Privacy policy

Who we are

JBM APPAREL LLC, a Florida Limited Liability Company, trading as Repset at shopjbmapparel.shop. Our business address is 2439 Chateau Loop, Kissimmee, FL 34741, USA. For anything to do with your personal information, write to support@jbmapparel.shop or call +1 818 731 8640. We are the business responsible for the personal information described here.

What we collect

We do not collect payment card numbers. Card details are entered on the secure payment step, handled by the payment processor, and never reach our servers or any form on this site.

We do not collect sensitive personal information as the CPRA defines it — no government identifiers, no financial account credentials, no precise geolocation, no health, biometric, racial, religious, union or sexual orientation data. The fit form asks about clothing, not about your body or your health, and you should not send us medical information through it.

Why we collect it

• To take, fulfil and deliver your order, and to handle returns and refunds.
• To answer your questions and give you the fit or sizing help you asked for.
• To send order confirmations, dispatch notices and delivery updates.
• To send marketing emails, only where you asked for them and only until you stop them.
• To detect and prevent fraud and abuse of the site.
• To understand which pages are used, in aggregate, so we can improve them.
• To meet our legal, tax and accounting obligations.

We do not use your information to build advertising profiles, and we do not make automated decisions about you that produce legal or similarly significant effects.

Where it comes from

Almost all of it comes directly from you. The rest is generated by your use of the site (pages viewed, device type) or comes from the carrier delivering your parcel (tracking events) and the payment processor (whether a payment succeeded, and the last four digits of the card for reconciliation).

Who we share it with

We share the minimum necessary with service providers who process it on our instructions and are contractually barred from using it for their own purposes:

• Payment processing — to take payment and handle refunds and chargebacks.
• Shipping carriers — your name, address and phone number, so a parcel can be delivered.
• Email delivery — to send order and dispatch emails, and marketing emails if you subscribed.
• Hosting and database — the infrastructure this site and our order records run on.
• Fraud and abuse prevention — to check that a form submission is from a person rather than a bot.

We also disclose information where the law requires it — a valid subpoena, court order or regulatory request — and, if the business were ever sold or merged, to the acquirer as part of that transaction. We would tell you before your information became subject to a different privacy policy.

We do not sell or share it

We have not sold personal information, and we have not shared it for cross-context behavioural advertising, in the preceding twelve months. We have no plans to. We do not run advertising pixels that pass your information to advertising networks.

You still have the right to direct us not to, and you can exercise it at any time even though there is nothing currently to opt out of. See making a request.

How long we keep it

When a period ends the record is deleted or irreversibly anonymised. You can ask us to delete sooner and we will, except where a law requires us to keep something — an invoice tied to a completed sale, for instance.

How it is protected

The site runs over HTTPS. Order and enquiry records are held in an access-controlled database with encryption at rest, reachable only by the people who need it to do their job. We do not store card numbers at all, so there is no card data here to lose. No system is perfectly secure, and we will tell you and the relevant regulator without undue delay if a breach affects your information.

Cookies and tracking

We use as few as we can manage:

• Strictly necessary — your cart is stored in your own browser’s local storage so it survives a page reload. It never leaves your device until you check out.
• Security — a short-lived token when a form is submitted, to distinguish people from bots.
• Aggregate analytics — page-level counts with no cross-site tracking, no advertising identifiers and no profile building.

We do not run third-party advertising or social media tracking pixels. Because we do not track you across other sites, a Global Privacy Control signal has nothing to act on here, but we honour it as a valid opt-out request in any case.

California residents — your CCPA and CPRA rights

If you live in California you have the following rights over the personal information described above.

• Right to know — the categories and specific pieces of personal information we have collected, where we got them, why we collected them, and who we disclosed them to.
• Right to delete — to have us delete personal information we collected from you, subject to the legal exceptions in the statute.
• Right to correct — to have inaccurate personal information about you fixed.
• Right to opt out of sale or sharing — to direct us not to sell your personal information or share it for cross-context behavioural advertising. We do neither, and the request route is below regardless.
• Right to limit use of sensitive personal information — we do not collect any, so there is nothing to limit.
• Right to non-discrimination — we will not deny you goods, charge you a different price, or give you a lower level of service because you exercised any of these rights.

In the preceding twelve months we collected the categories listed under what we collect, for the purposes listed under why we collect it, and disclosed them for business purposes only to the service providers listed under who we share it with. We sold nothing and shared nothing for advertising.

Making a request

Any of these routes works, and all of them reach the same person:

• Email support@jbmapparel.shop with “Privacy request” in the subject line.
• Call +1 818 731 8640, Monday to Friday, 9:00–17:00 Eastern Time.
• Use the contact form and select “my personal data / privacy rights” as the subject. This form is our Do Not Sell or Share My Personal Information request route as well.
• Write to us at JBM APPAREL LLC, 2439 Chateau Loop, Kissimmee, FL 34741, USA.

We confirm receipt within 10 business days and respond substantively within 45 calendar days. If we need longer we will tell you why and take no more than a further 45 days. To protect your information we will verify your identity by matching the details you give us against our records — for an order-related request, the order reference and the email address it was placed with is usually enough. We do not charge for this.

An authorised agent may make a request for you with your written permission, and we may still contact you directly to confirm it.

Other US states

If you live in a state with its own consumer privacy statute — Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana or another — you have comparable rights of access, correction, deletion, portability and opt-out. Use the same routes above and we will handle your request under your state’s law. Where a state gives you a right to appeal a refusal, we will explain how to do that in our response.

Children

This site is intended for adults. We do not knowingly collect personal information from anyone under 16, and we do not sell or share the personal information of anyone under 16. If you believe a child has given us information, contact us and we will delete it.

International customers

We are based in the United States and your information is processed there. If you order from outside the United States you are asking us to send goods to you from the United States, and the transfer of your delivery details is necessary to do that. Data protection law in the United States differs from the law where you live.

Changes to this policy

If we change this policy we update the date at the top of the page. For a change that materially affects how we handle information we already hold about you, we will email everyone affected before it takes effect.