Privacy Policy

Last updated: 29 September 2026

This policy explains how Karine & Jeff (Le Bonheur est dans le Pot SARL) collects and uses your personal data when you visit karinejeff.co.uk or buy from us, in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).

1. Who is responsible for your data

The data controller is Le Bonheur est dans le Pot SARL, trading as Karine & Jeff, Allée Nicolas Appert, Z.I. de la Pomme, 31250 Revel, France. For any question about your data, write to hello@karinejeff.co.uk or to the postal address above.

Our UK representative. Under Article 27 of the UK GDPR, our representative in the United Kingdom is the Chambre de Commerce Française de Grande-Bretagne (French Chamber of Commerce in Great Britain), Becket House, 1 Lambeth Palace Road, London SE1 7EU. You and the Information Commissioner’s Office (ICO) can contact our representative about any matter relating to the processing of your personal data.

2. The data we collect

Identity and contact details: name, postal address, email address, telephone number.
Order and delivery information: products ordered, amounts, order history, delivery instructions.
Account information, if you create an account: login details (your password is stored encrypted).
Payment data: processed directly by our payment provider (Stripe); we never see or store your full card details.
Messages you send us (contact form, emails).
Browsing data: IP address, device and browser information, pages viewed, and data collected by cookies (see article 7).

3. Why we use your data and on what legal basis

To process and deliver your orders and provide customer service: performance of our contract with you.
To manage your customer account: performance of our contract with you.
To send you our newsletter and offers by email: your consent, which you can withdraw at any time using the unsubscribe link in each email. If you are already a customer, we may also email you about similar products, and you can opt out at any time.
To keep the website secure and prevent fraud: our legitimate interests.
To measure audience and improve the website, and to show you relevant advertising: your consent where cookies or similar technologies are used (article 7).
To meet our accounting, tax and legal obligations: legal obligation.

4. Who receives your data

Your data is accessible to our team and to service providers acting on our behalf and only on our instructions, who are bound by confidentiality:

website hosting: Hostinger;
payment: Stripe;
delivery: DHL and, for large orders, our dedicated carriers;
email and marketing: Klaviyo;
audience measurement and advertising, subject to your consent: Google;
website security: Wordfence (Defiant).

We never sell your personal data. We may disclose it where required by law or to a competent authority.

5. Transfers outside the United Kingdom

We are based in France and your data is processed in the European Union, which benefits from a UK adequacy decision. Some of our providers (for example Stripe, Klaviyo and Google) may process data in the United States or elsewhere. In that case the transfer is covered by UK adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework) or by appropriate safeguards such as the UK International Data Transfer Addendum to the EU Standard Contractual Clauses.

6. How long we keep your data

Account and order data: for the duration of our commercial relationship, then archived for as long as the law requires (up to 10 years for accounting records).
Marketing data: until you withdraw your consent or, if you do not interact with us, for up to 3 years after your last contact.
Cookies: 13 months maximum.

7. Cookies

Cookies are small files stored on your device. We use:

strictly necessary cookies, which make the website work (basket, checkout, account login, security); they do not require your consent;
audience measurement and marketing cookies (for example Google and Klaviyo), which we only use with your consent.

You can accept, refuse or change your choices at any time through the cookie settings on the website, and you can also block or delete cookies in your browser settings. Refusing non-essential cookies does not prevent you from using the website.

8. Your rights

You have the right to access your data, to have it corrected or erased, to restrict or object to its processing, to data portability, and to withdraw your consent at any time. You can object at any time to direct marketing. To exercise your rights, email hello@karinejeff.co.uk; we will reply within one month.

If you are not satisfied with our response, you have the right to complain to the Information Commissioner’s Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, telephone 0303 123 1113, ico.org.uk.

9. Security

We take appropriate technical and organisational measures to protect your data: encrypted connection (HTTPS), secure payment, restricted access to our systems.

10. Children

Our website is not intended for children under 13 and we do not knowingly collect their data.

11. Changes to this policy

We may update this policy. The version in force is always the one published on this page, with its date of last update.