Privacy Policy

01About this policy

This Privacy Policy explains how [UK COMPANY NAME], trading as Aquadoir ("Aquadoir UK", "we", "us"), company number [UK COMPANY NUMBER], registered office [UK REGISTERED OFFICE ADDRESS], collects, uses, shares and protects your personal data when you visit aquadoir.com from the United Kingdom, place an order for delivery in the UK, sign up for our emails or contact us. We are the controller of this data, registered with the Information Commissioner's Office (ICO) under number [ICO REGISTRATION NUMBER].

This policy is written for the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR), as amended by the Data (Use and Access) Act 2025.

Please read it with our Terms of Use and Cookies Policy. If you live outside the UK, our India Privacy Policy or Global Privacy Policy applies.

02The information we collect

We collect only what we need to sell you clothing, deliver it and look after you afterwards.

An account is optional: you can always order as a guest. If you create one, your password is stored only in a protected (hashed) form that no one at Aquadoir can read (see Your account). We do not ask for, and you should not send us, sensitive information such as health or biometric data, or government identity numbers. We do not need them to process your order.

03Your account

An account is optional; you can always order as a guest. If you create one, we keep the account details listed above together with the orders linked to it: those you place while signed in, and earlier orders placed with the same email address once you have confirmed that address is yours.

• What it is for: signing you in, showing your orders and where they are, filling in checkout with your saved addresses, and keeping your saved pieces on every device you sign in to.
• Emails about your account: a code to confirm your email address when you create the account or change it, a code if you reset your password, and a note whenever your password or email address changes or the account is deleted. These are service emails, not marketing.
• Keeping it safe: your password is stored only in a protected (hashed) form; signing in keeps one secure cookie on your device (see our Cookies Policy); after five wrong passwords, signing in with that email pauses for 15 minutes; and changing your password signs you out on your other devices.
• Where it is held: on our store system (WooCommerce, on panel-aqdo.aquadoir.com), with your orders.
• Your control: you can see and change your details, addresses, saved pieces and newsletter choice, sign out of every device, or delete the account at any time in My Account. Deleting it removes the account, your saved addresses and saved pieces straight away; records of past orders are kept as described in How long we keep it.

We use these details to provide the account you asked for (performance of our contract with you) and, for the security checks, in our legitimate interests in keeping accounts safe.

04How we use it, and our lawful basis

Where we rely on legitimate interests, we have balanced them against your rights and you can object (see Your rights). We do not make decisions about you based solely on automated processing.

05Cookies and on-device storage

Our own pages set no cookies, except one that keeps you signed in if you use an account. They run no advertising or analytics tools, and keep your bag, saved pieces and currency in your browser's own storage on your device. Some content from other services, and the secure payment page, may set their own cookies. All of this, and how to control it, is explained in our Cookies Policy.

06Who we share it with

We never sell, rent or trade your personal data, and we do not use it for advertising. Each provider receives only what it needs, and is bound by contract or by its own legal duties to protect it. If our business is ever sold or restructured, your data may pass to the new owner, who must honour this policy; we will tell you before that happens.

07International transfers

Some of the people who handle your data are outside the UK:

• India: Aquadoir India, which runs our website and customer care with us and sends pieces that are only in stock in India. India is not covered by UK adequacy regulations, so we protect these transfers with the International Data Transfer Agreement (IDTA) approved under UK law.
• United States and elsewhere: some providers, such as website hosting, payments (Stripe), fonts, location lookup and Meta, process data on servers outside the UK. We rely on UK adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework for certified US companies) or on the IDTA or the UK Addendum to the EU standard contractual clauses.

You can ask us for a copy of the safeguards we use.

08How long we keep it

If we need data for longer for a legal claim or investigation, we keep it only for that purpose. After that, we delete it or make it anonymous.

09How we protect it

We protect your personal data with security measures appropriate to the data we hold, including:

• encrypted (HTTPS) connections for every page and every order;
• the keys that connect our website to our order system stay on our server and are never sent to your browser;
• prices, stock and delivery charges are checked again on our server when you order, so an order cannot be changed in your browser;
• online payments are handled entirely by Stripe, so card and banking details never reach our systems;
• account passwords are stored only in a protected (hashed) form, signing in pauses after repeated wrong passwords, and the sign-in cookie cannot be read by scripts on the page;
• access to order data is limited to the people who need it to serve you.

No way of sending or storing data online is completely secure, so we cannot guarantee absolute security. If a personal data breach is likely to put your rights at risk, we will report it to the ICO within 72 hours of becoming aware of it, and if the risk to you is high, we will tell you without undue delay what happened and what you can do.

10Your rights

Under the UK GDPR you have the right to:

• be informed about how we use your data, which is what this policy does;
• access a copy of the personal data we hold about you;
• rectify data that is inaccurate or incomplete;
• erase your data, where there is no good reason for us to keep it;
• restrict how we use your data, for example while a correction is checked;
• data portability: receive the data you gave us in a common electronic format, or have it sent to another business;
• object to our use of your data based on legitimate interests, and to direct marketing at any time;
• withdraw consent at any time, where we rely on it.

How to use your rights

If you have an account, you can see and correct your details, and delete the account, yourself at any time in My Account.

Email care@aquadoir.com with the subject "Privacy request", from the email address you used for your order. We may ask you to confirm your identity first. Using your rights is free. We acknowledge every request within 48 hours and respond within one month; if a request is complex, we may extend this by up to two more months and will tell you why.

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office: ico.org.uk, telephone 0303 123 1113.

11Children

Our website and products are meant for adults, and you must be 18 or over to place an order. We do not knowingly collect personal data from children. If you believe a child has given us personal data, email us and we will delete it.

12Marketing emails

We send news and new releases by email only if you sign up through the newsletter form on our website, where you give your title, name, country and email address and tick the consent box. Every marketing email has an unsubscribe link, or you can email us to stop them. We do not send marketing texts or make marketing calls.

Even if you unsubscribe, we will still send messages about your orders, such as confirmations, delivery updates and replies about returns and refunds.

13Links to other websites

Our website links to other sites and services, such as Instagram, WhatsApp, Stripe and courier tracking pages. Their privacy practices are their own and are not covered by this policy, so please read their privacy policies before sharing personal data with them.

14Changes to this policy

We may update this policy when our services or the law change. The "Last updated" date at the top shows the latest version. If we make a significant change to how we use your personal data, we will tell you by email (if we have your address) or with a clear notice on our website before it takes effect.

15Contact us

For any question, request or complaint about your personal data, contact us. We reply within 48 hours.

SELLER

[UK COMPANY NAME], trading as Aquadoir

COMPANY NUMBER

[UK COMPANY NUMBER], registered in [ENGLAND AND WALES]

REGISTERED OFFICE

[UK REGISTERED OFFICE ADDRESS]

VAT NUMBER

[UK VAT NUMBER]

CUSTOMER CARE

care@aquadoir.com
+44 7442644643

PRIVACY CONTACT

care@aquadoir.com (subject: "Privacy request")
ICO registration [ICO REGISTRATION NUMBER]