Privacy policy

This policy explains how [COMPANY LEGAL NAME] trading as WEAR YOUR IDEA ("we", "us") collects and uses your personal data when you use our website and buy from us. We are the data controller under the UK GDPR and the Data Protection Act 2018.

Contact: [EMAIL] · [REGISTERED ADDRESS] · ICO registration number: [ICO NUMBER]

What we collect

• Account details — name, email, phone, password (stored as a secure hash by our authentication provider), marketing preference.
• Order details — items, personalisation text, delivery address, phone, order history.
• Custom design briefs — your description, text, style choices and the photos or images you upload, and your confirmation that you have the right to use them.
• Payment — handled by Stripe. We never see or store your full card details; we only receive a payment reference and status.
• Messages — what you send us through the contact form or email.
• Technical data — IP address (for security and rate limiting), and, only if you agree, analytics and marketing cookies (see our Cookie Policy).

Why we use it (lawful basis)

• To take, make and deliver your order, and send order emails — contract.
• To keep sales and tax records — legal obligation.
• To keep the website secure and prevent fraud and abuse — legitimate interests.
• To send marketing emails — consent (you can unsubscribe at any time).
• Analytics and advertising cookies — consent.

Who we share it with

We use trusted service providers who process data on our behalf under contract:

• Supabase — database, accounts and file storage
• Vercel — website hosting
• Stripe — payments
• Resend — sending emails
• Upstash — security rate limiting
• Delivery companies — your name, address and phone to deliver your parcel
• With your consent only: Google Analytics, Meta and TikTok (advertising measurement)

Some providers may process data outside the UK; where they do, they use approved safeguards such as the UK International Data Transfer Addendum.

We never sell your personal data.

How long we keep it

• Orders and invoices: 6 years (UK tax law)
• Your account: until you delete it
• Photos uploaded for a custom design: deleted 12 months after the order is completed; uploads never attached to an order are deleted within 7 days
• Contact messages: up to 12 months

Your rights

You can ask to access, correct, delete or restrict your data, object to processing, or request portability. From your account you can download your data (Account details → Download my data) and delete your account at any time. For anything else, contact us.

If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ico.org.uk).