Privacy policy

2.1 LEGAL COMPLIANCE STATEMENT

TAILORSMITH is fully compliant with:

UK General Data Protection Regulation (UK GDPR)
Data Protection Act 2018
Privacy and Electronic Communications Regulations 2003
UK Consumer Rights Act 2015

2.2 PERSONAL DATA COLLECTION

TAILORSMITH collects the following information AT CHECKOUT:

REQUIRED INFORMATION:

Full name and email address
Residential address (billing and shipping)
Telephone number
Payment card details (processed by Shopify Payments)
IP address and device information

OPTIONAL INFORMATION:

Customer preferences and notes
Marketing communication opt-in

2.3 DATA USAGE RESTRICTIONS

Personal information is ONLY used for:

✓ Order fulfillment and delivery
✓ Order confirmation and updates
✓ Payment processing and fraud prevention
✓ Customer service and support
✓ Shipment tracking notification
✓ Legal compliance and record-keeping

STRICTLY PROHIBITED USES:
❌ Selling to third parties
❌ Marketing without explicit consent
❌ Sharing with advertisers or partners
❌ Data mining or profiling
❌ Any unauthorized commercial use

2.4 DATA SECURITY MEASURES

SSL Encryption: All data transmitted securely (HTTPS)
PCI-DSS Compliance: Payment processing meets international standards
Secure Servers: Data stored on encrypted Shopify infrastructure
Access Control: Limited employee access with confidentiality agreements
Regular Audits: Security reviewed quarterly
Backup Systems: Data backed up daily with disaster recovery

2.5 CUSTOMER DATA RIGHTS (UK GDPR)

RIGHT TO ACCESS: Request copy of your personal data
RIGHT TO ERASURE: "Right to be forgotten" - request data deletion
RIGHT TO RECTIFICATION: Correct inaccurate information
RIGHT TO RESTRICT: Limit how data is processed
RIGHT TO PORTABILITY: Receive data in machine-readable format

REQUEST DEADLINE: 30 calendar days maximum response time

To exercise rights, contact: support@tailorsmith.shop with subject line "DATA REQUEST"