This page explains what we ask your consent for, what we do not need consent for, and how to withdraw consent at any time. It supplements our Privacy Policy.
Last updated: 6 August 2026
1. Placing an order does not require your consent
To accept, process and deliver your order we rely on the legal basis of performance of a contract (Article 6(1)(b) GDPR), and on legal obligation (Article 6(1)(c)) for accounting and tax records. Consent is not the legal basis for those, and therefore withdrawing consent does not stop us from completing an order you have already placed or from keeping the records the law requires.
Browsing the site is likewise not treated as consent to anything. Consent, where we need it, is always a separate, deliberate action by you.
2. What we do ask consent for
We ask for your separate, specific consent for each of the following. Each can be given and withdrawn independently — accepting one does not commit you to another, and refusing any of them does not affect your ability to order.
| What |
What it means |
Data used |
| Email marketing |
Offers, seasonal promotions, new collections and reminders by email. |
Name, email address, purchase history for relevance |
| Messenger and SMS marketing |
The same, delivered by SMS or a messenger you chose. |
Name, phone number |
| Non-essential cookies |
Functional cookies described in our Cookie Policy. |
Cookie identifiers on your device |
3. Conditions of a valid consent
In line with Articles 4(11) and 7 GDPR, any consent we rely on is:
- Freely given — refusing costs you nothing. We do not condition delivery of an order on marketing consent.
- Specific — separate for each purpose, never bundled into a single "I agree to everything".
- Informed — you are told who the controller is and what the data will be used for before you agree.
- Unambiguous — given by a clear affirmative act. We do not use pre-ticked boxes, and silence or inactivity is never treated as consent.
- Withdrawable — at any time, as easily as it was given.
4. How to withdraw consent
- Email marketing: use the unsubscribe link in any message, or write to dubai@jfloo.com.
- SMS and messenger marketing: reply asking to stop, or write to dubai@jfloo.com.
- Cookies: change your cookie settings on the site, or clear site data in your browser.
- Anything else: write to dubai@jfloo.com or to the local contact for Dubai: dubai@jfloo.com, +66 8 0431 9883.
We act on a withdrawal without undue delay. Withdrawal does not affect the lawfulness of processing carried out while the consent was in force (Article 7(3) GDPR).
5. Objecting to direct marketing
Independently of consent, you have an absolute right under Article 21(2) GDPR to object to direct marketing at any time. If you object, we stop immediately — there is no balancing test and no exception.
6. Record of consent
We keep a record of what you consented to, when, and by what action, so that we can demonstrate compliance under Article 7(1) GDPR. You may request a copy of that record at dubai@jfloo.com.
7. Your other rights
Access, rectification, erasure, restriction, portability, objection, and the right to complain to a supervisory authority are described in section 11 of our Privacy Policy.
