Site
GDPR & Your Data Rights
Information for visitors in the European Economic Area about your rights under the General Data Protection Regulation.
This page provides information for visitors in the European Economic Area (EEA) about your data rights under the General Data Protection Regulation (GDPR). For our full privacy practices, see the Privacy Policy.
What data we process
We process the following personal data: server access logs (IP address, browser, pages viewed — retained max 90 days); contact form submissions (name, email, message — retained only as long as needed to respond); email newsletter subscriptions (email address — retained until unsubscription). The Garment Tracker tool stores data in your browser only — no personal data from this tool reaches our systems.
Legal basis for processing
Server logs: legitimate interest in operating and securing the website. Contact form submissions: contract performance (responding to your enquiry). Email newsletter: consent (opt-in at time of subscription). Cookie preference: legitimate interest in remembering your consent decision.
Your rights
Under GDPR, you have the following rights regarding your personal data held by us:
Right of access — you may request a copy of personal data we hold about you.
Right to rectification — you may request correction of inaccurate personal data.
Right to erasure — you may request deletion of your personal data where there is no legal basis for retaining it.
Right to object — you may object to processing based on legitimate interests.
Right to withdraw consent — where processing is based on consent (email newsletter), you may withdraw consent at any time by unsubscribing.
Right to lodge a complaint — you may lodge a complaint with your national data protection authority.
How to exercise your rights
Use the Contact page and select "General feedback" or state your GDPR request in the message. We aim to respond within 30 days. We may need to verify your identity before processing certain requests.
Data transfers
Our email newsletter service provider may process data outside the EEA. Where this occurs, we ensure appropriate safeguards are in place as required by GDPR Article 46.