This notice explains how Edinburgh Tailoring Company Ltd, trading as SHIRTMKR, collects, uses and protects your personal information.
If you have any questions about your data, please contact orders@shirtmkr.co.uk.
The information we collect
We may hold information including your name, email address, delivery address and other account details.
Where you use SHIRTMKR to create or order a shirt, we may also hold your measurements, saved patterns, fitting information, saved designs and previous order specifications.
We retain records relating to your orders, payments, refunds and invoices. Card payments are processed securely by Stripe and SHIRTMKR does not store your full card details.
We may also retain messages you send us, including enquiries and requests for help with an existing order.
Where you choose to receive marketing from SHIRTMKR, we keep a record of your marketing preference and when that preference was given or withdrawn.
How we use your information
We use your information where it is necessary to provide the SHIRTMKR service, including creating your account, making your shirts, maintaining your patterns, processing orders, arranging delivery and providing customer support.
We also use information where necessary to meet legal, tax, accounting and record-keeping obligations.
Where you have chosen to receive marketing, we may use your contact information to send news, product information, offers and other SHIRTMKR communications.
We do not sell your personal information.
Our lawful basis for using your information
UK data protection law requires us to have a lawful basis for processing personal information.
For most account, pattern and order information, we process your data because it is necessary to provide the service you have asked us to provide and to fulfil our contract with you.
Some records are retained because we are required to do so by law, including certain tax and accounting records.
Where we send marketing based on your express opt-in, we rely on your consent. You can withdraw that consent at any time.
We may also process limited information where necessary for our legitimate interests, for example to protect SHIRTMKR against fraud, misuse or legal claims, provided those interests do not override your rights.
Who we share information with
We share personal information only where it is reasonably necessary to operate the service.
This may include service providers involved in:
payment processing
shirt production
delivery and logistics
website hosting and technical infrastructure
email and transactional communications
accounting and professional services
Where information is shared with a service provider, it should only be used for the purpose for which it was provided.
We may also disclose information where required by law or where necessary to establish, exercise or defend a legal claim.
Marketing
Marketing includes promotional emails, product news, offers and campaigns.
Where consent is required, SHIRTMKR uses a clear opt-in rather than assuming that you wish to receive marketing.
Every marketing email includes an unsubscribe option, and you can also change your preference through your account where that functionality is available.
Withdrawing consent does not affect transactional messages that are necessary for your account or orders.
SHIRTMKR does not currently send SMS marketing.
How long we keep your information
We keep personal information only for as long as it is reasonably required for the purpose for which it was collected, or where we are required to retain it by law. The ICO expects privacy information to explain retention periods or the criteria used to determine them.
Account information, measurements and saved patterns may be retained while your SHIRTMKR account remains active so that you can reuse them for future orders.
Certain transaction, tax and accounting records may need to be retained after an account has been deleted.
Further information about what happens when an account is deleted is available on our Account Deletion page.
Your rights
Depending on the circumstances, you may have the right to:
request access to the personal information we hold about you
ask us to correct inaccurate information
request deletion of information
restrict or object to certain uses of your information
receive certain information in a portable format
withdraw consent where processing is based on consent
These rights are not absolute and may depend on the lawful basis on which we hold the information.
To exercise your rights, contact orders@shirtmkr.co.uk.
You also have the right to raise a concern with the Information Commissioner’s Office if you believe your personal information has not been handled properly.
Cookies
SHIRTMKR uses cookies and similar technologies that are necessary for the website and service to function, such as maintaining a secure session, keeping you signed in and protecting forms. These are always in use.
SHIRTMKR also keeps its own record of website activity, covering the pages visited, the type of device used and where a visit came from. This is measured on our own website, without cookies, using an identifier that is renewed every day and cannot be traced back to you. It is not shared with anyone.
Where you agree to it, SHIRTMKR uses the Meta pixel, provided by Meta Platforms Ireland Limited, to measure how our advertising on Facebook and Instagram performs. It records actions such as viewing a page, starting a design, adding a shirt to your basket, beginning checkout, creating an account and completing an order, including the order value. This uses cookies, and the information is used by Meta for advertising measurement and optimisation, which may include showing you SHIRTMKR advertising.
Advertising cookies are only set if you choose “Accept” on the cookie notice. If you choose “No thanks”, nothing is loaded and nothing is sent to Meta. You can change your decision at any time using the “Cookie preferences” link in the footer of any page.
Our lawful basis for advertising and measurement cookies is your consent, which you may withdraw at any time. Necessary cookies are used on the basis of our legitimate interest in operating a secure and functional website.