Privacy notice
Last updated 26 October 2026
Johni is a trading name of 786 Infinite Ltd, registered in England and Wales, company number 12533644. Registered office: 128 City Road, London EC1V 2NX. VAT number GB516006822. We are the controller of the personal data described here. Contact us at info@johni.co.uk.
In short. We collect only what we need to take payment, send your order and handle questions or returns. What you buy can be private, so we treat order details as confidential. We do not sell your data. We do use advertising measurement tags from Meta and Google, but only if you accept them on our cookie banner, and we never send either company the names of the products you bought.
What we collect
- Order details: your name, delivery address, email address, what you ordered, when, how much you paid, and your subscription choices. We no longer ask for a phone number; orders placed before 26 October 2026 also include the phone number given at checkout.
- Your offers choice: whether you chose to receive offers by email at checkout, and when. It is optional and nothing is pre-selected. Checkout used to offer WhatsApp offers as well. We have never sent any and we do not use WhatsApp for marketing; if you chose it, we kept that choice only as a record.
- Payment: Stripe takes your card details on its own secure page. We receive confirmation that you paid, the last digits of your card and your billing details. We never see your full card number.
- Messages: anything you send us by email.
- Technical data: our hosting provider keeps standard server logs, which include your IP address, to run and secure the website.
- Advertising measurement, only if you accept: if you press Accept on our cookie banner, the Meta pixel and the Google Ads tag record which pages you viewed, when you added to basket, when you started checkout, and, if you buy, the order value and the order reference. Meta and Google receive your IP address and browser information as part of that. We never send them the names of the products you bought. If you press Reject, neither tag loads and none of this happens. See our Cookie notice for the cookies involved and how to change your mind.
- Which ad link you came from: some of our adverts link to an address with a short tag on the end, such as
?src=meta-video1. If you order in that visit, we save the tag with your order. We read it from the web address when you check out: nothing is stored on your device for this. The tag is only the name of an advert and holds none of your details. If you accepted advertising cookies, the Meta pixel and the Google tag record the address of the page you are on, and that address includes the tag.
Why we use it, and our legal basis
- To deliver your order and run your subscription: it is needed to perform our contract with you.
- To keep tax and accounting records, and to deal with legal claims: a legal obligation, and our legitimate interest in protecting our business.
- To prevent fraud, keep the website secure and answer your questions: our legitimate interests.
- To see which of our adverts lead to orders, using the ad link tag: our legitimate interest in knowing which adverts work. We only look at totals per advert, never at what an individual bought.
- To measure our advertising using the Meta pixel and Google Ads tag: your consent. These do not load unless you accept them on our cookie banner, and you can withdraw that consent at any time on our Cookie notice page.
- To send you offers by email: your consent. We only do this if you chose it at checkout. You can stop any time by replying STOP or emailing info@johni.co.uk, and we stop straight away. Our offers never name products in an email subject line.
You need to give us your name, delivery address and email address to place an order. Without them we cannot deliver it or send your order confirmation.
Stripe runs automated fraud checks on every payment, which can lead to a payment being declined. If that happens, email us.
Who we share it with
- Stripe, our payment provider, to take payments, run subscriptions and prevent fraud.
- Evri, InPost, Royal Mail or another delivery company, and Parcel2Go, the service we use to buy postage labels. They need your name and address to deliver. Parcel2Go also receives your email address with the booking.
- Our website and email host, who store the data on our behalf.
- Cloudflare, which counts visits to our website for us. It does not use cookies and we cannot identify you from it. See our Cookie notice to turn it off.
- Meta and Google, but only if you accepted advertising cookies. They receive the advertising measurement data described above. Both use that data under their own privacy policies and for their own purposes as well as ours, which is why we ask you first. We have switched off personalised advertising on the Google tag, so your visit is not added to a Google remarketing audience.
- If you chose to receive offers by email: the email-sending service we will use to send them. We have not sent any offers yet, and we will update this notice before we send the first one. It will receive only your name and email address.
- Our professional advisers such as accountants, and public authorities where the law requires it.
Some of these providers process data outside the UK, including in the United States. We only use providers that apply safeguards recognised by UK data protection law, such as the UK Addendum to the EU Standard Contractual Clauses or the UK Extension to the EU–US Data Privacy Framework.
How long we keep it
- Order and payment records: 6 years, which is how long we must keep accounting and VAT records.
- Emails and queries: up to 2 years after we last deal with you.
- Subscription details: until you cancel, then as for order records.
- Offers choices: until you stop them. After that we keep a note that you stopped, so we never contact you again by mistake.
- Advertising cookies: the cookies set on your device last up to 90 days. How long Meta and Google keep the data they receive is set by them, in their own privacy policies.
Your rights
You can ask us for a copy of your personal data, to correct it, to delete it where the law allows, to restrict or object to how we use it, and to receive it in a portable format. Email us and we will reply within one month.
Complaints about your data
If you are unhappy with how we have used your personal data, please tell us first. Email info@johni.co.uk with “Data protection complaint” in the subject. We will acknowledge your complaint within 30 days, look into it, and tell you the outcome without undue delay.
You can also complain to the Information Commissioner’s Office at ico.org.uk.
Cookies, visit statistics and your basket
See our Cookie notice.