Privacy policy
Welcome to HerUpStart!
We're so glad you're here. This privacy policy is here to explain, in plain and simple terms, why we collect personal data, what kind of data we collect, and how we use it to bring you the best possible shopping experience.
By using our website or services, you're agreeing to the practices described in this policy. If anything here doesn't make sense or you have questions, we'd love to hear from you — our contact details are just below.
-
Who we are
HerUpStart ("HerUpStart", "we", "us" or "our") sells garments to customers across the United Kingdom and Northern Ireland.
Company name: HerUpStart Studio Ltd
Registered address: 86-90 Paul Street, London, England, EC2A 4NE
Company number: 16771314
Email: support@herupstarts.co.uk
Phone: +442037694800 -
Some definitions
A few terms come up throughout this policy — here's what they mean:
- Personal data: As defined in the UK GDPR.
- Usage data: Information collected automatically about how you use our website, such as pages visited or how long you spend on our site.
- Data controller: The organisation that decides why and how personal data is processed. For the purposes of this policy, that's HerUpStart Studio Limited.
- Service: The delivery of goods to you through the HerUpStart website.
- Applicable data protection laws: The UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and any other data protection or privacy laws applicable in the United Kingdom and Northern Ireland.
-
What personal data we collect
Depending on how you interact with us, we may collect:
- Name and contact details
- Email address and phone number
- Billing and delivery address
- Order history or transaction details
- Messages you submit through our contact forms
- Newsletter preferences
- Account login details
- Payment references (we don't store full card details — these are handled securely by our payment provider)
- Website usage information, such as pages visited or forms submitted
- IP address, browser type and device information
- Any other information you choose to include when you contact us
-
Where we get this data from
We collect personal data from a few different places:
- When you place an order with us
- When you contact us with any specific details or questions
- When you create an account with us
- When you sign up for our newsletter
- Through cookies and analytics tools when you browse our website
-
Our legal basis for using your data
UK data protection law requires us to have a valid legal reason to use your personal data. We rely on one of the following:
- Consent: Where you've given us explicit, freely given, specific, informed, and unambiguous consent.
- Contract: Where using your data is necessary to fulfil a contract with you — for example, processing and delivering your order.
- Legal obligation: Where we need to use your data to comply with a legal requirement.
- Legitimate interests: Where it's reasonably necessary for the purposes of the legitimate interests pursued by us.
-
Usage data
Usage data is information collected automatically as you use our website — things like the pages you visit, how long you spend on them, the links you click, and technical details like your browser type, device, and IP address.
We use usage data to understand how our website is being used, fix issues, and improve your overall experience with us. We may use cookies and similar analytics tools to collect this information. For more information on the usage data, please refer to our Cookies Policy.
-
What we use your data for
We use your personal data to:
- Provide our products and services to you
- Process and deliver your orders
- Create and manage your account
- Contact you about your order, account, or enquiries
- Send you newsletters, if you've signed up for them
- Respond to messages you send us
- Improve our website and services
- Meet our legal and regulatory obligations
-
Sharing your personal data
We don't routinely share your personal data with third parties. Where we do need to work with trusted service providers (for example, delivery couriers or payment processors) to provide our services, we only share what's necessary for them to do their job.
If HerUpStart is ever involved in a business transfer — such as a merger, acquisition, or sale of assets — your personal data may be shared as part of that process. In every case, we will make sure this is done in compliance with applicable data protection laws.
-
How long we keep your data
We keep your personal data only for as long as necessary to provide our services, and as required by law — for example, to meet tax and accounting obligations. Retention periods vary by data type and purpose, and we consider the nature and sensitivity of the data, potential risks and the purpose of collecting the data to determine the retention periods. Once it's no longer needed, we securely delete or anonymise the data.
-
Transferring your data
Your data is processed by HerUpStart at our head office, and may also be accessed by our employees who could be located in countries outside the UK. By agreeing to this privacy policy, you consent to this transfer of your data.
Wherever your data is transferred, we will make sure it's handled in compliance with all applicable data protection laws, and that appropriate safeguards are in place to keep it secure.
-
Your rights
Under UK data protection law, you have the right to:
- Access the personal data we hold about you
- Correct any inaccurate or incomplete data
- Object to how we use your data in certain circumstances
- Erasure: Ask us to delete your personal data
- Restrict processing: Ask us to limit how we use your data in certain circumstances
- Data portability: Ask us to provide your data in a portable format, or transfer it to another organisation
- Withdraw consent: At any time, where we're relying on consent to use your data
To exercise any of these rights, just get in touch with us using the contact details in Section 1 — we're happy to help.
-
Children's data
HerUpStart does not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can remove it.
-
Changes to this policy
We may update this privacy policy from time to time, for example to reflect changes in our practices or the law. We'll post any updates on this page, so please check back periodically.
-
How to complain
If you have any concerns about how we handle your personal data, please contact us first — we'll do our best to sort it out. We remain committed to protecting your data and following an thorough and prompt process to resolve your queries. If you have any concerns, we would love to hear from you.
Upon receiving such a complaint, you will receive acknowledgement of your complaint within 7 days of such date. Thereafter, we will conduct a thorough enquiry to resolve your concerns and take prompt action thereupon. If you're still not happy, you have the right to lodge a complaint with the UK's data protection regulator.
Information Commissioner's Office (ICO) — ico.org.uk, or by calling 0303 123 1113.