Privacy Policy

Last updated: October 2026

1. Introduction

Jorley Ltd (trading as Jorley) is a UK-based online retailer specialising in luxury furniture, lighting and home accessories.

Registered Company Number: 15770048

Registered Office:

The Grange
The Street
Yatton Keynell
Chippenham
England
SN14 7BA

Email: info@jorley.co.uk

Jorley Ltd is the data controller responsible for the personal information we collect and process in connection with our website, customer orders, enquiries and services.

We are committed to protecting your privacy and handling your personal information responsibly and in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Privacy Policy explains what personal information we collect, how and why we use it, who we may share it with, how long we retain it and the rights you have in relation to your personal information.

Where consent is required for particular activities, such as certain marketing communications or non-essential cookies, we will request it separately. You may withdraw your consent at any time.

2. Information We Collect

We may collect and process the following categories of personal information, depending on how you interact with Jorley:

• Personal and contact information: Your name, billing and delivery addresses, email address and telephone number.
• Order and transaction information: Products purchased, order details, purchase history, delivery arrangements, returns, refunds and payment transaction references.
• Payment information: Information necessary to process payments through our secure third-party payment providers. Jorley does not store full payment card details.
• Customer account information: Account details, login credentials in protected form, saved addresses and account preferences where you choose to create an account.
• Communications: Enquiries, customer service correspondence, complaints, feedback and other information you provide when contacting us.
• Marketing preferences: Newsletter subscriptions, marketing consent records, communication preferences and unsubscribe requests.
• Website and technical information: IP address, browser type, device information, website activity and cookie-related information, where collected through our website and associated technologies.
• Interior design enquiries: Information you voluntarily provide when enquiring about our interior design services, such as room details, project requirements, preferences and photographs.

We collect personal information directly from you when you place an order, create an account, subscribe to our newsletter, contact us or submit an enquiry.

We may also receive relevant information from payment providers, delivery partners and other service providers where necessary to process orders, manage deliveries, provide customer support or protect against fraud.

We aim to collect only the personal information reasonably necessary for the purposes described in this Privacy Policy.

3. How We Use Your Information

We use your personal information only where we have a lawful basis to do so under UK data protection legislation.

The purposes for which we may process your information, and the relevant lawful bases, are outlined below.

Processing Orders and Payments

We use your personal information to process purchases, take payments, issue order confirmations, arrange deliveries and manage returns and refunds.

Lawful basis: Performance of a contract with you, or taking steps at your request before entering into a contract.

Arranging Deliveries

We share relevant contact, order and delivery information with our suppliers, distributors and delivery partners to fulfil your order, arrange delivery appointments and provide delivery updates.

Lawful basis: Performance of a contract.

Customer Service and Enquiries

We use your information to respond to enquiries, manage customer service requests, investigate complaints and provide after-sales support.

Lawful basis: Performance of a contract where the enquiry relates to an existing or proposed purchase, or our legitimate interests in providing effective customer service.

Interior Design Enquiries

Where you enquire about our interior design services, we may use the information you provide to discuss your requirements, prepare quotations and respond to your enquiry.

Lawful basis: Taking steps at your request before entering into a contract, or our legitimate interests in responding to general enquiries.

Website Operation and Improvement

We may process technical and website usage information to maintain website functionality, identify technical problems, improve our services and understand how visitors use our website.

Lawful basis: Our legitimate interests in operating, maintaining and improving our website, or consent where required for non-essential cookies and similar technologies.

Fraud Prevention and Security

We may process relevant information to detect and prevent fraudulent transactions, protect customer accounts and maintain the security of our website and business.

Lawful basis: Our legitimate interests in preventing fraud and protecting our business and customers, or compliance with a legal obligation where applicable.

Legal and Accounting Obligations

We retain and process certain information where necessary to comply with applicable legal, tax, accounting and regulatory requirements.

Lawful basis: Compliance with a legal obligation.

Marketing Communications

Where permitted by applicable law, we may use your contact details and marketing preferences to send newsletters, product updates, interior inspiration and information about our collections or services.

Lawful basis: Consent where required, or our legitimate interests where electronic marketing is permitted under applicable law, including the Privacy and Electronic Communications Regulations (PECR).

You may unsubscribe from marketing communications at any time using the unsubscribe link in our emails or by contacting info@jorley.co.uk.

Where we rely on legitimate interests, we consider those interests against your rights and freedoms and do not process your information where your interests or fundamental rights override our legitimate interests.

4. Payment Information

Payments made through our website are processed securely by our third-party payment providers, including Stripe and PayPal.

When you make a purchase, the relevant payment provider processes the information necessary to authorise and complete your transaction, prevent fraud and manage any applicable refunds or payment disputes.

Jorley does not store full payment card numbers or card security codes (CVV/CVC).

Payment providers may process your personal information in accordance with their own privacy notices and applicable data protection legislation.

We may retain transaction records, payment references and related order information where necessary for accounting, customer service, fraud prevention and legal compliance.

For further information about how our payment providers handle personal information, please refer to their respective privacy policies.

5. Sharing Information

5. Sharing Information

We may share your personal information with trusted third parties where necessary to process your orders, provide our services, operate our website and meet our legal obligations.

These may include:

• Suppliers and distributors: To process and fulfil orders, confirm product availability, arrange deliveries and manage returns, replacements or product-related enquiries.
• Delivery and logistics partners: To arrange deliveries and collections, provide delivery updates and resolve delivery-related issues.
• Payment providers: Including Stripe and PayPal, to process payments, refunds, fraud checks and payment disputes.
• Website hosting and technology providers: To operate, maintain, secure and support our website, online store and customer accounts.
• Email and marketing service providers: Including Klaviyo, to manage newsletter subscriptions, marketing preferences and permitted customer communications.
• Analytics providers: Where applicable, to help us understand website usage and improve our services, subject to relevant privacy and cookie requirements.
• Professional advisers and authorities: Including accountants, legal advisers, insurers, regulators and law enforcement agencies where necessary or legally required.

We share only the personal information reasonably necessary for the relevant purpose.

Where third parties process personal information on our behalf, we require appropriate contractual and security safeguards in accordance with applicable data protection legislation.

Some third parties, such as payment providers, may also act as independent data controllers for certain processing activities and handle personal information under their own privacy notices.

We do not sell your personal information to third parties.

Where personal information is transferred outside the United Kingdom, we will ensure that an appropriate legal transfer mechanism or other applicable safeguard is in place, as required by UK data protection law. Further information about international transfers is provided in this Privacy Policy.

6. Marketing Communications

Where you have given your consent, we may send you marketing communications relating to Jorley, including new collections, product launches, interior inspiration, promotions and information about our services.

You can subscribe to our newsletter through our website or choose to receive marketing communications where an appropriate opt-in option is provided.

We use Klaviyo to manage our email marketing communications, subscription preferences and unsubscribe requests.

You may withdraw your consent and unsubscribe from marketing emails at any time by clicking the unsubscribe link included in our emails or by contacting us at info@jorley.co.uk.

Withdrawing your consent will not affect the lawfulness of any processing carried out before your withdrawal.

We may still send essential service communications relating to your orders, payments, deliveries or customer enquiries, even if you have unsubscribed from marketing emails. These communications are not sent for marketing purposes.

We do not sell your personal information or share it with third parties for their own independent marketing purposes.

7. Data Security

We take the security of your personal information seriously and use appropriate technical and organisational measures to protect it against unauthorised access, accidental loss, alteration, misuse or disclosure.

These measures include using reputable website hosting, payment processing and technology providers, together with appropriate access controls and security measures designed to protect customer information.

Access to personal information is restricted to authorised individuals and service providers who require it for legitimate business purposes.

Where third-party providers process personal information on our behalf, we seek to ensure that appropriate data protection and security arrangements are in place.

Although we take reasonable precautions to safeguard personal information, no method of internet transmission or electronic storage can be guaranteed to be completely secure.

We regularly review our security arrangements and take appropriate action where risks or vulnerabilities are identified.

8. Cookies

Our website uses cookies and similar technologies to support essential website functions, maintain security, remember preferences and, where permitted, understand how visitors use our website.

Some cookies are strictly necessary for the website to function, including certain shopping basket, checkout and security features. Other cookies, such as those used for analytics or marketing, may require your consent before they are placed or accessed.

Where consent is required, we will provide you with the opportunity to accept or reject non-essential cookies and manage your preferences.

You can change or withdraw your cookie consent at any time through the cookie preferences controls available on our website.

For further information about the cookies we use, their purposes, providers and durations, please refer to our separate Cookie Policy.

9. Your Rights

Under UK data protection legislation, including the UK GDPR, you have certain rights regarding your personal information. These rights may apply depending on the circumstances and the lawful basis on which your information is processed.

Your rights include:

• Right of access: You may request confirmation of whether we hold your personal information and obtain a copy of that information.
• Right to rectification: You may ask us to correct inaccurate or incomplete personal information.
• Right to erasure: You may request the deletion of your personal information in certain circumstances, subject to applicable legal obligations and exemptions.
• Right to restrict processing: You may request that we limit how your personal information is used in certain circumstances.
• Right to object: You may object to certain processing, including processing based on legitimate interests. You have an absolute right to object to the use of your personal information for direct marketing.
• Right to data portability: Where applicable, you may request to receive certain personal information in a structured, commonly used and machine-readable format, or have it transferred to another organisation.
• Rights relating to automated decision-making: You have rights and protections relating to certain decisions made solely by automated processing that produce legal or similarly significant effects.
• Right to withdraw consent: Where we rely on your consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise your rights or raise a privacy-related concern, please contact us at info@jorley.co.uk.

We will respond to requests in accordance with applicable data protection law, normally within one calendar month. In certain circumstances, this period may be extended where legally permitted.

We may request additional information where reasonably necessary to verify your identity before responding to a request.

You also have the right to raise a complaint with the Information Commissioner’s Office (ICO), the UK’s independent data protection regulator, at www.ico.org.uk.

We would welcome the opportunity to address any concerns directly before you contact the ICO, although you are not required to contact us first.

10. Retention of Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including fulfilling orders, providing customer support, managing returns and warranties, and complying with legal, tax, accounting and regulatory obligations.

The length of time we retain information depends on its nature, the purpose for which it is used and any applicable legal requirements.

In determining appropriate retention periods, we consider:

• The nature and sensitivity of the personal information.
• The purposes for which the information was collected.
• Applicable legal, tax and accounting record-keeping requirements.
• The need to manage customer enquiries, complaints, returns, warranties and potential legal claims.
• Whether the information remains necessary for the relevant purpose.

Order and transaction records may be retained for longer periods where required for accounting, tax compliance or the establishment, exercise or defence of legal claims.

Marketing information is retained while you remain subscribed, or for a shorter period where appropriate. If you unsubscribe, we may retain limited information necessary to record your preference and ensure that you do not receive further marketing communications.

Where personal information is no longer required, we will take appropriate steps to securely delete or anonymise it, subject to applicable legal obligations.

You may request the deletion of your personal information at any time, although certain information may need to be retained where we have a lawful reason to do so.

11. Third-Party Links

Our website may contain links to third-party websites, including those operated by our suppliers, payment providers and other external organisations.

These websites operate independently of Jorley and may have their own privacy policies and data protection practices.

We encourage you to review the privacy policies of any third-party websites you visit.

Jorley is not responsible for the privacy practices or content of third-party websites that are outside our control. This does not affect our responsibilities under applicable data protection legislation for personal information that we collect or share.

12. Contact Us

If you have any questions about this Privacy Policy, how we handle your personal information or wish to exercise your data protection rights, please contact us using the details below.

Jorley Ltd (trading as Jorley)

Registered Company Number: 15770048

Registered Office:

The Grange
The Street
Yatton Keynell
Chippenham
England
SN14 7BA

Email: info@jorley.co.uk

We will review and respond to privacy-related enquiries and requests in accordance with applicable UK data protection legislation.

If you are dissatisfied with how we have handled your personal information or a privacy-related complaint, you also have the right to contact the Information Commissioner’s Office (ICO) at www.ico.org.uk.

13. International Data Transfers

Some of the third-party service providers we use to operate our website, process payments, manage customer communications and provide other business services may process or store personal information outside the United Kingdom.

Where personal information is transferred internationally, we will take steps to ensure that the transfer complies with applicable UK data protection legislation.

Depending on the destination and circumstances, this may include:

• Transfers to countries recognised by the UK Government as providing an adequate level of data protection.
• The use of appropriate contractual safeguards, such as the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, where applicable.
• Other transfer mechanisms permitted under UK data protection law.

Where required, we will assess the risks associated with international transfers and implement appropriate additional safeguards.

You may contact us at info@jorley.co.uk if you would like further information about international transfers of your personal information and the safeguards that apply.