What is collected

When you place an order: your name, email address, delivery address and order contents. Your card details are entered on Stripe's systems and are never received or stored by Defected Clothing.

When you email: whatever you put in the message.

Nothing else. There is no analytics, no advertising pixel and no profiling.

Why, and on what legal basis

To fulfil your order — the lawful basis is performance of a contract with you (UK GDPR Article 6(1)(b)).

To keep records required by tax and accounting law — legal obligation (Article 6(1)(c)). Order records are kept for six years for this reason.

Who it is shared with

Stripe, to take the payment. Royal Mail or the carrier, to deliver the parcel. Nobody else, and your data is never sold.

Your rights

You have the right to ask for a copy of your data, to have it corrected, to have it erased where it is no longer needed for the purposes above, to restrict or object to its processing, and to receive it in a portable form. See the contact page and you will get a response within one month.

If you are not satisfied you can complain to the Information Commissioner's Office at ico.org.uk, or by calling 0303 123 1113.