Privacy policy

Last updated: 10/12/2025

1. Who We Are

Cipher Stitch (“we”, “us”, “our”) is an independent clothing brand operating in the United Kingdom.
We are the data controller for the personal information collected through our website: https://cipher-stitch.com.

Contact Email: cipherstitchlimited@gmail.com
Business Address: 2 Pearkes House, Fairfield Avenue, Watford, WD19 7EW

If you have any questions about this policy or your rights, you can contact us anytime.

2. Information We Collect

Information you provide to us

We collect information you voluntarily provide, including your name, email address, phone number, shipping address, billing address, payment information, order details, and any messages you send us.

Information collected automatically

When you use our website, we automatically collect technical data such as your IP address, browser type, device information, pages viewed, time spent on the site, approximate location, and cookie/tracking data.

Information from third parties

We may receive information from Shopify (our store platform), payment processors, delivery partners, analytics services, and advertising platforms such as Google, Meta, and TikTok.

3. How We Use Your Personal Data and Our Legal Basis

We process your information for several purposes:

  • To process and deliver your orders.
    Legal basis: performance of a contract.

  • To take payments and prevent fraud.
    Legal basis: legitimate interests and legal obligation.

  • To contact you about your order or account.
    Legal basis: performance of a contract.

  • To provide customer support.
    Legal basis: legitimate interests.

  • To send marketing emails if you subscribe.
    Legal basis: consent.

  • To run advertising and retargeting campaigns, where cookies or pixels are used.
    Legal basis: consent.

  • To analyse website performance and improve our services.
    Legal basis: legitimate interests or consent, depending on the cookie.

  • To comply with legal and financial obligations.
    Legal basis: legal obligation.

4. Cookies and Tracking Technologies

We use cookies to operate our website, enhance user experience, analyse performance, and run advertising.

Essential cookies are required for the site to function.

Non-essential cookies (such as analytics, performance, and advertising cookies) are only used when you give consentthrough our cookie banner.
You may withdraw consent or change preferences at any time.

If you want, I can create a full Cookie Policy page as well.

5. How We Share Your Information

We share personal data with trusted service providers when necessary:

  • Shopify (website and store hosting)

  • Payment processors such as Stripe, PayPal and Shop Pay

  • Delivery and fulfilment companies

  • Email marketing tools

  • Analytics and advertising platforms (Google, Meta, TikTok)

  • Fraud prevention services

We never sell your personal data.

Each partner is required to protect your information and comply with applicable UK data protection law.

6. International Transfers

Some service providers may process data outside the UK or EEA.
When this occurs, we ensure that appropriate safeguards — such as Standard Contractual Clauses or the UK Data Transfer Addendum — are in place to protect your information.

7. How Long We Keep Your Data

We retain personal data only as long as necessary:

  • Order and payment records are kept for up to six years for tax and accounting obligations.

  • Customer accounts are kept for as long as they remain active.

  • Marketing data is kept until you unsubscribe.

  • Customer service enquiries may be stored for up to two years.

  • Cookie data is stored according to its lifespan, usually between 1 and 24 months.

When data is no longer required, it is deleted or anonymised.

8. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

  • The right to access the data we hold about you.

  • The right to correct inaccurate information.

  • The right to request deletion of your data.

  • The right to restrict or object to certain processing.

  • The right to withdraw consent at any time.

  • The right to receive your data in a transferable format.

  • The right to complain to the UK Information Commissioner’s Office (ICO).

To exercise any of these rights, email cipherstitchlimited@gmail.com.

You can learn more or raise concerns directly with the ICO at https://ico.org.uk.

9. Age Restrictions

Our website is not intended for individuals under the age of 16.
We do not knowingly collect data from children.

10. How We Protect Your Data

We use administrative, technical, and physical security measures to protect your personal information.
This includes encryption, secure servers, and protection provided by Shopify’s security standards.

Although we take reasonable steps, no online system can be guaranteed 100% secure.

11. Changes to This Policy

We may update this Privacy Policy from time to time.
Any updates will be posted on this page with a new “Last Updated” date.