Privacy policy

In compliance with UK GDPR and the Data Protection Act 2018

Crowned Attire (“we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store and protect your personal data when you visit our website or place an order with us, and it sets out your rights under UK data protection law.

1. Who We Are

Crowned Attire is the data controller responsible for your personal data. If you have any questions about this policy or how we handle your data, contact us at info@crownedattire.com.

2. Information We Collect

We collect the following categories of personal data:

  • Contact details: name, email address, phone number, delivery address and billing address

  • Order information: items purchased, order value and order history

  • Payment information: processed securely by our payment providers; we do not store full card details

  • Technical data: IP address, browser type, device information and browsing behaviour on our site

  • Marketing preferences: whether you have opted in to receive emails or promotions

  • Customer service records: correspondence if you contact us with a query or issue

3. How We Use Your Information

We use your personal data for the following purposes, and only where we have a lawful basis to do so:

  • To process and fulfil your orders, including production, shipping, and customer service (performance of a contract)

  • To communicate with you about your order, including confirmations, shipping updates, and issue resolution (performance of a contract)

  • To send marketing communications, where you have opted in (consent, which you may withdraw at any time)

  • To improve our website, products, and customer experience through analytics (legitimate interests)

  • To prevent fraud and protect the security of our site and customers (legitimate interests / legal obligation)

  • To comply with our legal and tax obligations, including accounting records (legal obligation)

4. Who We Share Your Information With

We share personal data only where necessary, with trusted third parties who process data on our behalf, including:

  • Shopify: our e-commerce platform, which hosts our store and processes orders

  • Printful and our UK-based print providers: for order production and fulfilment

  • Payment processors, such as Shopify Payments, PayPal and Klarna: to process payments securely

  • Shipping and courier partners: to deliver your order

  • Analytics and marketing platforms, such as Google Analytics and Meta, where cookies are enabled, as set out in our Cookie Policy

We do not sell your personal data to third parties. Any third party we share data with is contractually required to protect it in line with UK GDPR.

5. International Transfers

Some of our service providers may process data outside the UK or European Economic Area. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or equivalent adequacy protections, to keep your data secure.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes it was collected for, including any legal, accounting, or reporting requirements. Order and transaction records are typically retained for 6 years to meet UK tax and accounting obligations. Marketing data is retained until you unsubscribe or withdraw consent.

7. Your Rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you

  • Request correction of inaccurate or incomplete data

  • Request deletion of your data, where applicable

  • Restrict or object to certain processing of your data

  • Request a copy of your data in a portable format

  • Withdraw consent for marketing at any time

  • Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data has been mishandled

To exercise any of these rights, contact us at info@crownedattire.com. We will respond within one month, as required by law.

8. Data Security

We use appropriate technical and organisational measures, including secure hosting through Shopify and encrypted payment processing, to protect your personal data against unauthorised access, loss, or misuse.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The “Last updated” date at the top of this document indicates when it was last revised.