Privacy Policy (UK GDPR)

This Privacy Policy explains how Dress Up Arena Ltd. (“we”, “us”, “our”) collects, uses, shares and protects your personal data when you use dressuparena.co.uk (the “Website”), create an account, place an order, contact us, or sign up to marketing.

Who we are (Data Controller)

Company: Dress Up Arena Ltd.
Email: support@dressuparena.com

Personal data we collect

We may collect the following categories of personal data:

  • Identity & contact details: name, email address, phone number.
  • Order & account details: billing/shipping address, order contents, order history, account login details (passwords are stored encrypted).
  • Payment details: we do not store full card details. Payments are processed by our payment providers (e.g., Stripe / PayPal) who handle card data securely.
  • Customer support: messages you send to us (email/contact forms), and any information you choose to provide.
  • Technical & usage data: IP address, device/browser information, pages viewed, and cookie/consent choices.

We do not intentionally collect special category data (e.g., health, religion) or data about children. Our products/services are intended for adults.

How we use your data (purposes)

We use your personal data to:

  • Process and deliver orders (including sending order/service emails).
  • Provide customer service and manage returns/refunds/disputes.
  • Create and manage your account (if you register).
  • Prevent fraud and keep the Website secure.
  • Measure and improve Website performance and user experience.
  • Send marketing communications only where permitted (and you can opt out anytime).

Legal bases (UK GDPR / GDPR)

We process personal data on these legal bases:

  • Contract: to fulfil orders and provide services you request.
  • Legal obligation: accounting/tax and compliance requirements.
  • Legitimate interests: security, fraud prevention, improving the Website, and service administration.
  • Consent: cookies and certain marketing activities where required by law (you can withdraw consent at any time).

Who we share data with

We share data only when necessary, including with:

  • Payment providers (e.g., Stripe / PayPal) to process payments.
  • Delivery/fulfilment partners and couriers to deliver orders.
  • Hosting/IT providers who run and maintain the Website.
  • Analytics and marketing tools (only if enabled and depending on your cookie consent choices).
  • Professional advisers (accountants, legal advisers) where necessary.

We require these parties to protect your data and use it only for the services they provide to us.

International transfers

Some service providers may process data outside the UK. Where this happens, we use appropriate safeguards (such as contractual protections) as required by applicable law.

Data retention

We keep personal data only as long as necessary for the purposes above, including legal/accounting obligations. Typical retention periods include:

  • Order records: retained for legal/tax compliance.
  • Account data: retained while your account is active; you may request deletion subject to legal requirements.
  • Support messages: retained as needed to resolve issues and maintain service records.
  • Cookie/analytics data: retained according to the relevant tool settings and your consent choices.

Your rights

Depending on your location and applicable law, you may have rights to:

  • Access your personal data and receive a copy.
  • Correct inaccurate data.
  • Delete data (where applicable).
  • Restrict or object to certain processing.
  • Withdraw consent (where processing is based on consent).
  • Data portability (in certain cases).
  • Lodge a complaint with a supervisory authority (UK: the Information Commissioner’s Office).

To exercise your rights, email support@dressuparena.com.

Cookies & consent

We use cookies and similar technologies for essential site functions and (if enabled) analytics/marketing. You can manage your choices using the cookie banner and your browser settings. For more details, please see our Cookie Policy.

Security

We use reasonable technical and organisational measures to protect personal data. However, no online service can be guaranteed 100% secure.

Third-party links

Our Website may link to third-party sites. We are not responsible for their privacy practices.

Changes to this policy

We may update this policy from time to time. The “Last updated” date will reflect changes.