Your details,
kept to your order.
This notice explains what Judy Ships It collects, why it is needed, who receives it, how long it is kept and the choices you have under applicable data-protection law.
Who is responsible for your information
Judy Ships It, operated from Dubai, United Arab Emirates, is the controller responsible for the personal information described in this notice. This notice applies to the website, quote requests, WhatsApp and email conversations, orders, payment confirmations, delivery coordination and customer support. Contact: judy@judyshipsit.com.
Last updated: 24 July 2026.
What an enquiry or order may require
Depending on your request, Judy Ships It may collect your name, telephone or WhatsApp number, email address, delivery city, country and address; product links, descriptions, quantities, sizes, preferences and budget; an optional styling photo if you choose an AI-assisted preview; quote and order history; payment confirmation and transaction references; customs, freight and delivery information; photographs of sourced goods; messages with Judy or Amana; and technical security information such as request timestamps and limited server logs.
Information is normally collected directly from you. It may also be received from a person placing an order for you, payment providers, retailers, freight or customs partners, and delivery providers where necessary to complete or investigate an order.
Why information is used
Information is used to answer enquiries; prepare and follow up quotes; check products, routes and restrictions; enter into and perform an order; verify payment; source and photograph goods; arrange customs, freight and delivery; provide tracking and support; handle returns, disputes and legal claims; prevent fraud and secure the service; keep records required by tax, customs, accounting or other law; and improve the reliability of the service.
The lawful basis depends on the activity: your consent for storing a website quote request and for any optional direct marketing; steps requested before entering a contract and performance of the order contract; compliance with legal obligations; and legitimate interests in customer service, record integrity, fraud prevention, security and resolving disputes, provided those interests do not override your rights. You may withdraw consent at any time, but this does not affect processing already carried out lawfully or information still required for another lawful reason.
What happens if details are not provided
You do not have to submit a website quote request. However, Judy cannot prepare or manage a quote without a name, destination and usable product details, and cannot complete an order without the information reasonably required for payment, customs, freight and delivery.
Who may receive information
Only information reasonably necessary for the relevant task is shared. Recipients may include retailers and sourcing partners; banks and payment services; licensed freight, customs and last-mile providers; professional advisers, insurers, auditors and authorities where legally required; and technology providers supporting hosting, email, messaging, order records, security and AI-assisted guidance. Current service categories include Netlify hosting, Zoho email, Google services for protected operations records, WhatsApp/Meta messaging and Anthropic for Amana responses.
Judy Ships It does not sell or rent personal information and does not disclose it to third parties for their unrelated advertising.
AI guidance, not automated decisions
When you use Amana, up to the most recent part of that chat is sent to Anthropic to generate a response. Do not enter payment credentials, identity documents, medical information or other sensitive information into Amana. Amana provides guidance only: it does not make decisions that have legal or similarly significant effects. Judy confirms availability, route, price, duties and every final transaction.
A styling photo is used only if you choose the preview
You can request styling help without sending a photo. Before any styling image is sent to an external AI or imaging provider, Judy must explain the provider, purpose and handling route and ask you to confirm that choice. Do not include identity documents, children, medical information or other sensitive material in a styling image. An AI styling preview is guidance only and does not guarantee fit, appearance or product availability.
Orders and providers cross borders
Judy Ships It operates from the UAE and serves customers in Kenya and other countries. Personal information may therefore be processed in the UAE, Kenya and countries where retailers, technology providers, payment services or logistics partners operate. Transfers are limited to what is necessary and must use a lawful transfer basis or safeguard required by applicable law, which may include an adequacy decision, contractual safeguards, your valid consent, or transfer necessary to take requested pre-contract steps or perform your order.
Kept only while there is a reason
Quote, order, payment, customs, freight, support and dispute records are retained only for as long as reasonably necessary for the purpose collected and for applicable tax, accounting, customs, fraud-prevention, limitation and legal-claim periods. Records are periodically reviewed and deleted, anonymised or restricted when no longer required. A deletion request may therefore be limited where information must still be kept by law or for an unresolved transaction, dispute or legal claim.
Reasonable protection, with no false guarantees
Judy Ships It uses access controls, restricted staff authentication, protected service credentials and limited-access operations records. No internet or storage system is completely secure. If a personal-data incident creates a legal notification duty, affected people and the relevant authority will be notified as required by applicable law.
What the website keeps on your device
The order list uses browser local storage so items remain available while you browse. Those items stay on your device until you submit the request or clear the list or browser storage.
Google Analytics is available only as an optional website-improvement tool. It does not load unless you select “Allow analytics” in the website notice. If accepted, it measures pages and interactions such as scrolling and outbound-link clicks using measurement ID G-VKNV0NXYYP. Judy Ships It uses the resulting aggregated reports to understand website reliability and enquiry journeys, not for advertising. Your analytics choice is stored in your browser and can be reset by clearing this site’s browser storage.
The service is for adults
The service is not directed to children under 18 and Judy Ships It does not knowingly seek their personal information without appropriate parent or guardian involvement. Please do not send sensitive personal information unless Judy specifically confirms that it is necessary and provides a suitable way to send it.
Access, correction, deletion and control
Subject to the law that applies to you, you may ask to be informed about processing; access or receive a copy of your information; correct inaccurate or incomplete information; delete information; restrict or object to processing; withdraw consent; and receive portable information where that right applies. You may also object at any time to direct marketing. Judy Ships It may request reasonable proof of identity and will respond within the period required by applicable law.
Send a request to judy@judyshipsit.com or use the WhatsApp button below. Exercising a privacy right will not result in unfair treatment, although an order may be impossible to continue if required information is deleted or its use is restricted.
Contact Judy first, or approach a regulator
This notice is designed around the UAE Federal Personal Data Protection Law and the Kenya Data Protection Act, with additional international transparency standards applied where relevant. Specific laws such as the EU or UK GDPR apply only where their territorial rules are met. Privacy rights may vary by location, and mandatory local rights are not limited by this notice.
Please contact Judy first so the issue can be investigated promptly. You may also complain to the competent regulator, including Kenya’s Office of the Data Protection Commissioner, the relevant UAE data-protection authority, or the supervisory authority in your country where applicable.
The current version lives here
This notice may be updated when the service, providers or legal requirements change. Material changes will be highlighted on this page and, where required, communicated directly or presented for renewed consent.