Last Updated: June 2025 | GDC Clothing
At GDC Clothing, your privacy matters. This policy explains what personal data we collect, how we use it, who we share it with, and your rights under UK GDPR and the Data Protection Act 2018. By using our website or placing an order, you agree to the practices described here.
1. Who We Are
GDC Clothing is the data controller responsible for your personal data. For any questions about this policy or requests relating to your data, contact us at hello@gdc-clothing.com. We aim to respond within 30 days.
2. Data We Collect
We collect and process the following categories of personal data:
- Identity data — name and account username
- Contact data — billing address, delivery address, email address, telephone number
- Financial data — payment information processed securely by Stripe; we never store raw card data
- Transaction data — full details of orders placed with us
- Technical data — IP address, browser type, device information, and time zone
- Usage data — how you interact with our website, pages visited, and time spent
- Marketing data — your preferences for receiving communications from us
3. How We Use Your Data
We use your personal data to process and fulfil your orders, manage payments and delivery, send order confirmations and customer service communications, and improve our website and experience. Where you have opted in, we send marketing emails — you can unsubscribe at any time via the link in any email.
Our lawful bases for processing are: contract performance (order fulfilment), legitimate interests (fraud prevention, analytics), consent (marketing), and legal obligation (tax and accounting compliance).
4. Cookies
Our website uses cookies to deliver a better browsing experience and understand how visitors use our site. These include essential cookies (required for cart and session functionality), analytics cookies (helping us understand site performance), and marketing cookies (for relevant advertising). You can manage cookie preferences through your browser settings; disabling certain cookies may affect site functionality.
5. Third Parties
We only share your data where necessary with trusted service providers:
- Shopify — our e-commerce platform, hosting our store and processing order data
- Stripe — secure payment processor; your card details go directly to Stripe and are never stored by GDC
- Mailchimp — email marketing platform for newsletter distribution to opted-in customers
- Royal Mail / DPD — delivery partners who receive your name and address solely to fulfil your shipment
We do not sell your personal data to any third party, ever.
6. Data Retention
We retain personal data only as long as necessary for the purposes outlined in this policy. Order records are kept for 7 years for legal and accounting purposes. Marketing preferences are held until you unsubscribe. Technical and usage data is retained for up to 26 months.
7. Your Rights Under UK GDPR
You have the right to access the personal data we hold about you, request correction of inaccurate data, request erasure of your data in certain circumstances, restrict or object to how we process your data, and request a portable copy of your data. To exercise any right, email hello@gdc-clothing.com. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
8. Security
We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or disclosure. All transactions are SSL-encrypted. Access to personal data is restricted to authorised personnel only.
9. Changes to This Policy
We may update this Privacy Policy periodically. Changes will be posted on this page with a revised date. Continued use of our site after any update constitutes acceptance of the revised policy.
10. Contact
For any privacy-related queries, contact us at hello@gdc-clothing.com.