Who we are

Owalórì Atelier is a fashion and lifestyle brand offering clothing and related services through owaloriatelier.com. References in this policy to “Owalórì Atelier”, “we”, “us” or “our” mean the business responsible for deciding how your personal information is used.

For the purposes of UK data protection law, Owalórì Atelier is the controller of the personal information described in this policy.

Information we collect

The personal information we collect depends on how you interact with us. It may include:

• Identity information: your name, username and account details.
• Contact information: your email address, telephone number, billing address and delivery address.
• Order information: the products you purchase, sizes, colour choices, order value, delivery details, returns, refunds and correspondence relating to an order.
• Measurements and preferences: measurements, sizing information, fit preferences and design requirements that you provide for made-to-measure, alteration or custom requests.
• Payment and transaction information: payment status, transaction references and limited payment details supplied to us by the payment provider.
• Communications: information you provide in contact forms, emails, telephone conversations, social-media messages, reviews, enquiries and customer-service requests.
• Marketing preferences: whether you have chosen to receive news, collection announcements or other marketing from us.
• Technical information: your IP address, browser type, device type, operating system, time zone, referring website and information about how you use our website.
• Cookie and analytics information: information collected through cookies and similar technologies, subject to your choices where consent is required.

Please do not send us sensitive information, such as medical information, unless we specifically request it and explain why it is required. If information about a disability or health condition is genuinely necessary to fulfil a custom order, we will handle it with additional care and seek explicit consent where required.

How we collect information

We may collect personal information:

• directly from you when you create an account, place an order, complete a form, request a return, contact us or subscribe to marketing;
• automatically when you browse the website, through server logs, cookies and similar technologies;
• from service providers involved in processing payments, delivering orders, preventing fraud, operating the website or providing analytics; and
• from social-media platforms when you contact or interact with us through those services.

How and why we use your information

UK data protection law requires us to have a lawful basis for using personal information. The principal purposes and lawful bases on which we rely are set out below.

Where we rely on legitimate interests, we consider whether the use is necessary and balance our interests against your rights and reasonable expectations.

Payment information

Online payments are processed by the payment provider presented to you during checkout. Your payment information is submitted directly to that provider and is handled under its own privacy policy and security standards.

We do not ordinarily receive or store your complete payment-card number or card security code. We may receive limited information such as the payment status, payment method, transaction reference and the final digits of a payment card where this is necessary to confirm or manage an order.

Who we share information with

We may share personal information only where necessary with:

• website-hosting and ecommerce service providers;
• payment processors and fraud-prevention providers;
• delivery, postal and courier companies;
• email, customer-service and communications providers;
• analytics, advertising or social-media providers where you have consented to the relevant cookies or technology;
• IT, cybersecurity, backup and technical-support providers;
• accountants, lawyers, insurers and other professional advisers;
• courts, regulators, law-enforcement bodies and public authorities where disclosure is legally required or necessary to protect rights and safety; and
• a prospective purchaser, investor or successor if the business or its assets are reorganised, sold or transferred, subject to appropriate confidentiality protections.

Service providers may use personal information only for the agreed service and in accordance with our instructions, unless they are independently required to process it by law.

We do not sell your personal information.

International transfers

Some providers that support our website or communications may process personal information outside the United Kingdom. Where this happens, we take reasonable steps to ensure the information receives an appropriate level of protection.

Depending on the destination and provider, safeguards may include a UK adequacy regulation, the UK International Data Transfer Agreement, the UK Addendum to approved contractual clauses, or another mechanism permitted by UK data protection law.

You may contact us if you would like further information about the safeguards relevant to your personal information.

How long we keep information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected. When deciding how long to retain information, we consider:

• the duration of our relationship with you;
• the nature and sensitivity of the information;
• our contractual, accounting and tax-record obligations;
• applicable limitation periods and potential legal claims;
• fraud-prevention and security requirements; and
• whether you have withdrawn consent or objected to processing.

When information is no longer required, we will delete it, anonymise it or securely restrict its use, unless the law requires us to retain it for longer.

Cookies and similar technologies

Our website uses essential cookies to operate functions such as the shopping basket, checkout, security and account sign-in. With your permission, we may also use optional cookies for analytics, personalisation, advertising or social-media features.

You can manage optional cookies through the cookie controls provided on the website. Withdrawing consent will not affect the lawfulness of processing that took place before consent was withdrawn.

Please read our Cookie Policy for further information.

Marketing communications

If you subscribe to our mailing list or otherwise lawfully agree to receive marketing, we may send you information about collections, launches, offers and Owalórì Atelier news.

You can stop receiving marketing at any time by:

• using the unsubscribe link in a marketing email; or
• emailing info@owaloriatelier.com.

Unsubscribing from marketing will not prevent us from sending service messages that are necessary for an order, account, return or customer enquiry.

Your data protection rights

Depending on the circumstances, UK data protection law may give you the right to:

• request access to the personal information we hold about you;
• ask us to correct inaccurate or incomplete information;
• ask us to erase your personal information;
• ask us to restrict how your information is used;
• receive certain information in a structured, commonly used and machine-readable format;
• object to processing based on legitimate interests, including direct marketing;
• withdraw consent at any time where we rely on consent; and
• complain to the Information Commissioner’s Office.

These rights are not absolute, and an exemption may apply in some circumstances. We may need to confirm your identity before completing a request. We will normally respond within one month and will not normally charge a fee.

To exercise a right, email info@owaloriatelier.com.

You may also complain to the UK Information Commissioner’s Office. Visit ico.org.uk/make-a-complaint . We would appreciate the opportunity to address your concern first, but you are not required to contact us before approaching the ICO.

How we protect your information

We use appropriate organisational and technical measures designed to protect personal information against accidental loss, unauthorised access, misuse, alteration or disclosure.

Access to personal information is restricted to people and providers who need it for legitimate business purposes. However, no internet transmission or storage system can be guaranteed to be completely secure.

If you create an account, you are responsible for keeping your password confidential. Please contact us promptly if you believe your account or information has been compromised.

Third-party links and social media

Our website may link to third-party websites and platforms. Those organisations are responsible for their own privacy practices, and this Privacy Policy does not govern how they use your information. Please review their privacy information before providing personal information.

You can visit Owalórì Atelier on Instagram . Instagram’s use of information is governed by its own privacy policy.

Children’s privacy

Our website and products are not directed at children, and we do not knowingly collect personal information directly from children. A parent or guardian should contact us if they believe a child has provided personal information without appropriate permission.

Changes to this policy

We may update this Privacy Policy when our services, providers or legal obligations change. The latest version will be published on this page, and the “last updated” date will be revised.

Where an update materially affects how we use your information, we will take reasonable steps to bring it to your attention.

Contact us

Contact us if you have a question about this policy, how we use your information or your data protection rights.