We've launched a brand-new website! If you've purchased with us before April 2025, you'll need to create a new account when placing your first order.

GDPR Compliance

GDPR Compliance Policy: Just School Wear Limited

Effective Date: 28-04-2025

1. Introduction
Just School Wear Limited (“we”, “us”, “our”) is committed to protecting the privacy and security of your personal data. This policy outlines how we comply with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018.

2. Scope
This policy applies to all personal data processed by Just School Wear Limited in relation to:

  • Customers (including students, parents, guardians)
  • Employees and job applicants
  • Suppliers and business contacts
  • Website visitors

3. Principles of Data Protection
Our servers are UK based and we adhere to the following principles when processing personal data:

  • Lawfulness, fairness, and transparency
  • Purpose limitation – Data is collected for specified, legitimate purposes.
  • Data minimisation – We only collect what is necessary.
  • Accuracy – We keep data up to date.
  • Storage limitation – We retain data only as long as necessary.
  • Integrity and confidentiality – We ensure appropriate security.
  • Accountability – We take responsibility for compliance.

4. Legal Bases for Processing
We process personal data based on:

  • The performance of a contract (e.g., fulfilling school uniform orders)
  • Legal obligations (e.g., HMRC requirements)  Consent (e.g., marketing communications)
  • Legitimate interests (e.g., fraud prevention, business improvement)

 

5. Types of Data We Collect
Depending on the context, we may collect:

  • Contact details (name, address, email, phone number)
  • Payment details (card information, though processed securely by third parties)
  • Order history and preferences
  • Employee records
  • Website usage data (via cookies and analytics)

6. Data Sharing and Transfers
We may share personal data with:

  • Payment processors
  • Delivery services
  • IT service providers
  • Schools (when relevant and authorised)
  • Government bodies when legally required

We do not:

  • share or sell personal data to any third party within or outside of the UK
  • use or share any personal data for speculative or precisely targeted campaigns
  • offer buy ins or pop up offers

7. Data Retention
We keep personal data only as long as necessary:

  • Customer order records: 6 years
  • Employee records: As required by employment law
  • Marketing preferences: Until consent is withdrawn

8. Data Security
We implement appropriate technical and organisational measures to protect personal data,
including:

  • Secure payment gateways
  • Encrypted data transfers
  • Access controls and staff training

9. Individual Rights
Under GDPR, individuals have the right to:

  • Access their personal data
  • Rectify inaccuracies
  • Erase data (“right to be forgotten”)
  • Restrict or object to processing
  • Data portability
  • Withdraw consent
  • Lodge complaints with the ICO

Requests can be submitted via:
Email: info@just-schoolwear.co.uk
Postal Address:
Just School Wear Limited
Unit 3 Calverton Business Centre
Hoyle Road
Calverton
NG14 6QL

10. Policy Review
This policy will be reviewed annually and updated as necessary to reflect changes in our practices or legal obligations.