Privacy Policy

Last Updated: 14 October 2026

Introduction

At Spa Supreme, we respect your privacy and are committed to handling your personal information responsibly, transparently and securely.

This Privacy Policy explains how JMF ECOMMERCE LTD, trading as Spa Supreme, collects, uses, stores and shares personal information when you visit our website, purchase products, contact our customer support team or otherwise interact with our online store.

We process personal information in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Spa Supreme is the trading name of JMF ECOMMERCE LTD, a private limited company registered in England and Wales.

For the personal information described in this policy, JMF ECOMMERCE LTD is generally the data controller.

Legal Company Name: JMF ECOMMERCE LTD

Trading Name: Spa Supreme

Company Registration Number: 16939103

Registered Address: 128 City Road, London EC1V 2NX, United Kingdom

Email: contact@spasupreme.co.uk

Telephone: +44 330 122 0833

Website: https://spasupreme.co.uk

2. Personal Information We Collect

Depending on how you interact with our website and services, we may collect:

• Personal and contact information: Your name, billing address, delivery address, email address and telephone number.

• Order information: Products purchased, order values, payment status, delivery arrangements, tracking information, cancellations, returns and refunds.

• Payment information: Payment method, payment confirmation and limited transaction information. Complete payment-card details are generally processed securely by Shopify or the relevant payment provider rather than stored directly by Spa Supreme.

• Customer account information: Account details, preferences and order history, where customer accounts are available.

• Communications: Enquiries, customer service correspondence, complaints, reviews and other information you voluntarily provide.

• Technical information: IP address, browser type, device information, cookie identifiers, website interactions and security-related information.

• Marketing preferences: Your choices concerning promotional communications, cookies and relevant advertising preferences.

We aim to collect only information that is reasonably necessary for the purposes explained in this policy.

3. How We Collect Your Information

We may collect personal information:

• Directly from you when you place an order, create an account, complete a form or contact us.

• Automatically when you browse our website, through cookies and similar technologies.

• From payment processors, delivery partners, manufacturers and suppliers involved in fulfilling your order.

• From service providers supporting website functionality, analytics, marketing, fraud prevention and customer support.

4. How We Use Your Information

We process personal information for the following purposes and lawful bases:

Purpose	Lawful Basis
Processing orders, payments, deliveries, returns and refunds	Performance of a contract or steps taken before entering a contract
Responding to customer enquiries and providing order support	Contractual necessity, legitimate interests or legal obligations, as applicable
Maintaining accounting, tax and transaction records	Compliance with legal obligations
Protecting our website, preventing fraud and managing disputes	Legitimate interests and legal obligations where applicable
Improving website performance and customer experience	Legitimate interests where permitted, or consent where required
Sending promotional communications	Consent where required, or another basis permitted by applicable direct-marketing law
Using non-essential analytics and advertising cookies	Consent where required

Where we rely on legitimate interests, we consider the necessity of the processing and its potential impact on your rights.

5. Cookies & Similar Technologies

Our website uses cookies and similar technologies to support essential functions such as shopping carts, checkout, website security and order processing.

We may also use analytics, functionality and advertising technologies to understand website performance and improve our services.

Where legally required, we request your consent before using non-essential cookies or similar technologies.

You can review further information and manage available preferences through our Cookies Policy and the cookie controls provided on our website.

6. Marketing Communications

Where permitted by applicable law, we may send information about our products, offers and services.

You can unsubscribe from promotional emails at any time using the unsubscribe link included in the message or by contacting us directly.

Opting out of marketing does not prevent us from sending necessary service communications relating to your orders, payments, deliveries, returns or account security.

7. Sharing Your Personal Information

We may share relevant personal information with trusted third parties where reasonably necessary to operate our business and provide our services.

These may include:

• Shopify, which provides our ecommerce platform and related services.

• Payment processors, banks and fraud-prevention providers.

• Manufacturers, suppliers, warehouses and fulfilment partners.

• Couriers, specialist delivery companies and installation providers.

• Customer support, order-tracking, website hosting and IT service providers.

• Analytics, advertising and marketing providers, subject to applicable legal requirements and consent choices.

• Accountants, insurers, professional advisers and other business service providers.

• Regulators, courts or public authorities where legally required.

Some third parties act as processors on our behalf, while others may act as independent controllers for their own processing activities.

We do not sell personal information as a standalone commercial database.

Information about Shopify's own privacy practices is available through its published privacy notices.

8. International Data Transfers

Some of our technology and service providers may process personal information outside the United Kingdom.

Where international transfers are subject to restrictions under UK data protection law, we take steps to ensure an appropriate legal transfer mechanism is used.

Depending on the circumstances, these safeguards may include UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses or another legally permitted mechanism.

You may contact us for further information about applicable safeguards.

9. How Long We Keep Personal Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including fulfilling orders, providing customer support, meeting legal obligations and resolving disputes.

Retention periods vary depending on the type of information:

• Order and accounting records: Generally retained for the periods required by applicable UK tax, accounting and company law.

• Customer account information: Retained while an account remains active and for a reasonable period afterwards where necessary.

• Customer enquiries and complaints: Retained for as long as reasonably required to resolve matters and maintain appropriate records.

• Marketing preferences: Retained while relevant, including limited records needed to respect unsubscribe requests.

• Cookie and analytics data: Retained according to the relevant technology, provider settings and applicable consent arrangements.

Information may be retained for longer where required by law or necessary for an ongoing dispute, investigation or legal claim.

10. Your Data Protection Rights

Subject to applicable conditions and exemptions under UK data protection law, you may have the right to:

• Request access to personal information we hold about you.

• Request correction of inaccurate or incomplete information.

• Request deletion of your personal information.

• Request restriction of certain processing activities.

• Request portability of certain information.

• Object to processing based on legitimate interests.

• Object to the use of your personal information for direct marketing.

• Withdraw consent where processing relies on consent.

You can exercise your rights by emailing contact@spasupreme.co.uk.

We may request information reasonably necessary to verify your identity before responding.

We will respond within the timeframes required by applicable data protection law.

11. Automated Processing

Automated technologies may be used by payment providers and security services to identify potentially fraudulent transactions and protect our website.

We do not intend to make solely automated decisions producing legal or similarly significant effects concerning customers unless permitted by applicable law and subject to the required safeguards.

12. Information Security

We use reasonable technical, organisational and administrative measures designed to protect personal information against unauthorised access, misuse, loss and disclosure.

Our website uses secure ecommerce and payment-processing technologies.

However, no online transmission or storage system can be guaranteed completely secure.

Please do not send full payment-card details, passwords or unnecessary sensitive information through email or website contact forms.

13. Children's Privacy

Our online store is not specifically directed towards children.

We do not knowingly collect children's personal information except where lawfully provided and necessary for a legitimate order or communication.

If a parent or guardian believes a child has provided personal information inappropriately, they may contact us to request that the matter be reviewed.

14. Data Protection Complaints

If you have concerns about how Spa Supreme handles your personal information, please contact us.

Email: contact@spasupreme.co.uk

Subject: Data Protection Complaint

Please describe your concern and the outcome you are seeking.

We will acknowledge data protection complaints within 30 days and investigate them in accordance with applicable legal requirements.

You also have the right to raise a complaint with the Information Commissioner's Office (ICO), the UK's independent data protection regulator.

Further information is available at:

https://ico.org.uk/make-a-complaint/

You are not required to contact Spa Supreme before approaching the ICO.

15. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our business operations, technology, service providers or applicable legal requirements.

Any revised version will be published on this page with an updated revision date.

16. Contact Us

For questions about this Privacy Policy, personal information or your data protection rights, please contact:

JMF ECOMMERCE LTD — Trading as Spa Supreme

Registered Address: 128 City Road, London EC1V 2NX, United Kingdom

Email: contact@spasupreme.co.uk

Telephone: +44 330 122 0833

Website: https://spasupreme.co.uk

Customer Support Hours

Monday–Friday: 9:00 am–6:00 pm (UK time)

Saturday & Sunday: Closed

We aim to respond to general enquiries within one business day.

Spa Supreme is committed to respecting your privacy and handling your personal information responsibly.