Privacy Policy
This document explains what data Jup Apparel Inc. collects, why we need it, who we share it with and how you can control it.
Version dated 1 August 2026
1. Who we are
The data controller is Jup Apparel Inc., a corporation registered in the State of New York, USA. Address: 214 Lafayette Street, Suite 5B, New York, NY 10012, USA. For data questions, contact [email protected].
This policy covers the site jup.incpay.co and all related services: placing orders, customer support and our newsletter.
2. Data we collect
2.1. Data you give us
- When you place an order: first and last name, delivery address, email address and phone number.
- When you pay: payment details are handled by our payment provider. We only receive the card type, the last four digits and the transaction result — the full card number and CVV never reach our servers and are never stored by us.
- When you contact support: the content of your message, your order number and any attachments.
- When you subscribe: your email address and a record of your consent.
2.2. Data collected automatically
- IP address and approximate location (city/country);
- browser type and version, operating system, device type, screen resolution;
- pages viewed, referral source, time on site, basket activity;
- cookie identifiers and similar technologies.
3. Why we process it
| Purpose | Data used |
|---|---|
| Fulfilling orders, delivery, returns | Contact details, address, order contents |
| Order status notifications | Email, phone |
| Customer support | Correspondence, order number |
| Accounting and tax reporting | Transaction records |
| Improving the site and the range | Anonymised visit statistics |
| Marketing emails | Email address (with consent only) |
| Fraud prevention | IP address, device data, order history |
4. Legal bases
For users in the EEA and the UK, processing relies on the bases set out in the GDPR:
- performance of a contract (Art. 6(1)(b)) — processing orders, delivery and returns;
- legal obligation (Art. 6(1)(c)) — retaining accounting records;
- legitimate interests (Art. 6(1)(f)) — fraud prevention, basic analytics, site security;
- consent (Art. 6(1)(a)) — newsletters, marketing and analytics cookies. Consent can be withdrawn at any time.
For California residents (CCPA/CPRA): we do not sell personal information and do not share it with third parties for consideration.
5. Who we share data with
We don't sell or rent your data. We share it only with the suppliers the shop cannot run without, and only to the extent needed:
- carriers (USPS, UPS, DHL) — recipient name, address and phone;
- payment providers — transaction data;
- hosting and email services — technical storage and message delivery;
- analytics and advertising platforms — anonymised identifiers, where you have consented;
- public authorities — where required by law and on the basis of a formal request.
We have data processing agreements with all suppliers. Transfers of data from the EEA to the US rely on the EU Standard Contractual Clauses (SCCs).
6. Cookies and analytics
We use strictly necessary, functional and analytics cookies. Necessary cookies are always set — without them the basket and sign-in don't work. Analytics and marketing cookies are only set after you consent via the banner on your first visit. Full details of the categories and retention periods are in our Cookie Policy.
7. Advertising and remarketing
We may advertise through Google Ads and social platforms. Where you have consented to marketing cookies, advertising platforms receive anonymised identifiers so they can show you a relevant ad and measure its performance. We do not pass your name, email, phone number or order contents to advertising platforms in identifiable form.
You can opt out of Google ad personalisation in your Google Ads settings. How Google uses data from partner sites is described at policies.google.com/technologies/partner-sites.
8. Retention periods
| Category | Retention |
|---|---|
| Order and delivery records | 7 years (tax law requirements) |
| Support correspondence | 3 years from your last message |
| Newsletter subscription | Until you withdraw consent |
| Analytics data | Up to 26 months, then anonymised |
| Security logs | 12 months |
9. Your rights
Wherever you live, you can:
- obtain a copy of your data;
- have inaccurate data corrected;
- request deletion, where the data is no longer needed for the contract and isn't legally required to be kept;
- restrict or object to processing;
- receive your data in a machine-readable format (portability);
- withdraw consent to newsletters and marketing cookies at any time;
- lodge a complaint with the supervisory authority in your country.
Send requests to [email protected]. We respond within 30 calendar days and may ask you to verify your identity — that protects your data from being handed to someone else.
10. Security
The site runs over HTTPS with TLS encryption. Staff access to personal data is limited to what their role requires and protected by two-factor authentication. Payments go through a PCI DSS certified gateway. If a breach occurs that creates a risk to your rights, we will notify you and the supervisory authority within 72 hours of discovering it.
11. Children
This site is not intended for anyone under 16 and we do not knowingly collect their data. If you believe a child has given us personal data, email [email protected] and we will delete it.
12. Changes to this policy
We may update this document. The date of the current version is always shown at the top of the page. We announce material changes on the site, and by email to subscribers, at least 14 days before they take effect.
13. Contact
Jup Apparel Inc.
214 Lafayette Street, Suite 5B
New York, NY 10012, USA
Data questions: [email protected]
Support: [email protected]
Phone: +1 (212) 555-0142, Mon–Fri 9:00am–6:00pm ET