Privacy policy
Who's responsible for your data
Get Going, enterprise number 0835929469, trading as Just a Run. We decide what happens to the personal data described here, which makes us the controller for it.
Questions, requests, or complaints: hello@justarun.shop. A person reads that mailbox, not a system.
We're small enough that we're not required to appoint a data protection officer, and we haven't. Write to the address above and you'll reach the person who makes these decisions.
What we collect, why, and what allows us to
Every use of your data needs a legal basis. Here is ours, purpose by purpose.
| What | Why | Legal basis |
|---|---|---|
| Name, delivery and billing address, email, phone if you give it | To take your order, print it, ship it and talk to you about it | Performance of our contract with you |
| Order and invoice records | Because tax and accounting law says we have to keep them | Legal obligation |
| Payment data | To take payment. It goes to our payment processor — we never see or store your card number | Performance of our contract |
| Your email address, if you sign up | To send you the letter, new designs and stories | Your consent, which you can withdraw at any time |
| Whether you opened our emails and what you clicked | To see which letters are worth writing | Your consent |
| How you use the site — pages, device, approximate location from your IP address | Analytics, and advertising on Meta | Your consent, given through the cookie banner |
| Records of orders that looked fraudulent | To avoid being defrauded | Our legitimate interest in not losing money to fraud |
If you refuse the cookie banner, the analytics and advertising rows above simply don't happen. You can still shop.
Who else sees it
We use a small number of companies to run the shop. Each one only gets what it needs, and each is bound by a contract that stops it using your data for its own purposes.
| Who | What they get | Where |
|---|---|---|
| Shopify | The shop itself: your order, your account if you make one, your checkout | Ireland, with group companies elsewhere |
| Our fulfillment partner | Your name, delivery address and what you ordered, everything needed to print the shirt and post it | Latvia |
| Omnisend | Your email address, when you signed up, what you opened and clicked, and your order history | Lithuania |
| Meta | What you did on our site, if you accepted advertising cookies. For this, Meta and we decide together what happens. We are joint controllers, and Meta's own terms govern what it then does | Ireland, with transfers to the United States |
| Shopify Payments | Your payment details, directly, they don't pass through us | As stated in their own policy |
| The carrier | Your name, address, and an email or phone number so they can tell you the parcel is coming. This reaches them through our print partner rather than from us | Your country |
We don't sell your data. We never have and there's no version of this business where we would.
When your data leaves Europe
Most of it doesn't. Where it does, for fulfilment, and Meta for advertising, the transfer is covered by the European Commission's standard contractual clauses, or by the recipient's certification under the EU–US Data Privacy Framework.
How long we keep it
| Orders and invoices | Ten years, because accounting and VAT law requires it. We restrict them to that purpose alone once your order is complete |
| Your email subscription | Until you unsubscribe, and for a short period afterwards so we can prove you were unsubscribed |
| Support emails | Two years, so we can pick up a conversation where it left off |
| Analytics and advertising data | As long as the relevant cookie lives, and no longer than the provider's own retention period |
What you can ask us to do
You can ask to see the data we hold about you, correct it, delete it, limit what we do with it, get a copy in a portable format, or object to us processing it. Where we rely on your consent, you can withdraw it at any time — that doesn't undo what we did before you withdrew it.
Email hello@justarun.shop. We answer within a month, usually the same week, and we don't charge for it.
If you think we've handled your data badly, tell us first. You also have the right to complain to the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit), Drukpersstraat 35, 1000 Brussels, gegevensbeschermingsautoriteit.be.
Cookies
Some cookies are needed for the shop to work at all: keeping your cart, keeping you logged in, remembering your cookie choice. Those we set without asking, because without them there is no shop.
Everything else, analytics, and the Meta pixel, waits for you to say yes on the banner. Nothing measures you before you answer it, and you can change your mind from the "Cookie preferences" link in the footer at any time.
Our emails
Our emails contain a small invisible image that tells us whether you opened the message, and our links tell us which ones you clicked. We use it to see which letters are worth writing. Unsubscribe at the bottom of any email, or tell us and we'll turn the tracking off for you and keep sending the letter.
Decisions made by machine
We don't make any decision about you automatically. No profiling decides what you pay or whether we'll sell to you. Our payment provider runs automated fraud checks on transactions, as every payment provider does.
Children
The shop isn't intended for children and we don't knowingly collect their data. If you think a child has given us data, write to hello@justarun.shop and we'll delete it.
Changes
When we add a tool or change how we use your data, we update this page and change the date below. If the change is significant and we have your email address, we'll tell you.
Last updated: 01 september 2026