Privacy policy

Last updated: 30 October 2026

About this policy
JST Kart Shop Ltd ("we", "us", "our") runs this store and website, including all related information, content, features, tools, products and services (the "Services"). Our store is powered by Shopify.

This Privacy Policy explains how we collect, use and share your personal information when you visit our website, buy from us, book an Experience Day or contact us. We are the data controller of your personal information under UK data protection law (the UK GDPR and the Data Protection Act 2018). If this policy and our Terms of Service conflict on how we handle personal information, this policy applies.

Personal information we collect
Depending on how you use the Services, we may collect:
- Contact details: your name, billing and delivery address, phone number and email address.
- Order and payment information: the items you buy, return or cancel, your order history, payment method and payment confirmation. Card details are handled by our payment providers, and we do not see or store your full card number.
- Experience Day booking details: the driver's name, age on the day, height, weight, previous karting experience and any notes you give us, plus your acceptance of our booking terms and safety kit requirements. We need these to provide a suitable kart and run the day safely.
- Account information: your login details, preferences and settings if you create an account.
- Communications: what you tell us when you email, call, message us on WhatsApp or use our contact form.
- Device and usage information: your IP address, browser, device type, and how you use our website, collected through cookies and similar technologies.

Where we get your information
- Directly from you, when you place an order, book an Experience Day, create an account or contact us.
- Automatically, through cookies and similar technologies when you use our website (see "Cookies and analytics" below).
- From our service providers, such as Shopify, our payment providers and couriers, when they process information for us.

How we use your information and our legal reasons
- To process your orders and bookings, take payment, deliver your goods, handle returns and refunds, and run your Experience Day. Legal reason: to perform our contract with you.
- To use Experience Day driver details (age, height, weight and experience) to choose a suitable kart and keep the day safe. Legal reason: to perform our contract, and our legitimate interest in running safe events.
- To answer your questions and provide customer support, including by email, phone and WhatsApp. Legal reason: our legitimate interest in helping our customers, or to perform our contract.
- To send you marketing emails, but only if you have agreed or you are an existing customer who has not opted out. You can unsubscribe at any time using the link in our emails. Legal reason: your consent, or our legitimate interest in marketing to existing customers as allowed by law.
- To understand how our website is used and improve it, using analytics cookies only if you accept them. Legal reason: your consent.
- To keep our website and payments secure and prevent fraud. Legal reason: our legitimate interest in protecting our business and customers.
- To keep records for tax, accounting and legal purposes, and to deal with legal claims. Legal reason: to comply with the law, and our legitimate interest in defending our rights.

Cookies and analytics
We use cookies that are needed for the website to work, such as remembering your basket. With your permission, we also use analytics cookies, including Google Analytics, to understand how visitors use our website. You can accept or decline non-essential cookies using the cookie banner, and change your choice at any time by clearing your browser cookies and visiting the site again. Analytics cookies are not used unless you accept them.

Who we share your information with
We only share your personal information where needed for the purposes above:
- Shopify, which hosts our store and processes orders and payments.
- Payment providers, to take and refund payments.
- Couriers and delivery companies, to deliver your order.
- Kart circuits and our Experience Day staff, where needed to run your booking safely.
- Google, for website analytics if you accept analytics cookies.
- WhatsApp (Meta), if you choose to contact us on WhatsApp. Your use of WhatsApp is covered by WhatsApp's own privacy policy.
- Our professional advisers, such as accountants, and authorities where the law requires it.
- A buyer or successor if our business is sold or reorganised.

We do not sell your personal information.

Relationship with Shopify
The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services for you. Information you submit to the Services will be transmitted to and shared with Shopify as well as third parties that may be located in countries other than where you live. In addition, to help protect, grow and improve our business, we use certain Shopify enhanced features that use information from your interactions with our store, other merchants and Shopify. For these features, Shopify is responsible for processing your personal information, including responding to your requests to exercise your rights. To learn more, visit the Shopify Consumer Privacy Policy or the Shopify Privacy Portal.

International transfers
Some of our service providers, including Shopify, may store or process your personal information outside the UK. When this happens, we make sure appropriate safeguards are in place, such as UK adequacy decisions or the UK International Data Transfer Agreement or Addendum.

Children and young drivers
Our website is not intended for children, and orders must be placed by someone aged 18 or over. Many Experience Day drivers are under 18, so a parent or guardian provides the driver's details when booking. We only use these details to run the booking safely, as described above. If you are a parent or guardian and want us to delete a child's information, please contact us.

How long we keep your information
We keep your information only as long as we need it:
- Order, payment and booking records: 6 years after the end of the tax year they relate to, as required for tax and accounting.
- Experience Day driver details: as long as needed for the booking and any related queries or claims, then deleted or anonymised.
- Customer support messages: up to 2 years after your last contact, unless they relate to an order we must keep records for.
- Marketing preferences: until you unsubscribe, after which we keep a note so we don't contact you again.
- Account information: until you ask us to close your account.

Keeping your information safe
We use appropriate technical and organisational measures to protect your personal information, and our store and payments are run on Shopify's secure platform. No method of sending information over the internet is completely secure, so please don't send sensitive information, such as card details, to us by email or messaging apps.

Your rights
Under UK data protection law, you have the right to:
- ask for a copy of the personal information we hold about you
- ask us to correct information that is wrong or incomplete
- ask us to delete your information
- ask us to restrict or stop using your information, and object to our use of it based on legitimate interests
- object to direct marketing at any time
- receive your information in a portable format and ask us to transfer it to someone else
- withdraw your consent at any time, where we rely on consent. This does not affect anything we did before you withdrew it.

Some of these rights only apply in certain circumstances. To use any of them, contact us using the details below. We may need to confirm your identity first, and we will reply within one month. We will not treat you differently for using your rights.

Complaints
If you are unhappy with how we have used your personal information, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator: ico.org.uk/make-a-complaint or 0303 123 1113.

Changes to this policy
We may update this Privacy Policy from time to time, for example to reflect changes to our services or the law. We will post the updated policy on this page and change the "Last updated" date.

Contact
If you have any questions about this policy or want to use your rights, please contact us:

Email: info@jstkartshop.com
Phone or WhatsApp: 07448 656754
Address: Unit 16, Apollo, Station Road, Long Buckby, Northamptonshire NN6 7PF