Privacy policy

Last updated: August 21, 2026

This Privacy Policy describes how Johnson London (the "Site," "we," "us," or "our") collects, uses, and shares your personal information when you visit johnson-london.com (the "Site"), use our services, make a purchase, or otherwise communicate with us regarding the Site (collectively, the "Services"). For the purposes of this Privacy Policy, "you" and "your" refer to you as a user of the Services, whether you are a customer, a website visitor, or any other individual whose information we have collected in accordance with this Privacy Policy.

Please read this privacy policy carefully.

Changes to this privacy policy

We may update this Privacy Policy from time to time, including to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Site, update the "Last updated" date, and take any other legally required steps.

How we collect and use your personal data

To provide the services, we collect the information listed below. The information we collect and use varies depending on how you interact with us.

In addition to the specific uses listed below, we may use the information collected about you to communicate with you, provide or improve the services, comply with applicable legal obligations, enforce our terms of service, and protect or defend the services, our rights, and the rights of our users or others.

What personal data do we collect?

The type of personal data we receive about you depends on how you interact with our site and use our services. "Personal information" means information that identifies, relates to, describes, or can be associated with you.

Information we collect directly from you

Contact details — including your name, address, telephone number and email address.
Order information — including your name, billing address, delivery address, payment confirmation, email address and telephone number.
Account information — including your username, password, security questions and other information used for account security.
Customer support information — including the information you include in your communication with us, for example when you send a message via the services.

Some features of the services may require you to provide certain information about yourself directly. You can choose not to provide this information, but this may prevent you from using or accessing those features.

Information we collect about your usage

We may automatically collect certain information about your interaction with the services ("Usage Data"). For this purpose, we may use cookies, pixels, and similar technologies ("Cookies"). Usage Data may include information about how you access and use our site and your account, including device information, browser information, network connection information, your IP address, and other information about your interaction with the services.

Information obtained from third parties

We may receive information about you from third parties, including vendors and service providers who collect information on our behalf, for example:

Companies that support our site and services, such as Shopify.
Our payment processors, who collect payment information (e.g., card or bank details, billing address) to process your payment and fulfil your order.
Third parties we work with when you visit our site, open or click on emails we send you, or interact with our services or advertisements, using tools such as pixels, web beacons, and cookies.

All information we receive from third parties is handled in accordance with this privacy policy. See also "Third-party websites and links" below.

How we use your personal data

Provision of products and services. We use your personal data to fulfil our contract with you — processing payments, fulfilling orders, sending order/account notifications, handling returns and exchanges, and administering your account. We may also allow Shopify to connect your account with other Shopify services you choose to use; in that case Shopify processes your data under its own Privacy Policy.
Marketing and advertising. With your consent, we may send you marketing and promotional messages by email, SMS, or post, and show you relevant advertising. Under the UK Privacy and Electronic Communications Regulations (PECR), we will only send you electronic marketing if you have opted in, and you can withdraw that consent at any time (see "Manage communication preferences" below). Where we process your data for marketing based on our legitimate interests rather than consent (for example, limited postal marketing), the legal basis is Article 6(1)(f) UK GDPR.
Security and fraud prevention. We use your personal data to detect, investigate, and prevent fraudulent, illegal, or malicious activity, on the basis of our legitimate interest in keeping our services secure (Article 6(1)(f) UK GDPR).
Communication and service improvement. We use your personal data to provide customer support and improve our services, on the basis of our legitimate interest in maintaining our relationship with you and responding effectively (Article 6(1)(f) UK GDPR).

Cookies

Like many websites, we use cookies on our site. Specific information about the cookies used in connection with our Shopify-hosted store can be found at https://www.shopify.com/legal/cookies. We use cookies to operate and improve the site, perform analytics, and understand how customers interact with our services. We may also allow third parties and service providers to use cookies on our site to personalise services, products, and advertising.

Most browsers accept cookies by default, but you can configure your browser to remove or reject cookies. Blocking cookies may affect your experience and cause some features to malfunction or become unavailable.

How we share personal data

We may share your personal data with third parties in the following circumstances:

With providers who perform services on our behalf (e.g., IT management, payment processing, data analysis, customer support, cloud storage, order fulfilment and shipping).
With business and marketing partners who help us provide services and advertise; these partners handle your data under their own privacy policies.
With your consent — for example, if you ask us to share information with a third party.
Within our group of companies, where relevant, in our legitimate interest in running our business.
In connection with a business transaction (such as a merger), to comply with legal obligations (including responding to lawful requests from authorities), to enforce our terms, or to protect the rights and safety of our services, our users, or others.

We will not sell your personal data or use it to infer your identity without your consent.

Third-party websites and links

Our site may contain links to third-party websites or platforms. We have no control over their content and are not responsible for their privacy or security practices. Please review the privacy policy of any third-party site before providing your information to it.

Children's data

Our services are not intended for use by children, and we do not knowingly collect personal information from children under the age of 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us using the details below and we will delete it.

Security and storage of your data

No security measures are perfect or impenetrable, and we cannot guarantee "perfect security." We recommend that you do not use insecure channels to share sensitive or confidential information with us.

How long we retain your personal data depends on factors such as whether we need it to manage your account, provide the services, comply with legal obligations, resolve disputes, or enforce our contracts and policies.

Your rights

As a UK resident, you have the following rights regarding your personal data, subject to certain exceptions:

Right of access — request access to the personal data we hold about you.
Right to erasure — request deletion of your personal data.
Right to rectification — request correction of inaccurate personal data.
Right to data portability — request a copy of your data in a portable format, or ask us to transfer it to a third party where technically feasible.
Right to object — object to processing based on legitimate interests, including direct marketing.
Right to restrict processing — request that we stop or limit how we use your data.
Right to withdraw consent — withdraw consent at any time where we rely on it (e.g., marketing).
Manage communication preferences — opt out of promotional emails at any time using the unsubscribe link. You may still receive non-promotional emails related to your account or orders.

You can exercise these rights by contacting us using the details below. We may need to verify your identity before responding, and we will respond within the timeframes required by law.

Complaints

If you have concerns about how we handle your personal data, please contact us first using the details below. You also have the right to lodge a complaint with the UK's data protection regulator:

Information Commissioner's Office (ICO)
Website: https://ico.org.uk
Telephone: 0303 123 1113

International data transfers

We may transfer, store, and process your personal data outside the United Kingdom, including in the European Economic Area, where our service providers (such as Shopify) operate. Where we do so, we rely on recognized transfer mechanisms, such as the UK International Data Transfer Agreement or an adequacy decision by the UK government, to ensure your data remains protected.

Contact us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:


Website Name	Johnson London
Company Name	N.V.L. Online
Business address	Torenlaan 5b, 1402 AT Bussum, Netherlands
E-mail	info@johnson-london.com
Phone	+31 6 45175224
Support hours (UK time)	Mon–Fri: 08:00–17:00 \| Sat: 09:00–16:00 \| Sun: Closed
Response time	Within 1 business day
Company number (KvK)	96558210
VAT number (EU VAT)	NL867660223B01