Privacy
policy.

My Store sells clothing direct to customers through this website. We are the data controller for the personal information described in this notice, which means we decide what is collected and what happens to it.

This notice explains how we handle your information under the UK General Data Protection Regulation and the Data Protection Act 2018. You can reach us about anything in it at our contact page.

• Who you are — the name, email address, delivery address, billing address and phone number you give us when you order or open an account.
• What you ordered — the pieces, sizes and quantities you bought, order value, order history and any returns or exchanges.
• Payment confirmation — the result of the payment and the card type and last four digits. Your full card number is entered directly with our payment provider and never reaches us.
• Your account — login credentials and saved addresses, if you choose to create one. Passwords are stored encrypted.
• How you use the site — pages viewed, device and browser type, and approximate location from your IP address. This is only collected where you have accepted the relevant cookies.
• What you tell us — messages you send through the contact form, email or customer service, and your marketing preferences.

We never sell your personal information, and we do not make decisions about you by automated means that produce legal effects.

We share your information only with those who need it to deliver your order:

• Payment providers, who take and secure your payment and screen it for fraud.
• Delivery carriers, who receive your name, address and contact details so they can deliver your parcel.
• Technology providers, who host this website, send our order and service emails, and provide the analytics you have consented to.
• Professional advisers and authorities, where we are legally required to disclose information, such as to HMRC or in response to a court order.

Each of these acts on our instructions under a written contract, and may only use your information for the purpose we gave it to them for.

Some of our providers process data outside the United Kingdom. Where that happens, we rely on UK adequacy regulations for the country concerned, or on the UK International Data Transfer Agreement or Addendum, so that your information keeps the same protection it has here.

• Order and payment records — six years after the end of the tax year they relate to, because HMRC requires it.
• Your account — for as long as it is open, and deleted on request.
• Marketing preferences — until you unsubscribe, after which we keep a minimal record so we know not to contact you again.
• Customer service messages — normally two years, so we have context if you come back to us.

Under UK data protection law you have the right to:

• ask for a copy of the personal information we hold about you;
• have inaccurate information corrected;
• ask us to delete information we no longer need to keep;
• ask us to restrict how we use it, or object to our using it;
• receive the information you gave us in a portable, machine-readable format;
• withdraw consent at any time, where consent is our basis for using it.

To exercise any of these, contact us at our contact page. We will respond within one month. Exercising your rights is free, and we will never treat you differently for doing so.

If you are unhappy with how we have handled your information you can complain to the Information Commissioner's Office at ico.org.uk. We would appreciate the chance to put things right first.

This site is served over an encrypted connection, payment details are handled entirely by our payment provider, and access to customer records is limited to the people who need it to do their job. No system is perfectly secure, but if a breach ever affected your rights we would tell you and the Information Commissioner's Office without undue delay.

We use cookies and similar technologies, and ask for your consent before setting any that are not strictly necessary. Our Cookie Policy sets out what each one does, and you can change your choice at any time using the Manage cookies link in the footer.

This shop is intended for adults. We do not knowingly collect information from anyone under 16. If you believe a child has given us their details, contact us and we will delete them.

We review this notice regularly and will update the date shown alongside it whenever it changes. Where a change materially affects how we use your information, we will tell you directly.