Privacy Policy

Effective date: 5th September 2025

DATTs (“we”, “our”, “us”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights under UK GDPR, EU GDPR, and related data protection laws. It should be read together with our Cookie Policy.

1. Information We Collect

We may collect and process the following types of personal data:

  • Contact details: name, email address, phone number (e.g. through Omnisend sign-up forms).
  • Order details: billing/shipping address, garment selections, wedding or event dates, body measurements, and any other details you provide to complete an order.
  • Payment information: processed securely by trusted third-party providers (e.g. Stripe, PayPal). We do not store full payment card details.
  • Website data: cookies and usage information (see Section 8 below).

2. Sign-Ups at Events

From time to time, DATTs collects personal details at in-person events such as wedding fairs. This may include your name, email address, partner’s name, and wedding date. We collect this information with your explicit consent for the purpose of adding you to our mailing list and sending you updates, offers, and inspiration relevant to DATTs tailoring and Highlandwear.

Your details are stored securely and processed through our email marketing provider (currently Omnisend) and may also be integrated with our website platforms (such as WooCommerce or Shopify) for communication management. You can unsubscribe from these communications at any time by using the link provided in each email or by contacting us at datademons@datts.co.uk.

3. How We Use Your Information

We use your personal data only where we have a lawful basis under data protection laws, including:

  • Consent: for marketing communications via email or SMS (you can withdraw at any time).
  • Contract: to process and fulfil your orders, tailoring, and delivery.
  • Legal obligation: to meet accounting, tax, and other regulatory requirements.
  • Legitimate interests: for business administration, customer service, and to improve our services.

4. Sharing Your Information

We may share your personal data with trusted third parties, only as necessary:

  • Payment providers: Stripe, PayPal, and similar services.
  • E-commerce platforms: WooCommerce, Shopify.
  • Shipping and logistics providers: Royal Mail, Evri, DPD, FedEx, and others, depending on location.
  • Marketing and communication tools: Omnisend and similar services.
  • Tailors and makers: selected partners outside the UK to fulfil your bespoke orders.

All partners are required to process your information securely and in compliance with GDPR.

5. International Transfers

Some of our service providers and tailoring partners operate outside the UK and the European Economic Area. Where personal data is transferred internationally, we ensure appropriate safeguards are in place, such as the UK/EU Standard Contractual Clauses or adequacy decisions (e.g. the EU–US Data Privacy Framework).

6. Data Retention

We keep your personal data only as long as necessary for the purposes for which it was collected:

  • Mailing list data: until you unsubscribe or withdraw consent.
  • Order and payment records: at least 6 years, to comply with UK tax and accounting obligations.
  • Measurements: securely retained to assist with reorders or alterations, unless you request deletion.

7. Your Rights

You have the following rights under GDPR:

  • To access the personal data we hold about you.
  • To request correction of inaccurate or incomplete data.
  • To request deletion of your data (where legally possible).
  • To restrict or object to certain processing.
  • To request data portability (transfer of your data to another service).
  • To withdraw consent where processing is based on consent.

To exercise these rights, email us at datademons@datts.co.uk.

8. Cookies & Tracking

Our website uses cookies to ensure essential site functionality and improve your browsing experience. Cookies may also be used for analytics or marketing if you consent.

You can manage or disable cookies through your browser settings. If we introduce analytics (e.g. Google Analytics, Meta Pixel), we will update this policy and provide a cookie consent banner.

9. Security

We use appropriate technical and organisational measures to keep your personal data secure, including encryption, access controls, and secure storage.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website with the effective date shown at the top.

11. Contact Us

For any questions, or to exercise your data protection rights, please contact us at datademons@datts.co.uk

If you are not satisfied with our response, you may also lodge a complaint with the UK Information Commissioner’s Office (ICO) or your local supervisory authority.