Privacy Policy

This Privacy Notice for Defwear (“Defwear”, “Company”, “we”, “us”, or “our”) explains how and why we may collect, use, store, disclose, and otherwise process your personal information when you use our services (“Services”), including when you:

  • Visit our website at defwear.com, or any website operated by us that links to this Privacy Notice;
  • Create an account or place an order;
  • Contact our customer service team;
  • Subscribe to marketing communications;
  • Interact with us through promotions, social media, surveys, or other related activities.

We are committed to handling personal information lawfully, fairly, transparently, and securely in accordance with applicable UK data protection legislation.

QUESTIONS OR CONCERNS?

This Privacy Notice explains what personal information we collect, why we use it, how long we may keep it, who we may share it with, and the rights available to you.

If you have questions or concerns about this Privacy Notice or how we use your personal information, please contact us at:

Email: service@defwear.com

You also have the right to raise a data protection complaint with us and, where appropriate, with the UK Information Commissioner’s Office (ICO). Current ICO guidance requires organisations to tell individuals how they can complain both to the organisation and to the ICO.

WHAT PERSONAL INFORMATION DO WE COLLECT?

Depending on how you interact with Defwear, we may collect and process information such as:

  • Your name
  • Email address
  • Telephone number
  • Billing address
  • Delivery address
  • Account details
  • Order and transaction information
  • Products viewed, purchased, returned, or added to your basket
  • Customer service communications
  • Device and browser information
  • IP address
  • Website usage information
  • Cookie and similar technology data
  • Marketing preferences
  • Information you voluntarily provide to us

Payment information may be processed directly by our payment service providers.

Where payment information is handled directly by a third-party payment provider, Defwear generally does not directly store your complete card number or card security code.

HOW DO WE COLLECT YOUR INFORMATION?

We may collect personal information:

Directly from you

For example, when you:

  • Place an order
  • Create an account
  • Subscribe to emails
  • Complete a form
  • Contact customer service
  • Request a return or refund
  • Participate in a promotion

Automatically

Certain technical information may be collected when you use our website through cookies and similar technologies.

From third parties

Where permitted by law, we may receive information from third parties such as:

  • Payment service providers
  • Delivery and logistics providers
  • Fraud-prevention providers
  • Analytics providers
  • Advertising and marketing partners
  • Social media platforms where you interact with us through those services

If personal information is obtained from another source, UK transparency rules may require us to provide relevant privacy information within a reasonable period and generally no later than one month.

HOW DO WE USE YOUR PERSONAL INFORMATION?

We may use personal information to:

  • Process and fulfil your orders
  • Take and verify payments
  • Arrange delivery
  • Process returns, refunds, and exchanges
  • Manage your account
  • Provide customer support
  • Communicate with you about your order
  • Detect and prevent fraud or misuse
  • Maintain website and account security
  • Improve our products, website, and Services
  • Analyse website performance
  • Manage marketing preferences
  • Send permitted marketing communications
  • Meet tax, accounting, regulatory, and legal obligations
  • Establish, exercise, or defend legal claims

We only process personal information where we have an appropriate lawful basis.

ICO guidance confirms that organisations must identify an appropriate lawful basis before processing and explain both the purpose and lawful basis in their privacy information.

WHAT LEGAL BASES DO WE RELY ON?

Depending on the purpose, we may rely on:

Contract

We may process your personal information when necessary to enter into or perform a contract with you.

For example:

  • Processing an order
  • Taking payment
  • Arranging delivery
  • Managing a return or refund

Legal Obligation

We may process information where necessary to comply with legal requirements, including accounting, tax, regulatory, or consumer-law obligations.

Legitimate Interests

We may process information where necessary for our legitimate business interests, provided those interests are not overridden by your rights and interests.

Examples may include:

  • Preventing fraud
  • Protecting website security
  • Improving our Services
  • Handling certain customer service matters

Where we rely on legitimate interests, we consider whether the processing is necessary and appropriately balanced against your rights.

Consent

Where required, we may process information based on your consent.

You may withdraw consent at any time, although this does not affect processing carried out lawfully before withdrawal.

DO WE PROCESS SPECIAL CATEGORY DATA?

Defwear does not ordinarily require special category personal information to sell clothing online.

Special category data includes information concerning matters such as health, racial or ethnic origin, political opinions, religious beliefs, trade union membership, biometric identification data, sex life, or sexual orientation.

If we ever need to process this type of information, we will only do so where an appropriate UK GDPR lawful basis and an additional legal condition for processing special category data apply.

COOKIES AND SIMILAR TECHNOLOGIES

We may use cookies and similar technologies to:

  • Operate our website
  • Remember customer preferences
  • Maintain shopping baskets
  • Improve website performance
  • Measure website traffic
  • Understand how visitors use our Services
  • Support marketing and advertising where permitted

Where UK law requires consent for non-essential cookies or similar technologies, we will seek your consent before using them.

You can manage your cookie preferences through the cookie controls available on our website where applicable.

Our use of electronic communications and certain tracking technologies is also subject to the Privacy and Electronic Communications Regulations 2003 (PECR).

MARKETING COMMUNICATIONS

We may send marketing communications where permitted by applicable law.

This may be based on:

  • Your consent; or
  • Another lawful route available under UK electronic marketing rules, such as the applicable customer “soft opt-in” requirements.

Where the soft opt-in applies, it generally concerns marketing to existing customers about our own similar products and requires a clear opportunity to opt out.

You can unsubscribe from marketing communications at any time by:

  • Using the unsubscribe option contained in the communication; or
  • Contacting service@defwear.com

You have an absolute right to object to the use of your personal information for direct marketing.

Stopping marketing communications does not prevent us from sending non-marketing communications that are necessary for your order, account, return, refund, or other service requests.

WHO DO WE SHARE PERSONAL INFORMATION WITH?

We may share personal information where reasonably necessary with categories of service providers such as:

  • Payment processors
  • Banks and payment networks
  • Shipping and logistics providers
  • Website hosting providers
  • Cloud service providers
  • Customer service providers
  • IT and cybersecurity providers
  • Analytics providers
  • Marketing service providers
  • Professional advisers
  • Fraud-prevention providers
  • Government authorities or regulators where legally required

We only share information where there is an appropriate purpose and legal basis.

UK privacy notices should identify recipients or categories of recipients where applicable.

We do not sell personal information simply in exchange for monetary payment.

INTERNATIONAL TRANSFERS

Some of our service providers may process personal information outside the United Kingdom.

Where personal information is transferred internationally and UK data-transfer restrictions apply, we will use an appropriate lawful transfer mechanism and safeguards required by UK data protection legislation.

Depending on the circumstances, this may include:

  • UK adequacy regulations;
  • Appropriate contractual safeguards;
  • The UK International Data Transfer Agreement or applicable UK transfer mechanisms; or
  • Another transfer mechanism permitted by law.

ICO guidance requires organisations making restricted international transfers to assess whether applicable UK transfer requirements are met.

HOW LONG DO WE KEEP YOUR INFORMATION?

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including where necessary to:

  • Fulfil orders
  • Provide customer support
  • Manage returns and refunds
  • Maintain appropriate business records
  • Comply with tax and accounting obligations
  • Resolve disputes
  • Prevent fraud
  • Establish or defend legal claims

Retention periods may vary depending on the type of information and the legal or business reason for retaining it.

When information is no longer reasonably required, we will delete, anonymise, or securely dispose of it, subject to legal requirements.

The UK right-to-be-informed rules require businesses to explain their retention periods or the criteria used to determine them.

HOW DO WE KEEP YOUR INFORMATION SAFE?

We use appropriate technical and organisational measures designed to protect personal information against:

  • Unauthorised access
  • Accidental loss
  • Misuse
  • Alteration
  • Disclosure
  • Destruction

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

You are also responsible for keeping your account credentials confidential and should contact us if you believe your account has been compromised.

WHAT ARE YOUR DATA PROTECTION RIGHTS?

Subject to applicable UK law and any relevant exemptions, you may have the right to:

  • Be informed about how we use your personal information;
  • Access personal information we hold about you;
  • Correct inaccurate or incomplete personal information;
  • Request deletion of personal information in certain circumstances;
  • Request restriction of processing in certain circumstances;
  • Object to certain processing;
  • Object to direct marketing at any time;
  • Request data portability where applicable;
  • Withdraw consent where processing is based on consent;
  • Exercise applicable rights relating to certain forms of automated decision-making.

These rights do not apply in exactly the same way in every circumstance, and legal exceptions may apply.

ICO guidance confirms rights including access, rectification, erasure, restriction, objection, and portability.

HOW DO I EXERCISE MY RIGHTS?

To exercise a data protection right or ask a privacy question, contact:

service@defwear.com

Please provide enough information for us to identify you and understand your request.

We may need to request reasonable information to verify your identity before responding where necessary to protect your information.

We will respond within the period required by applicable UK data protection law.

DATA PROTECTION COMPLAINTS

If you believe Defwear has handled your personal information incorrectly, you can submit a complaint to us at:

service@defwear.com

We will review data protection complaints in accordance with applicable UK requirements.

If you remain dissatisfied, you also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection.

Current UK guidance specifically requires organisations to maintain a process for handling data protection complaints.

AUTOMATED DECISION-MAKING

Defwear does not ordinarily make decisions about customers based solely on automated processing where those decisions would produce legal or similarly significant effects.

If this changes, we will provide any information and safeguards required by applicable UK data protection law.

CHILDREN’S PRIVACY

Our online clothing store is not specifically directed at children.

We do not knowingly seek to collect personal information from children where parental or guardian involvement would be required under applicable law.

If you believe a child has provided personal information to us inappropriately, please contact:

service@defwear.com

CHANGES TO THIS PRIVACY NOTICE

We may update this Privacy Notice from time to time to reflect:

  • Changes to our Services;
  • Changes to our data-processing activities;
  • Changes in technology;
  • Changes in legal or regulatory requirements.

The latest version will be published on defwear.com.

Where required, we will bring material changes to your attention before the new processing begins.

CONTACT US

If you have questions about this Privacy Notice, your personal information, or your privacy rights, please contact:

Defwear Customer Service

Email: service@defwear.com

Website: defwear.com