Privacy Policy

Effective Date: 6 November 2025
Last Updated: 6 November 2025

Welcome to By Jess (“we”, “us”, “our”). We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, and share information when you visit our website [www.by-jess.co.uk] (the “Site”), make a purchase, or contact us.

By using our Site, you agree to the terms of this Privacy Policy.

1. Who We Are

‘By Jess’ is a Northern Ireland–based brand selling handmade clothing, accessories, and prints using found fabrics.

Contact Information:
By Jess
Email: jessica@by-jess.co.uk
Website: www.by-jess.co.uk

We are the data controller responsible for your personal information under the UK General Data Protection Regulation (“UK GDPR”).

2. Information We Collect

We collect personal and non-personal information when you interact with our Site:

a. Personal Information

When you make a purchase or contact us, we may collect full name, email address, phone number, billing and shipping address, payment information (processed securely by Squarespace Payments via Stripe; we do not store full card details. 

b. Automatically Collected Information

Squarespace automatically collects some information when you visit the Site, such as IP address, browser type, device, and operating system, pages viewed, time spent on site, and referral links. This helps us understand visitor activity and improve our services.

3. How We Use Your Information

We use your information to process and fulfil your orders, communicate with you about your order, returns, or inquiries, send updates or marketing emails (only if you’ve opted in), improve our website, products, and customer experience and to comply with legal, tax, and accounting obligations. We will only use your information for the purposes it was collected unless we reasonably consider that we need to use it for another compatible purpose.

4. Lawful Basis for Processing

Under the UK GDPR, we rely on the following lawful bases to process your data:

  • Contract: To process and fulfil your purchases.

  • Consent: When you sign up for newsletters or marketing communications.

  • Legal obligation: To comply with tax, accounting, or legal requirements.

  • Legitimate interests: To improve our services and prevent fraud.

5. Cookies

Our Site uses cookies provided by Squarespace and third parties to operate correctly and to analyse website usage. You can manage your cookie preferences in your browser settings. For more information, see Squarespace’s cookie policy.

6. Sharing Your Information

We only share your information when necessary for our business operations. Squarespace provides the platform that powers our website and checkout. Payments are securely processed via Squarespace Payments, powered by Stripe. Your financial information is encrypted and handled directly by Stripe in accordance with their Privacy Policy. We share your name, shipping address, and contact details (if applicable) with Royal Mail to fulfil deliveries. Royal Mail’s privacy practices are available in their Privacy Notice. We may share limited data with website analytics providers or professional advisers (e.g., accountants) where necessary and legally permitted. We never sell, rent, or trade your personal information.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil your order or provide customer support, meet our legal, tax, and accounting obligations and to resolve disputes or enforce agreements. After this period, we will securely delete or anonymise your data.

8. Your Rights

Under UK GDPR, you have the right to access the personal data we hold about you, request correction of any inaccurate or incomplete data, request deletion of your data (“right to be forgotten”), restrict or object to certain types of processing, to withdraw consent for marketing communications at any time or to lodge a complaint with the Information Commissioner’s Office (ICO) if you are unhappy with how we handle your data. For more information or to exercise your rights, please contact us at jessica@by-jess.co.uk.

9. Security

We use reasonable administrative, technical, and physical safeguards to protect your personal information. Our Site is hosted on Squarespace, which uses SSL encryption and secure data centres to protect information. However, please note that no online transmission is completely secure.

10. International Data Transfers

Squarespace and its subprocessors (including Stripe) may store and process data outside the UK, such as in the United States. These transfers are protected through Standard Contractual Clauses (SCCs) or equivalent legal mechanisms to ensure your data remains secure.

11. Links to Other Websites

Our Site may contain links to external websites e.g. Instagram. We are not responsible for the privacy practices or content of those sites.

12. Changes to This Privacy Policy

We may update this Privacy Policy occasionally to reflect changes in our practices or legal obligations. The latest version will always be available on this page.