Privacy policy
This privacy policy describes how we collect and use personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Personal information is any data which can identify an individual, such as your name, postal address and email address.
By continuing to use our website you accept the content of this Privacy Policy and any other documents referred to in it. This policy may change from time to time, so we recommend that you review it periodically.
Last updated: September 2026
Who this policy applies to
This privacy policy applies to everyone whose personal information we collect and use, including:
- Customers
- Suppliers
- Service providers
- Enquirers and complainants
- Visitors to our website
- Newsletter subscribers
- Business contacts
What information we collect
- Identity and contact details — your name, email address, delivery address, billing address and phone number
- Order information — what you bought, when, and the value of your order
- Payment information — handled by our payment providers. We do not store full card numbers on our systems
- Delivery information — passed to our carriers so your order can reach you
- Communications — emails, phone calls and messages between us, including any return or refund enquiry
- Website usage — pages viewed, device and browser type, and similar analytics data collected through cookies
How we use your information
We collect, use and disclose your personal information in order to operate our business. This includes:
- Processing orders and payments
- Arranging delivery of your order and providing tracking updates
- Handling returns, refunds and replacements under our Returns & Refunds Policy
- Carrying out our obligations under contracts with you
- Creating and managing your online account
- Maintaining our accounts and records
- Responding to enquiries and customer service requests
- Carrying out market research and analysis
- Keeping you informed about updates or promotions, where you have consented
Our lawful bases for processing
| Purpose | Lawful basis |
|---|---|
| Processing and delivering your order | Performance of a contract |
| Handling returns and refunds | Performance of a contract and legal obligation |
| Keeping accounting and tax records | Legal obligation |
| Fraud prevention and site security | Legitimate interests |
| Analytics and improving the website | Legitimate interests, or consent where cookies require it |
| Marketing emails | Consent |
Sharing your information
When you place an order we share the information necessary to fulfil it with:
- Payment processors, to take payment securely
- Delivery partners, including Royal Mail and Evri, so your parcel can reach you
- Shopify, which hosts our online store
- Email and analytics providers, which support our communications and website
These organisations are under strict obligations to protect your data and may only use it for the purposes we specify.
We may also disclose your personal information to third parties:
- If our business or assets are acquired by a third party
- Where we are required to comply with a legal obligation
- To protect the rights, property or safety of Vumra Commerce Ltd, our customers or others, including for fraud prevention and credit risk reduction
We do not sell your personal information to anyone.
Marketing
Where you have given consent, we may contact you with promotions or special offers by email or post.
You can opt out at any time using the unsubscribe link in any marketing email, or by emailing contact@joyfulloom.com. Opting out of marketing does not stop the service emails we need to send about an order you have placed, such as your confirmation and tracking.
Cookies and tracking
Our website uses cookies and similar technologies to improve your browsing experience and analyse site performance.
You can adjust your browser settings to refuse cookies, though some features of the website may not function properly without them.
For more information, please see our Cookie Policy.
Children's data
Our products are made for children, but our website and services are directed at adults — parents, guardians, grandparents and gift buyers.
We do not knowingly collect personal data from anyone under the age of 16. If you believe we may have collected such data, contact us and we will delete it.
International transfers
Some of our service providers, including Shopify and our payment processors, may process your data outside the UK or EEA.
Where this happens, appropriate safeguards such as the UK Government-approved Standard Contractual Clauses or an adequacy decision are applied to ensure your information remains protected to UK standards.
How long we keep your information
We retain your personal information only as long as necessary for the purposes set out in this policy, unless a longer period is required by law.
| Information | Retention |
|---|---|
| Order and transaction records | 6 years, as required by UK tax law |
| Customer service and returns correspondence | 2 years from the last contact |
| Marketing contact details | Until you unsubscribe, then removed from active lists |
| Website analytics | Typically up to 26 months |
How we protect your information
We take appropriate technical and organisational steps to protect your data against unauthorised access, loss, misuse and disclosure. Our site uses encrypted connections, and payment details are handled directly by our payment providers rather than stored by us.
No transmission of information over the internet is ever completely secure, so you share information with us at your own risk.
Your rights
Under UK GDPR you have the right to:
- Access the data we hold about you
- Correct inaccurate data
- Request erasure of your data
- Restrict processing in certain circumstances
- Object to processing for direct marketing
- Data portability
- Withdraw consent at any time, where processing is based on consent
To exercise any of these rights, email contact@joyfulloom.com. We respond within one month.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data has been mishandled. We would appreciate the chance to resolve it with you first.
Updating your information
To review, update or correct your personal information, including your marketing preferences, email contact@joyfulloom.com.
Data controller
The data controller responsible for your personal information is:
Vumra Commerce Ltd, trading as Joyfulloom Company No. 16707665
Unit 7, Thames-Side Studios London SE18 5AU United Kingdom
Email: contact@joyfulloom.com Phone: +44 7537 173821
Business hours
| Day | Hours |
|---|---|
| Monday | 10:00 – 17:00 |
| Tuesday | 10:00 – 19:00 |
| Wednesday | 10:00 – 19:00 |
| Thursday | 10:00 – 19:00 |
| Friday | 10:00 – 21:00 |
| Saturday | 11:00 – 21:00 |
| Sunday | 11:00 – 21:00 |