Legal
Privacy policy.
What we collect when you shop with us, why we need it, who we share it with and how to take control of it.
Who is responsible for your data
My Store is the data controller for the personal information collected through this website. If you have any question about this policy, or want to exercise any of the rights set out below, write to us at [email protected] or through our contact page.
What we collect
- Order details — name, delivery and billing address, email address, phone number, the pieces and sizes you bought, and your order history.
- Account details — email address, password (stored encrypted) and saved addresses, if you choose to create an account.
- Payment information — the result of your payment and the last digits and type of card. Full card numbers are entered directly with our payment provider and never reach us or our systems.
- Messages — what you send us by email, through the contact form or about a return, so we can answer and keep a record.
- Site usage — pages viewed, items added to the bag, device and browser information and approximate location derived from your IP address. Where this relies on cookies it is only collected with your consent.
- Marketing preferences — whether you asked to hear from us, and whether you opened or clicked our emails.
Why we use it, and on what legal basis
- To perform our contract with you — taking and processing your order, payment, delivery, exchanges, returns and refunds, and customer service about an order.
- To meet legal obligations — keeping accounting, tax and consumer records, and handling statutory cancellation and warranty claims.
- For our legitimate interests — keeping the site secure, preventing fraudulent orders and chargebacks, understanding which pieces sell and improving the shop. We balance these against your rights and keep the data to a minimum.
- With your consent — marketing emails, non-essential cookies and analytics or advertising measurement. You can withdraw consent at any time, without affecting anything done before you did.
Who we share it with
We never sell your personal data. We share only what is needed with the companies that make the shop work, each bound to use it solely on our instructions:
- Payment providers, to take payment securely and to issue refunds.
- Carriers and fulfilment partners, to deliver your parcel and handle returns.
- Email and customer-service providers, to send order and service messages.
- Hosting, security and analytics providers that run and measure the site.
- Professional advisers, insurers or authorities, where the law requires it or to defend a legal claim.
Where your data is held
Your data is processed in the United Kingdom and the European Economic Area wherever possible. Where a provider processes data elsewhere, the transfer is covered by an adequacy decision or by standard contractual clauses with appropriate safeguards. You can ask us for a copy of those safeguards.
How long we keep it
- Order and payment records — for as long as accounting and tax law requires (generally six years from the end of the relevant financial year).
- Account data — while your account is open, and deleted on request.
- Marketing data — until you unsubscribe or ask us to stop.
- Messages and service records — normally up to three years after our last exchange.
- Cookie and analytics data — for the lifetimes set out in our cookie policy.
Your rights
Under the UK GDPR and the EU GDPR you can ask us to: give you a copy of the data we hold about you; correct it if it is wrong; delete it; restrict how we use it; send it to you or another provider in a portable format; stop using it for our legitimate interests or for direct marketing; and withdraw a consent you gave.
Write to [email protected] and we will answer within one month. You never pay a fee to exercise these rights. If you are not happy with our answer, you can complain to your data protection authority — in the United Kingdom that is the Information Commissioner's Office (ico.org.uk), and in the European Union it is the authority where you live or work.
Marketing
We only send marketing emails to people who asked for them. Every email has an unsubscribe link, and you can also ask us to stop at any time by writing to us. Service messages about an order you have placed are not marketing and continue to be sent.
Cookies
Essential cookies keep your bag and checkout working. Everything else is only set after you accept it in the cookie banner, and you can change your mind at any time with the “Manage cookies” link in the footer. Our cookie policy lists what each category does.
Security
The site is served over an encrypted connection, access to order data is restricted to the people who need it, and payment details are handled by our payment provider under their own security standards. No system is perfect, so we also keep the data we hold to what we genuinely need.
Children
This shop is intended for adults. We do not knowingly collect data from children under 16. If you believe a child has given us personal data, write to us and we will delete it.
Changes to this policy
If we change how we handle personal data we will update this page and the date shown above. Material changes affecting your rights will be brought to your attention.
