Privacy Notice

This Privacy Notice explains how DRJONASMED LTD ("we") uses personal data when you use the MoniMarkt Shop. We are the controller of your personal data under the UK GDPR and the Data Protection Act 2018. Contact: info@drjonasmed.co.uk; No 5, The Round House, Dormans Park Road, East Grinstead, West Sussex, RH19 2EN, England.

1. What we collect

• Order data: your name, email address, optional phone number, country, the products you bought, prices, order number and dates, and your acceptance of our Terms and immediate-access consent (with time stamps).
• Payment data: the payment status and a payment reference from Revolut. Your card details are handled by Revolut; we never see them.
• Communications: emails you send us and our replies.
• Technical data: server logs (such as IP address, browser type, pages requested) kept briefly for security and troubleshooting.
• Data stored in your browser: your basket and currency choice (see our Cookie Notice).

2. Why we use it and our legal basis

• To take your order, take payment, provide access and send confirmations — performance of our contract with you.
• To keep accounting and tax records and respond to authorities — legal obligation.
• To keep the Shop secure, prevent fraud and handle complaints or legal claims — our legitimate interests.

We do not sell your data, and we do not send marketing emails unless you separately ask to receive them.

3. Who we share it with

We share personal data only with service providers who process it on our behalf, under contract:

• Revolut (payment processing);
• Supabase (database and file storage);
• Vercel (website hosting);
• Resend (sending order emails);
• our accountants and professional advisers, and authorities where the law requires it.

Some of these providers process data outside the UK (for example in the European Union or the United States). Where this happens, the transfer is covered by UK adequacy regulations or appropriate safeguards such as the UK International Data Transfer Agreement or Addendum.

4. How long we keep it

Order and accounting records are kept for 6 years after the end of the financial year in which the order was placed, as required for UK company and tax records. Emails are kept for as long as needed to deal with your enquiry. Server logs are kept for a short period, typically no more than 30 days.

5. Your rights

You have the right to access your personal data, to have it corrected or erased, to restrict or object to its use, and to data portability, in each case where the law allows. To use these rights, email info@drjonasmed.co.uk. You also have the right to complain to the Information Commissioner's Office (ico.org.uk). If you live in the EU, you may complain to your local data protection authority.

6. Changes

We will update this notice if the way we use personal data changes. The date at the top shows the latest version.