Privacy Policy

Privacy Policy

This Privacy Policy sets out how Jam Attic Boutique Ltd will process your personal data that you may provide to us or that we may collect from you when you visit our website

Jam Attic Boutique Ltd is defined as a data controller under the General Data Protection Regulation (GDPR) and Data Protection Act 2018 and is registered with the Information Commissioner’s Office (ICO).

Jam Attic Boutique is committed to ensuring that your privacy is protected and will only process personal data in accordance with this Privacy Policy.

How we collect your information

Voluntary Information

You may provide us this information when completing various forms and contracts, corresponding via the telephone, e-mail or live chat, or we may meet you at an event or exhibition.

Involuntary information when you visit our website

We may gain information that we gather through our monitoring of visits to our website. We use a variety of analytics tools like Google Analytics and cookies in order to improve our service, user experience and to analyse how the website is used. Aside from the approximate location (IP address), the information collected is mostly anonymous traffic data including browser information, device information and language. We do not collect any additional information which could be classified as personal via these means.

The information we collect

We process personal data including and not limited to:


  • Name and job title
  • Contact information including e-mail address and telephone number
  • Financial information including credit card and/or debit card information
  • Invoice and delivery addresses
  • Demographic information such as postcode and preferences
  • Legal grounds for processing your information
  • We will rely on the following legal bases under GDPR to process your personal data: 


  • Performance of a contract
  • Legal obligation
  • Vital interest
  • Public interest or exercise of official authority
  • Legitimate interest pursued by Kite Packaging, as a data controller, or a 3rd party
  • How we process your information

We collect and process data for the following reasons:

  • to ensure we can fulfil our service levels to a high standard
  • internal record keeping
  • to improve our products and services
  • to ensure that our website is presented in the most effective manner
  • to meet our legal requirements as a UK registered business
  • to communicate with our partners
  • to market our products and services (see Marketing further below)
  • We will also provide information to 3rd parties, when it is necessary for us to fulfil your service requirements. These include, but are not limited to, 3rd party carriers for the delivery of goods and secure payment gateway services.

We will only process your data in the UK. In all circumstances, the information obtained will be retained and utilised in accordance with all relevant laws, in particular the Data Protection Act 2018 and GDPR.

Data retention

We collect and store data for the purposes of all our business operations and to provide service to our customers.

How long will we keep personal data?

For active customers we will retain data for as long as you remain active

For inactive customers we will retain data for marketing purposes; however we will anonymise your personal data so that it can no longer be associated with you, and in such case we may use such information without further notice to you

On request of an ‘unsubscribe’ or a specific request not to be contacted, personal data will be transferred to a suppression list

We will keep personal data in our database for our own internal records

Your rights

You have the right to:

  • Receive disclosure of any of your personal data that we store and process
  • Update/amend inaccuracies or changes to your data
  • Opt out of e-mail marketing by clicking the unsubscribe link at the bottom of any Jam Attic email communication
  • Request for processing of your personal data to be restricted
  • Be informed of what lawful basis we are relying on for the processing of your personal data
  • Be forgotten (have your personal data deleted); however we would recommend that we supress you from future communications, rather than delete your data from our database
  • You can also stop the processing of your data for digital marketing purposes. This is done via the ‘My Account’ section of the website. You can find it here: Click here for My Account

If you wish to review, verify, correct or request the erasure of your personal data, object to the processing of your personal data, withdraw the consent to the processing of your personal data or request that we transfer a copy of your personal data to a 3rd party, please contact our Data Protection Representative at We will respond to the request as soon as we can. Generally this will be within one calendar month from when we receive your request but on occasions it may take longer to deal with your request and in such circumstances we will let you know.

Data security

We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure we have put in place suitable physical, electronic and managerial procedures to safeguard and secure your information.

How do we protect your personal data?

  • We treat your data with care and take all steps to protect it
  • Access to our websites is password protected
  • Sensitive data is secured by SSL encryption
  • Our systems have a very high level of security
  • We carry out regular penetration testing to identify ways to further strengthen our security
  • We monitor our systems for any intrusions

We will notify you and any applicable regulator of a suspected breach as required by law.


We may from time to time contact you to make you aware of new products and services, unless you explicitly request us not to do so.

If you have made a purchase from, you may receive regular product recommendations from us by e-mail. If you no longer wish to receive such communications, you can opt out by clicking the unsubscribe link at the bottom of any Kite Packaging marketing e-mail.

If you are a new customer, you can opt out of email communications at the new customer billing stage of the basket. This will ensure we do not send you promotional material via email.

We will never share your name and contact details with 3rd parties for marketing purposes. We do use 3rd party service providers to send out marketing material but only allow them to use that information on our instructions and where they have agreed to treat the information confidentially and to comply with data protection legislation.

Links to other websites

Our website may contain links to enable you to visit other websites of interest easily. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement.

Questions regarding our policy?

Contact details are as follows:

Telephone: 01926 505300


Changes to this Privacy Policy

Any changes we make to our Privacy Policy in future will be posted on our website and where appropriate notified to you by e-mail or otherwise.


April 2022- Privacy Policy 20225 (1)

Greenspark | Plastic & Carbon Offset

Subscribe to our newsletter

Get the latest updates on new products and upcoming sales

No thanks