Who controls the data?
The operator of this Jumanji Media preview website controls the data submitted here. Jumanji Media Ltd is a proposed name; the legal controller’s identity, address, contact email and ICO registration status must be verified and published before real trading. Until then, use the contact form for data requests and avoid sending sensitive information.
What the working preview collects
- Contact, support and commercial forms: name, email, optional phone and the message you write.
- Demo checkout: name, email, selected items and, for hardware, a UK delivery address and postcode.
- Necessary browser storage: the basket and cookie choices. Compatibility answers stay in page memory and are not submitted.
- Abuse prevention: a short-lived hash derived from the network IP address for a ten-minute request limit. The hosting platform may separately retain security logs.
- Stripe test checkout, if enabled: checkout/session references, payment status and customer reference. We do not receive full card numbers.
Why we use it
For a launched shop, order and support processing would normally be necessary for the contract or pre-contract steps you request. Site security and reasonable administration may use legitimate interests, balanced against your rights. Optional analytics or marketing technologies require an appropriate permission or other valid basis before use. This preview has no connected analytics or marketing service and no marketing signup.
Storage and recipients
Orders and enquiries are stored privately in the WordPress database on Hostinger hosting and visible to authorised administrators. If a support email is configured, WordPress attempts to send a record notification through its configured mail transport. No customer confirmation email service is configured. A Stripe test session is processed by Stripe only when test keys are configured. Fonts and imagery are served locally from this site; Higgsfield was used to create the hero image and does not receive visitors’ form contents.
Retention
The preview does not yet run automatic deletion: records remain until an administrator removes them. The intended general operational review point is 24 months, but this is not an implemented deletion guarantee. Before launch, define and automate retention per record type, including any longer statutory accounting requirement. Testing should use fictitious details and test records should be removed when no longer needed.
Your choices and rights
Depending on the circumstances, you may request access, correction, erasure, restriction, portability or object to processing. Where processing relies on consent, you can withdraw it without affecting earlier lawful processing. Reopen Cookie settings in the footer to change optional preferences. Use the contact form for other requests; we may need proportionate identity checks before disclosing personal data.
You can raise concerns with the UK Information Commissioner at ico.org.uk. Controller details, processor agreements, international transfer safeguards and retention operations must be reviewed before real customers use the shop.
Security and sharing
We do not sell your data. Access to order summaries uses an unguessable private link; keep it confidential. Do not enter passwords, banking codes, full card details or special-category information into messages. No service can guarantee absolute security, and deployment administrators must maintain updates, backups and access controls.