Privacy Notice
Last updated: 22 August 2026
Who we are
Matthew White trading as Jasper’s Treat Shop is the controller of personal information described in this notice.
Contact: [email protected] | 07702 443669 | 8 Rockwood Crescent, Calder Grove, Wakefield, West Yorkshire, WF4 3DZ, United Kingdom.
Information we may collect
Identity and contact information, such as name, billing/delivery address, email address and telephone number.
Order and transaction information, including products purchased, order history, refunds and delivery status.
Account information if you create a customer account.
Payment-related information. Payment card details may be processed directly by the payment provider rather than stored by Jasper’s Treat Shop.
Communications with us, including customer-service enquiries.
Technical and usage information, such as IP address, device/browser information and website activity, where collected by our website, security, analytics or consented technologies.
Marketing preferences and records of consent or opt-out choices.
Fraud-prevention, security and compliance information where necessary.
Why we use personal information
| Purpose | Typical information | Likely lawful basis |
| Process and fulfil orders | Identity, contact, order and payment information | Contract |
| Customer service and returns | Contact, order and communications | Contract / legitimate interests / legal obligation as applicable |
| Accounting, tax and legal records | Order, transaction and identity information | Legal obligation |
| Fraud prevention and website security | Technical, transaction and account information | Legitimate interests / legal obligation as applicable |
| Product safety and recalls | Identity, contact and order history | Legal obligation / legitimate interests |
| Marketing emails | Contact details and marketing preferences | Consent or another lawful route permitted by PECR/UK data protection law |
| Analytics and non-essential tracking | Technical and usage information | Consent where required |
Who we share information with
We may share personal information where necessary with service providers that help us operate the shop, including website/hosting providers, WooCommerce-related service providers, payment processors, Royal Mail, Evri, email providers, IT/security providers, analytics providers where enabled, professional advisers and public authorities where required by law.
Before publication, Jasper’s Treat Shop should update this section to name or accurately describe the actual payment, hosting, email, analytics, advertising and cookie-consent providers in use.
International transfers
Some technology providers may process information outside the United Kingdom. Where this occurs, we will use an appropriate lawful transfer mechanism or rely on another permitted safeguard where required. This section must be checked against the actual providers used by the live website.
Retention
We keep personal information only for as long as necessary for the purposes for which it was collected, including legal, tax, accounting, fraud-prevention and dispute-resolution requirements. Order and accounting records may need to be retained for several years. Marketing preference records may be retained as necessary to demonstrate and respect your choices.
Jasper’s Treat Shop should adopt an internal retention schedule before launch rather than relying on indefinite WooCommerce storage.
Your rights
Depending on the circumstances, UK data protection law may give you rights to access your personal information, correct inaccurate information, request erasure, restrict processing, object to processing, receive certain information in a portable format and withdraw consent where processing relies on consent.
To exercise a right, contact [email protected]. You also have the right to complain to the Information Commissioner’s Office.
Marketing
We will not make receiving marketing a condition of buying from us. Where consent is required, marketing consent will be separate, optional and capable of being withdrawn. You can unsubscribe using the link in a marketing email or by contacting us.
Security
We take appropriate organisational and technical measures to protect personal information. No internet service can be guaranteed completely secure, but access should be restricted to those who need it and systems should be maintained and updated.
Children
Our shop is intended for customers capable of entering into a purchase contract. We do not intentionally use the website to collect children’s personal information for profiling or targeted marketing.
Changes
We may update this notice as our systems, suppliers or legal requirements change. The current version should always show its last-updated date.
JTS AI Content Manager and Google Search Console
Jasper’s Treat Shop uses an internal application called JTS AI Content Manager to assist with search engine optimisation and editorial planning.
If an authorised administrator connects a Google account, the application requests read-only access to Google Search Console data associated with websites the administrator is authorised to access.
This may include search queries, landing-page URLs, clicks, impressions, click-through rates and average search positions.
We use this information solely to analyse the search performance of Jasper’s Treat Shop, identify content opportunities, improve existing website content and support the creation of editorial drafts.
JTS AI Content Manager does not use its Google Search Console permission to modify Search Console properties or Google account data.
Search Console information retrieved by the application may be stored within our WordPress database so that content opportunities and SEO recommendations can be calculated and displayed to authorised administrators.
Google user data obtained through Google APIs is not sold, used for advertising, or shared with third parties except where necessary to provide the application’s functionality and as described in this privacy notice.
Access can be disconnected from within JTS AI Content Manager. Users may also revoke access through their Google Account.
Our use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
