Worn For YouUK worn garments
Legal

Privacy policy

Last updated: 1 April 2026

This policy describes how the Worn For You editorial site collects, uses and protects personal data. It applies to this website only, not to any marketplace or transaction (those have separate policies at checkout).

Who we are

Worn For You, the editorial team publishing this site. Data controller for the purposes of the UK GDPR and Data Protection Act 2018.

What we collect

  • Analytics: aggregated, IP-anonymised visit data (pages viewed, referrer, device type). We do not use tracking cookies that identify individual visitors.
  • Contact form: only the name, email and message you submit voluntarily. Nothing else.
  • Server logs: standard technical logs (IP, timestamp, request path) held for 30 days for security and debugging.

What we do NOT collect

  • No advertising cookies.
  • No cross-site tracking.
  • No third-party analytics that share your data.
  • No newsletter subscription unless you actively opt in via a form.

Lawful basis

  • Analytics: legitimate interests — understanding aggregate site use, with data anonymised.
  • Contact form: your explicit consent by submission, and our legitimate interest in responding.
  • Server logs: legitimate interests — site security and integrity.

Retention

  • Aggregated analytics: 26 months.
  • Contact form submissions: 12 months from your last message.
  • Server logs: 30 days.

Sharing

We do not sell, rent or trade personal data. We share only with:

  • Our hosting provider (technical delivery).
  • Our analytics provider (aggregate reporting).
  • Law enforcement if legally required.

International transfers

Where a provider processes data outside the UK, we use standard contractual clauses or an adequacy decision to ensure UK GDPR-equivalent protection.

Your rights

Under UK GDPR you can:

  • Request a copy of your data (subject access).
  • Request correction of inaccurate data.
  • Request deletion (right to erasure).
  • Object to processing based on legitimate interests.
  • Complain to the Information Commissioner's Office (ico.org.uk).

To exercise any right, contact us via the contact page. We respond within 30 days.

Cookies

We use only strictly necessary cookies (session, security). We do not use tracking, analytics or advertising cookies. No cookie banner is required for strictly necessary cookies under UK PECR guidance.

Changes to this policy

Material changes are dated at the top of the page. We recommend re-reading periodically.

Contact

Privacy questions: use the contact page. Include "Privacy" in the subject.