Privacy policy

My Store sells clothing online and is the data controller for the personal information described in this notice. If you have any question about how your data is handled, or you want to exercise one of the rights below, write to us at our contact page.

We only collect what we need to run the shop and send you your order.

• Order information — your name, delivery and billing address, email address, phone number where you give one, and the items, sizes and amounts in your order.
• Account information — if you create an account: your email address, password (stored encrypted), saved addresses and order history.
• Payment information — handled entirely by our payment provider. We receive confirmation that a payment succeeded, along with the card type and last four digits. We never see or store your full card number.
• Messages — anything you send us through the contact form or by email, so we can answer you.
• Usage information — pages viewed, device and browser type, and approximate location derived from your IP address. This is collected through cookies and similar technologies, and analytics only run if you accept them.
• Marketing preferences — your email address and whether you have asked to hear from us.

• To perform our contract with you — taking payment, preparing and delivering your order, handling returns, refunds and order emails.
• Because we have a legitimate interest — preventing fraud, keeping the site secure, understanding how the shop is used so we can improve it, and answering your messages.
• Because you consented — marketing emails and non-essential cookies. You can withdraw consent at any time, without affecting anything done before.
• Because the law requires it — keeping accounting, tax and consumer-rights records.

We never sell your personal information. We share it only with the suppliers who make the shop work, and only with what they need:

• our payment provider, to take and secure your payment;
• our delivery partners, to get your parcel to you;
• our ecommerce and hosting platform, which runs this website;
• our email provider, for order confirmations and, if you opted in, newsletters;
• our analytics provider, where you have accepted analytics cookies.

We may also disclose information where the law requires it, or to establish or defend a legal claim. Some of these suppliers are based outside the UK; where that happens, the transfer is covered by safeguards recognised under UK data protection law, such as the UK International Data Transfer Agreement or an adequacy decision.

Order and transaction records are kept for six years after the end of the tax year they relate to, because tax law requires it. Account data is kept until you ask us to close your account. Marketing consent is kept until you unsubscribe. Messages sent to customer service are kept for two years. Analytics data is kept in aggregated form.

Under UK data protection law you have the right to:

• ask for a copy of the personal data we hold about you;
• have inaccurate data corrected;
• ask us to delete data we no longer need to keep;
• ask us to restrict how we use your data, or object to its use;
• receive your data in a portable format, or have it sent to another provider;
• withdraw consent to marketing or non-essential cookies at any time.

To use any of these, write to our contact page. We answer within one month. You can unsubscribe from marketing emails using the link at the bottom of every one.

The site uses cookies, and asks for your choice the first time you visit. What each type does, and how to change your mind, is set out in our cookie policy. You can reopen the choice at any time with the “Manage cookies” link in the footer.

The site is served over an encrypted connection, payments are processed by a certified payment provider, and access to customer data is limited to the people who need it to fulfil orders. No system is perfect, but if a breach ever affects your rights we will tell you and the regulator as the law requires.

The shop is intended for adults. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us their data, contact us and we will delete it.

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the UK Information Commissioner’s Office at ico.org.uk, or to the data protection authority where you live.

We update this notice when the way we handle data changes. The date at the top always shows the current version. Material changes affecting marketing or cookies are signalled on the site itself.