1. Data controller
The data controller for personal data processed through Jawwws Gnaww is Jawwws Ltd, a company registered in England and Wales (company number 17003364) with registered address at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ.
For data protection enquiries, you can contact us at dpo@jawwws.com.
2. Scope
This policy applies to:
- Visitors to the Gnaww website
- People who submit enquiries or requirements through Gnaww
- People who register interest in, or take part in, Gnaww Early Access
- Print buyers submitting print or project requirements
- Producers submitting capability information or Producer Capability Profiles
- People who contact us for support or other business communications
3. Information we collect
Enquiry and interest data
Your name, email address, company, relationship to Gnaww (for example buyer, producer or other), areas of interest, and the content of enquiries you send us.
Requirements and capability data
Print or project requirements submitted by buyers, and capability information submitted by producers. You choose what to include in these submissions.
Analytics and usage data
Where you consent to analytics, aggregate website usage information such as pages visited, referrer sources, approximate region, device and browser types, and timestamps. Analytics events may include non-personal classifications such as enquiry type, but we do not intentionally send names, email addresses, company names or message content to Google Analytics.
Technical data
Technical metadata collected automatically during website usage, such as browser user-agent strings and general request information used for security and service performance.
Cookie and consent data
Your cookie preference (for example, essential-only or analytics-enabled), stored in your browser. This is a browser-level preference. See our Cookie Policy for full details.
Communications and support data
Messages, emails, support requests and any content you provide when communicating with us.
4. How we collect information
- Directly from you: when you submit an enquiry, register interest, provide requirements or capability information, or contact us.
- Automatically: through your use of the website, including technical data and, where you consent, analytics collected via cookies and similar technologies.
- From third parties: where applicable, from service providers that support the operation of the website and our communications.
5. How we use information
- Responding to enquiries: answering questions and following up on interest in Gnaww.
- Operating Early Access: running Early Access workflows and communicating with participants.
- Understanding interest: understanding buyer, producer and platform interest to shape the product.
- Reviewing requirements: reviewing submitted print requirements and assessing producer capability information.
- Product improvement: improving Gnaww and the website experience.
- Security and abuse prevention: protecting the service from misuse.
- Legal and compliance: meeting our legal obligations and responding to lawful requests.
- Marketing: only where you have given consent, and always with an easy opt-out.
6. Lawful bases
We process personal data under the UK General Data Protection Regulation (UK GDPR) using the following lawful bases:
- Legitimate interests: responding to business enquiries, understanding interest in Gnaww, improving the product, and keeping the service secure. We balance these interests against your rights.
- Consent: where we rely on your consent, for example for optional marketing communications or non-essential analytics cookies. You can withdraw consent at any time.
- Legal obligation: where processing is necessary to comply with applicable law, regulation or a lawful request.
7. Marketing consent
Submitting an enquiry does not automatically subscribe you to marketing. Where you separately choose to receive Gnaww product news, Early Access information or relevant updates, we record that consent with your enquiry. You can ask us to stop contacting you for marketing at any time.
8. Data sharing
We do not sell your personal data. We may share data with the following categories of recipients where necessary:
- Hosting and infrastructure providers: to operate and deliver the website and service.
- Email, communications and collaboration providers: including Mailgun for transactional email and Slack for authorised internal team awareness of enquiries where configured.
- Analytics providers: including Google Analytics, where you consent, to help us understand aggregate website usage.
- Professional advisers: legal, compliance and accounting advisers where required.
- Law enforcement and regulators: where we are required to do so by law or in response to a valid legal request.
9. International transfers
Some of our service providers may process data outside the United Kingdom. Where this occurs, we ensure that appropriate safeguards are in place, such as standard contractual clauses approved by the relevant authority, or transfers to jurisdictions with an adequate level of data protection as recognised by the UK government.
10. Data retention
We retain enquiry, requirements and Early Access information only for as long as it is reasonably required for the purposes for which it was collected, including follow-up, product improvement, security and legal obligations. Where data is anonymised, it may be retained indefinitely for statistical analysis.
11. Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction or alteration. These measures include secure hosting, encrypted data transmission, access controls, and regular review of our security practices. No system is completely secure, and we cannot guarantee absolute security of information transmitted to us.
12. Your rights
Under UK data protection law, you have the right to:
- Access: request a copy of the personal data we hold about you.
- Correction: ask us to correct inaccurate or incomplete data.
- Deletion: ask us to delete your personal data in certain circumstances.
- Restriction: ask us to restrict how we process your data in certain circumstances.
- Objection: object to processing based on legitimate interests.
- Portability: request your data in a structured, machine-readable format.
- Withdraw consent: where processing is based on consent, withdraw it at any time.
- Complain: lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
To exercise any of these rights, please contact us at dpo@jawwws.com.
13. Children
Gnaww is not intended for use by children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take steps to delete it.
14. Changes to this policy
We may update this policy from time to time. The “Last updated” date at the top of this page indicates when the policy was most recently revised.
15. Contact
Jawwws Ltd
71-75 Shelton Street, Covent Garden, London, WC2H 9JQ
General Gnaww enquiries: gnaww@jawwws.com
Privacy enquiries: dpo@jawwws.com

