Who is responsible for your data
YBJ LTD is the controller of the personal data collected through ybbj.shop. Company details, including our postal address, are on the Legal information page. For any privacy question or request, e-mail support@ybbj.shop.
What we collect
- Order details: name, billing and delivery address, e-mail address, phone number (optional), the items you buy, the currency and amounts paid.
- Payment information: handled by our payment provider. We receive confirmation of payment and limited details such as the card type and last four digits, never the full card number.
- Messages: what you send us by e-mail, phone or our contact and withdrawal forms.
- Account details: if you create an account at checkout, your login details and order history.
- Technical data: IP address, browser type and the pages requested, recorded in our hosting server’s logs for security, and the essential cookies described in our Cookie policy.
We do not use advertising or analytics trackers, and we do not sell your personal data.
Why we use it, and our legal basis
| Purpose | Legal basis |
|---|---|
| Processing and delivering your order, refunds and returns | Performance of a contract |
| Answering your questions and complaints | Legitimate interests; contract where it concerns an order |
| Keeping accounting and tax records | Legal obligation |
| Preventing fraud and keeping the site secure | Legitimate interests |
| Handling a withdrawal request and sending the acknowledgement | Legal obligation |
We only send you e-mails about your orders and requests. We do not send marketing e-mails.
Who we share it with
- Supply partners and carriers – your name, delivery address, phone number and the items ordered, so they can pack and deliver your order.
- Payment provider – to take payment, prevent fraud and process refunds.
- Hosting and e-mail providers – who store the website and deliver our e-mails on our behalf.
- Authorities and advisers – where the law requires it, such as tax authorities or customs, and our accountants.
International transfers
Some supply partners, carriers and service providers are located outside the UK and the European Economic Area. When we transfer data to them, we rely on adequacy decisions where available or on standard contractual clauses approved by the UK and EU authorities, and we share only what is needed to fulfil your order.
How long we keep it
- Order and payment records: 6 years after the end of the financial year, as required for UK accounting and tax purposes.
- Messages and withdrawal requests: up to 3 years after the matter is closed.
- Accounts: until you ask us to delete the account; order records are kept as above.
- Server logs: up to 30 days.
Your rights
Under UK and EU data protection law you can ask us to give you a copy of your data, correct it, delete it, restrict or object to its use, or transfer it to another organisation. E-mail support@ybbj.shop; we reply within one month.
You can complain to the UK Information Commissioner’s Office (ico.org.uk) or to the data protection authority in the EU country where you live. We would appreciate the chance to deal with your concern first.
Children
The shop is not intended for children and we do not knowingly collect data from anyone under 16.
Changes
We will update this page if the way we use personal data changes. The date at the top shows the latest version.