Legal
Privacy Policy
1. Who we are
(“we”, “us”, “our”) is the data controller for the personal data described in this policy.
2. Who this site is for
We sell wholesale to businesses. Our customers are companies, but the people we deal with inside those companies are individuals, and their contact details are personal data. This policy covers those individuals: buyers, owners, managers, stylists and anyone else who contacts us on behalf of a business.
Where we hold information about a company itself — its registered name, company number or VAT number — that information is not personal data, but it is often held alongside details that are, so we treat the record as a whole with the same care.
3. Data we collect
Depending on how you deal with us, we may collect:
- Contact person details: name, job title, work email address and work telephone number.
- Business details: company name, trading and registered address, company registration number and VAT number.
- Trade account application data: the information you give us when applying, including the assortment groups you buy and the documents you send to confirm the business.
- Order and shipment history: articles, quantities, sizes, prices, proforma invoices, delivery addresses, consignment and tracking references.
- Sourcing requests: the description of the piece you are looking for, budget, deadline and any references or photographs you send.
- Correspondence: emails, messages and call notes exchanged with our team.
- Returns and claims data: descriptions of defects, photographs, article numbers and the outcome of the claim.
- Payment records: the fact and amount of a payment, the invoice it relates to and the bank reference. We do not store full card numbers or online banking credentials — payments run through our payment provider or by bank transfer.
- Technical data: IP address, browser and device type, and pages viewed on this site, where cookies or similar technologies are used.
- Marketing preferences: whether you have asked to receive our price lists and collection updates, and whether you have unsubscribed.
4. Purposes and lawful bases
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| Opening and administering a trade account | Contract, and legitimate interests in dealing with the company you represent |
| Preparing quotations, processing orders, arranging dispatch and delivery | Contract |
| Handling sourcing requests and reporting back on availability | Contract, or legitimate interests before a contract is agreed |
| Answering enquiries and providing support | Legitimate interests in responding to business contacts |
| Handling returns, defect claims and credits | Contract and legal obligation |
| Verifying a business and assessing credit or deferred payment terms | Legitimate interests, and legal obligation where checks are required of us |
| Preventing fraud and securing our systems | Legitimate interests |
| Meeting customs, export, tax and accounting requirements | Legal obligation |
| Sending trade price lists and collection updates | Consent, or soft opt-in where you are an existing trade customer |
| Website analytics and improving this site | Consent, given through the cookie banner |
Where we rely on legitimate interests, we have considered whether our interest in running a wholesale business is outweighed by your rights and freedoms, and we have concluded it is not. You can object to that processing at any time — see your rights.
5. Trade checks and credit terms
Before we open a trade account we check that the business exists and is trading, using public registers and third-party business information services. If you ask for deferred payment terms, we may also carry out a credit assessment and record the outcome, the limit we set and any terms attached to it.
These checks are carried out on the basis of our legitimate interests in trading safely and avoiding non-payment, and, where anti-fraud or record-keeping rules apply to us, on the basis of a legal obligation. The check concerns the business, but it involves the personal data of the contact person who submits the application, and the result may mean we decline the application or offer payment in advance only. You may ask us to explain the outcome and to review it.
6. Marketing
We send trade communications — price lists, stock updates and new collection announcements — to business contacts who have asked to receive them, and to existing trade customers about similar goods on the soft opt-in basis permitted by the Privacy and Electronic Communications Regulations.
Every message includes a one-click unsubscribe, and you can also unsubscribe by emailing . Unsubscribing does not stop the operational messages we have to send about your orders, such as confirmations, invoices and dispatch notices.
7. Who we share data with
We share personal data only with parties who help us run the business, and only with what they need:
- Payment provider and our bank.
- Logistics operators, courier and freight companies.
- Customs brokers, for export consignments and the documentation that goes with them.
- Hosting and IT support providers.
- Email marketing service used to send price lists and collection updates.
- Website analytics provider.
- Accountants and business verification or credit reference services.
We may also disclose data where the law requires it — for example to tax, customs or regulatory authorities, or in response to a court order. We do not sell personal data.
8. International transfers
Some of our providers, and some export shipments, involve transfers of personal data outside the United Kingdom. Where that happens, we rely on UK adequacy regulations for the destination country, or on appropriate safeguards such as the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with any additional measures the transfer requires. You can ask us which safeguard applies to a particular transfer.
9. How long we keep data
- Order, invoice and shipment records: six years from the end of the relevant accounting period, to meet UK tax and accounting requirements.
- Export and customs documentation: for the period required by the applicable customs rules, and no less than our accounting retention period.
- Trade account records: while the account is active, then up to two years after the last order, unless a longer period is needed for legal or accounting reasons.
- Trade and credit check results: up to two years from the date of the check, or the life of the account if shorter.
- Sourcing requests and correspondence: up to two years from the last exchange.
- Returns and claims: six years from the resolution of the claim.
- Marketing data: until you unsubscribe, plus a suppression record so we do not contact you again.
10. Security
We use access controls, encryption in transit, restricted user accounts and vetted providers, and we limit access to order and account records to the people who need them. No system is completely secure, but we keep our measures under review and will notify you and the regulator where the law requires it after a personal data breach.
11. Cookies
This site uses cookies and similar technologies. Cookies that are strictly necessary for the site to work are set without consent. Analytics and any other non-essential cookies are set only if you agree through the cookie banner, and you can change or withdraw that choice at any time by clearing the cookies for this site in your browser and making a new selection, or by contacting us.
12. Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you.
- Have inaccurate data corrected (rectification).
- Have data erased, where we have no continuing reason to keep it.
- Restrict how we process your data in certain circumstances.
- Receive data you gave us in a portable, machine-readable format.
- Object to processing based on legitimate interests, and to direct marketing at any time.
- Withdraw consent where our processing relies on it.
To exercise any of these rights, email . We respond within one month, and may ask you to confirm your identity and your connection to the business account first. Some rights are qualified — for example we may need to keep invoices and export documents even after an erasure request, because the law requires it. If we cannot act on a request, we will explain why.
13. Withdrawing consent
Where we process data on the basis of consent — marketing emails and non-essential cookies — you can withdraw that consent at any time, through the unsubscribe link, your cookie settings, or by emailing us. Withdrawing consent does not affect processing carried out before you withdrew it, or processing that rests on another lawful basis.
14. Complaints
If you are unhappy with how we have handled your personal data, please tell us first at so we can look into it. You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority: ico.org.uk or 0303 123 1113.
15. Age and business use
This site and our services are intended for businesses and for people aged 18 or over acting for a business. We do not sell to consumers and we do not knowingly collect data from children. If you believe a person under 18 has sent us personal data, contact us and we will delete it.
16. Changes to this policy
We may update this policy as our processing, providers or legal obligations change. The current version is always published on this page, and the “Last updated” date above shows when it changed. Where a change materially affects you, we will notify account contacts by email.
17. Contact us
Questions about this policy or about how we handle your data: , or write to , .