Privacy policy

Privacy Policy for Simonetta Wang Ltd

Last Updated: July 15, 2026

1. Introduction

At Simonetta Wang Ltd ("we", "us", "our"), a company registered in the United Kingdom, protecting your personal data and privacy is a core principle of our bespoke garment service. This policy transparently explains how we collect, use, store and protect your personal information, as well as the rights you have regarding your data.
This policy applies to our official website www.simonettawang.com and all related bespoke services (collectively, the "Service"). By accessing or using the Service, you agree to the collection and use of your information in accordance with this policy.
We only process your personal data for the purposes and on the lawful bases set out in this policy.

2. Information We Collect

We only collect information necessary to provide and improve our bespoke service. The categories of data we may collect are as follows:

2.1 Personal & Bespoke Order Data

When you place an order, make an enquiry or use our custom service, we may collect personally identifiable information required to fulfil your order and delivery, including but not limited to:
  • Full name, email address, contact phone number
  • Shipping address and billing address: the billing address is used solely for payment security verification and may differ from your shipping address
  • Body measurements and fit preferences for your made-to-measure order
  • Communication records, feedback and support requests

2.2 Payment Information

All payment transactions are processed directly by Stripe, a third-party payment provider compliant with the PCI DSS payment security standard. We do not store full card numbers, CVV codes or other sensitive payment details on our servers. We only retain order value and payment status information for accounting purposes.

2.3 Usage Data

When you visit our website, we may automatically collect device and browsing information, including but not limited to: IP address, browser type and version, pages visited, time and date of visit, time spent on pages, unique device identifiers and other diagnostic data, to improve website performance and resolve technical issues.

2.4 Cookies & Tracking Technologies

We use cookies and similar tracking technologies to operate our website and enhance your experience. See Section 9 for full details of our cookie policy.

3. Purposes & Lawful Bases for Processing

In compliance with the UK General Data Protection Regulation (UK GDPR), all processing of your personal data is based on a valid lawful basis:
Purpose of Processing Lawful Basis
Processing bespoke orders, pattern making, production, shipping and order updates Performance of a contract
Providing customer support and responding to enquiries Performance of a contract + Legitimate interests
Improving our website, designs and bespoke service Legitimate interests
Fraud prevention, website security and technical troubleshooting Legitimate interests
Sending brand news, collection launches and marketing communications Explicit consent
Complying with tax obligations and lawful official requests Legal obligation

4. Data Sharing & Disclosure

We do not sell, trade or rent your personal data to third parties. We only share data within the necessary scope, under confidentiality obligations, in the following circumstances:

4.1 Service Providers

  • Payment processor: Stripe, to securely process your order payment and identity verification;

  • Shipping carriers: to deliver your bespoke garment, only sharing the recipient's name, contact phone number and shipping address;

  • Website & technology providers: Shopify and other hosting/analytics providers, to operate and maintain our website;

  • Authorized production partners: we only share measurements, pattern specifications and technical details required to complete your order. All partners are bound by strict confidentiality agreements.

4.2 Legal Requirements

We may disclose your personal data if required to do so by law, court order or valid public authority request.

4.3 Business Transfers

In the event of a merger, acquisition or asset sale, your personal data may be transferred as part of the transaction. We will ensure the recipient adheres to equivalent data protection obligations, and will notify you in advance via email or prominent website notice.

4.4 With Your Explicit Consent

For any disclosure beyond the scope of this policy, we will obtain your explicit consent in advance.

5. International Data Transfers

Our registered entity is based in the United Kingdom, while our operational and production activities involve locations in China. Our website and payment services are hosted on global servers. Your personal data may be transferred between the UK, the European Economic Area (EEA) and other countries and regions.
All international transfers are safeguarded by compliant mechanisms such as EU Standard Contractual Clauses (SCCs), to ensure your data receives an equivalent level of protection.

6. Data Security

We implement industry-standard technical and organizational security measures to protect your personal data from unauthorized access, use, disclosure, alteration or destruction. Sensitive data such as custom measurements and order details are stored with encryption.
Please note, however, that no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We only retain your personal data for as long as necessary to fulfil the purposes for which it was collected:

  1. Basic transaction and logistics data (order number, amount, recipient information, payment reference number, shipping records): retained for 7 years from the date of delivery, for tax compliance, customs audit, legal dispute resolution and other statutory requirements;

  2. Bespoke order data (body measurements, fit preferences): retained for 3 years from the date of delivery, for after-sales adjustments and repeat order reference, and will be deleted or anonymized thereafter;

  3. Orders cancelled during the cooling-off period: custom measurements and bespoke specifications are deleted within 30 days of cancellation. Only essential accounting records are retained;

  4. Marketing subscriptions: retained until you unsubscribe;

  5. Website analytics data: retained for 12 months, then automatically anonymized.

8. Your Data Rights

Depending on your location, you may have the following rights regarding your personal data:
  • Right of Access: you may request a copy of the personal data we hold about you;
  • Right to Rectification: you may request correction of inaccurate or incomplete personal data;
  • Right to Erasure: you may request deletion of your personal data, subject to legal exceptions;
  • Right to Restrict Processing: you may request that we restrict processing of your data under certain conditions;
  • Right to Data Portability: you may request that we transfer your data in a structured, commonly used format to you or a nominated third party;
  • Right to Withdraw Consent: you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
To exercise any of these rights, please contact us at simonettawang@simonettawang.com. We will respond to all valid requests within 30 days.
In addition, if you believe our processing of your data does not comply with applicable law, you have the right to lodge a complaint with your local data protection supervisory authority, such as the UK Information Commissioner's Office (ICO).

9. Cookie Policy

Cookies are small text files stored on your device by our website. We use three categories of cookies:
  1. Necessary Cookies: required for basic website functionality (shopping cart, payment validation, session state). These are active by default and cannot be disabled via browser settings without breaking core features.
  2. Analytics Cookies: used to measure website traffic and user behaviour, to help us improve our site and products. These are only enabled with your consent.
  3. Marketing Cookies: used to deliver relevant brand content and promotions. These are only enabled with your consent.
You can manage or delete cookies through your browser settings, or via our website cookie banner. Please note that disabling cookies may affect the functionality of certain parts of our website.

10. Children's Privacy

Our Service is not intended for anyone under the age of 18. We do not knowingly collect personal data from minors. If you are a parent or guardian and become aware that your child has submitted personal data to us without your consent, please contact us immediately.
If you are under 18, you may only use this Service and submit personal data with the supervision and consent of a parent or guardian.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our operations or applicable regulations. The revised policy will be posted on this page with an updated "Last Updated" date.
For material changes affecting core data processing rules, we will provide at least 30 days' notice via email or a prominent notice on our website. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions about this Privacy Policy, or wish to exercise your data rights, please contact us:
  • Email: simonettawang@simonettawang.com
  • Data Controller: Simonetta Wang Ltd (registered in the United Kingdom)