoices.eu).

       Rakuten Advertising — rmStore affiliate tracking cookie, expiring within 30 days.

12.  Children & Age

By using this site, you represent that you are at least the age of majority in your place of residence. Our Service and the virtual try-on tool are not directed at children, and we do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, contact us and we will delete it.

13.  Changes & Contact

We reserve the right to modify this policy at any time; changes take effect on posting. If we make material changes we will notify you here. If our store is acquired or merged, your information may be transferred to the new owners so we can continue to serve you. To access, correct, amend or delete your personal information, register a complaint, or ask for more information, contact our Privacy Compliance Officer at clientservices@jack1t.uk or by post at GB Worldwide LTD, Unit 203, 2-4 Exmoor Street, London W10 6BD.