Privacy Policy

Privacy Policy

Privacy Policy

SOJO Services Ltd ("SOJO", "we", "us", or "our") is committed to protecting your privacy and personal data. This Privacy and Cookie Policy explains how we collect, use, store, and protect your personal information when you use our website (www.sojo.uk) or our services, and how we use cookies and similar technologies.

Contact Us:
If you have any questions about this policy or how we handle your data, please contact us at:


1. Who We Are

SOJO Services Ltd is a garment repair, alteration, and tailoring service provider registered in England and Wales.

Company Registration Number: [Add number]
Registered Office: [Add address]
ICO Registration Number: [Add if applicable]

We are the data controller responsible for your personal data.


2. Information We Collect

We collect and process the following types of personal data:


Data Type

Purpose

Legal Basis

Name, email address, phone number

Account management, service delivery, customer communication

Contract performance, Legitimate interest

Delivery address

Order fulfilment, collection and delivery logistics

Contract performance

Order details (garment descriptions, service requests, measurements)

Service delivery, quality control

Contract performance

Payment information

Processing payments for services

Contract performance

Communication records (emails, chat logs, phone calls)

Customer service, complaint resolution

Legitimate interest, Contract performance

Marketing preferences

Sending promotional communications with your consent

Consent

Website usage data (IP address, browser type, pages visited)

Website improvement, analytics, security

Legitimate interest

Cookie data

See Section 6 (Cookie Policy) for full details

Consent, Legitimate interest


3. How We Use Your Information

We use your personal data for the following purposes:

3.1 Service Delivery

  • Processing and fulfilling your orders

  • Managing collections and deliveries

  • Communicating with you about your orders

  • Providing customer support

3.2 Business Operations

  • Managing customer accounts

  • Processing payments and refunds

  • Maintaining records for accounting and tax purposes

  • Quality control and service improvement

3.3 Marketing (with your consent)

  • Sending promotional emails and offers

  • Informing you about new services

  • Customer surveys and feedback requests

You can opt out of marketing communications at any time by:

  • Clicking "unsubscribe" in any marketing email

  • Contacting us at support@sojo.uk

  • Updating your preferences in your account settings

3.4 Legal Obligations

  • Complying with legal and regulatory requirements

  • Preventing fraud and ensuring security

  • Resolving disputes and enforcing our terms


4. Legal Basis for Processing

We process your personal data under the following legal bases as defined by UK GDPR:

4.1 Contract Performance
Processing necessary to fulfil our contract with you (e.g., delivering your alterations).

4.2 Legitimate Interests
Processing necessary for our legitimate business interests (e.g., improving services, fraud prevention), provided your rights don't override these interests.

4.3 Consent
Where you have given explicit consent (e.g., marketing communications, optional cookies).

4.4 Legal Obligation
Where we must process data to comply with legal requirements (e.g., tax records).


5. Who We Share Your Data With

We may share your personal data with the following third parties:

5.1 Service Providers

  • Delivery Partners (e.g., Royal Mail, courier services) - to fulfil collections and deliveries

  • Payment Processors (e.g., Stripe, PayPal) - to process payments securely

  • Technology Providers - hosting, email services, customer relationship management

  • Analytics Providers - to understand website usage (see Cookie Policy)

5.2 Brand Partners
When you book services through a SOJO brand partner, we may share relevant order information with that partner to coordinate service delivery.

5.3 Legal Requirements
We may disclose your data if required by law, court order, or to protect our legal rights.

5.4 Business Transfers
In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new owner.

Data Protection
We ensure all third parties are contractually obligated to protect your data and use it only for specified purposes. We do not sell your personal data to third parties.


6. Cookie Policy


What Are Cookies?

Cookies are small text files placed on your device when you visit our website. They help us provide a better user experience, remember your preferences, and analyze website performance.


How We Use Cookies

We use cookies for the following purposes:

6.1 Strictly Necessary Cookies
These cookies are essential for the website to function properly. You cannot opt out of these cookies.


Cookie Name

Purpose

Duration

session_id

Maintains your session while browsing

Session (deleted when browser closes)

CSRF_token

Security - prevents cross-site request forgery attacks

Session

cookie_consent

Remembers your cookie preferences

12 months

auth_token

Keeps you logged into your account

30 days

6.2 Performance Cookies
These cookies help us understand how visitors use our website, allowing us to improve functionality and user experience.


Cookie Name

Purpose

Duration

Provider

_ga

Google Analytics - tracks website usage and visitor behavior

2 years

Google

_gid

Google Analytics - distinguishes users

24 hours

Google

_gat

Google Analytics - throttles request rate

1 minute

Google

6.3 Functional Cookies
These cookies remember your preferences and choices to provide enhanced, personalized features.


Cookie Name

Purpose

Duration

preferred_location

Remembers your delivery location

90 days

language_preference

Stores your language preference

12 months

6.4 Targeting/Marketing Cookies
These cookies track your browsing habits to deliver relevant advertising. They require your consent.


Cookie Name

Purpose

Duration

Provider

_fbp

Facebook Pixel - tracks conversions and remarketing

90 days

Meta/Facebook

IDE

Google Ads - delivers targeted advertising

13 months

Google

fr

Facebook remarketing

90 days

Meta/Facebook


Managing Your Cookie Preferences

6.5 How to Control Cookies

You can manage your cookie preferences at any time:

Via Our Website
When you first visit our website, you'll see a cookie banner where you can accept or customize your preferences. You can change these settings at any time by clicking [Cookie Settings] at the bottom of any page.

Via Your Browser
You can control and delete cookies through your browser settings:

  • Chrome: Settings > Privacy and Security > Cookies and other site data

  • Firefox: Settings > Privacy & Security > Cookies and Site Data

  • Safari: Preferences > Privacy > Manage Website Data

  • Edge: Settings > Privacy, search and services > Cookies and site data

Note: Blocking all cookies may affect website functionality and your user experience.

Third-Party Opt-Outs


7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy:


Data Type

Retention Period

Reason

Account information

Until account deletion or 3 years of inactivity

Service provision, customer support

Order records

7 years after order completion

Legal/tax obligations, warranty claims

Payment information

Not stored (handled by payment processors)

Security

Marketing data

Until you withdraw consent or 3 years of inactivity

Marketing communications

Website analytics

26 months (Google Analytics default)

Performance analysis

Customer service communications

3 years

Complaint resolution, quality improvement

After these periods, we will securely delete or anonymize your data.


8. Your Data Protection Rights

Under UK GDPR, you have the following rights:

8.1 Right to Access
You can request a copy of the personal data we hold about you.

8.2 Right to Rectification
You can ask us to correct inaccurate or incomplete data.

8.3 Right to Erasure ("Right to be Forgotten")
You can request deletion of your personal data in certain circumstances.

8.4 Right to Restrict Processing
You can ask us to limit how we use your data in certain situations.

8.5 Right to Data Portability
You can request your data in a structured, commonly used format to transfer to another service.

8.6 Right to Object
You can object to processing based on legitimate interests or for direct marketing purposes.

8.7 Right to Withdraw Consent
Where processing is based on consent, you can withdraw it at any time.

8.8 Right to Complain
You can lodge a complaint with the Information Commissioner's Office (ICO):

How to Exercise Your Rights
To exercise any of these rights, please contact us at support@sojo.uk. We will respond within 30 days.


9. Data Security

We take the security of your personal data seriously and implement appropriate technical and organizational measures, including:

  • Encryption: Data transmitted via our website is encrypted using SSL/TLS technology

  • Access Controls: Limited access to personal data on a need-to-know basis

  • Secure Storage: Data stored on secure servers with regular backups

  • Regular Audits: Periodic security assessments and updates

  • Staff Training: All staff trained on data protection and privacy

While we strive to protect your data, no system is 100% secure. Please contact us immediately if you suspect unauthorized access to your account.


10. International Data Transfers

Your personal data is primarily stored and processed within the UK and European Economic Area (EEA). If we transfer data outside the UK/EEA, we ensure appropriate safeguards are in place, such as:

  • Standard Contractual Clauses approved by the UK government

  • Adequacy decisions by the UK government

  • Binding Corporate Rules


11. Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete it promptly.


12. Changes to This Policy

We may update this Privacy and Cookie Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

12.1 Material changes will be communicated via:

  • A notice on our website

  • Email notification (if you have an account)

12.2 We recommend reviewing this policy periodically.

12.3 The "Last updated" date at the top of this page shows when the policy was last revised.


13. Third-Party Links

Our website may contain links to third-party websites, plugins, or applications. We are not responsible for the privacy practices of these external sites. We encourage you to read their privacy policies before providing any personal information.


14. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal or similarly significant effects on you.


15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy and Cookie Policy or how we handle your personal data, please contact us:

Email: support@sojo.uk

We aim to respond to all inquiries within 30 days.


16. Definitions

Personal Data: Information that identifies or can identify you as an individual.

Processing: Any operation performed on personal data, including collection, storage, use, or deletion.

Data Controller: The entity that determines the purposes and means of processing personal data (SOJO Services Ltd).

Data Processor: A third party that processes personal data on behalf of the data controller.

UK GDPR: The UK General Data Protection Regulation, which governs data protection in the UK.

SOJO Services Ltd - Committed to protecting your privacy