Privacy policy


Last Updated: July 15, 2026


1. Introduction

Simonetta Wang Ltd (“we”, “us”, “our”) is a company registered in the United Kingdom. Protecting your personal data and privacy is a core principle of our bespoke garment service. This policy clearly explains how we collect, use, store and safeguard your personal information, as well as the legal rights you hold over your data.
This policy applies to our official website www.simonettawang.com and all associated bespoke tailoring services (collectively referred to as the “Service”). By accessing or using our Service, you consent to the collection and use of your information in line with this policy.
We will only process your personal data for the purposes and on the legal bases set out within this document.

2. Information We Collect

We only gather information that is strictly necessary to fulfil and improve our bespoke tailoring service. The categories of personal data we may collect are listed below:

2.1 Personal & Bespoke Order Data

When you place an order, submit an enquiry or utilise our custom tailoring service, we may collect personally identifiable information required to complete your order and arrange delivery, including but not limited to:
  1. Full legal name, email address, active contact telephone number
  2. Shipping address and billing address: your billing address is used solely for payment security verification and may differ from your delivery address
  3. Body measurements and custom fit preferences specific to your made-to-measure garment order
  4. Correspondence records, customer feedback and after-sales support requests

2.2 Payment Information

All payment transactions are processed exclusively by Stripe, a third-party payment provider certified to the PCI DSS global payment security standard. We do not store full credit card numbers, CVV security codes or any other sensitive payment credentials on our servers. We only retain order value and payment status records for internal accounting compliance.

2.3 Website Usage Data

When you browse our website, we may automatically collect device and browsing metadata, including but not limited to: IP address, browser type and version, pages viewed, visit date and time, page dwell time, unique device identifiers and other diagnostic data. This data is used to optimise website performance and resolve technical faults.

2.4 Cookies & Tracking Technologies

We utilise cookies and equivalent tracking tools to operate our website and enhance your browsing experience. Full details of our cookie practices are set out in Section 9 of this policy.

3. Purposes & Lawful Bases for Data Processing

In full compliance with the UK General Data Protection Regulation (UK GDPR), every instance of your personal data processing relies on a valid legal basis, as outlined below:
Processing Purpose Corresponding Lawful Basis
Manufacturing bespoke garments, pattern creation, order production, delivery and order progress updates Performance of a contract
Delivering customer support and responding to your enquiries Performance of a contract + Legitimate interests
Refining our website, garment designs and bespoke tailoring services Legitimate interests
Fraud prevention, website security maintenance and technical troubleshooting Legitimate interests
Sending brand updates, new collection launches and targeted marketing communications Explicit opt-in consent
Fulfilling statutory tax obligations and responding to valid official authority requests Legal obligation

4. Data Sharing & Disclosure

We will never sell, trade or rent your personal data to external third parties for commercial gain. We only share your data within strictly limited scope, where recipients are bound by formal confidentiality agreements, in the following scenarios:

4.1 Authorised Service Providers

  1. Payment processor: Stripe, for secure order payment processing and identity verification
  2. Delivery carriers: only your recipient name, contact phone number and shipping address will be shared to complete garment delivery
  3. Website & technical service providers: Shopify and other hosting/analytics platforms to operate and maintain our official website
  4. Approved production partners: only body measurements, pattern specifications and technical garment details required to complete your order are shared. All partners are contractually bound by strict data confidentiality rules.

4.2 Legal Statutory Requirements

We may disclose your personal data if legally obligated to do so by an Act of Parliament, court order or formal request from a valid public regulatory authority.

4.3 Business Transfer Events

In the event of a company merger, acquisition or full/partial asset sale, your stored personal data may be transferred as part of the business transaction. We will guarantee the new data controller maintains equivalent UK GDPR data protection standards, and will notify you via email or a prominent on-site website notice at least 30 days prior to any data transfer.

4.4 With Your Separate Explicit Consent

For any data disclosure outside the scope defined within this privacy policy, we will obtain your clear, separate written consent in advance.

5. International Data Transfers

Our legal registered entity is based in the United Kingdom, while our operational and garment production activities take place in China. Our website and payment infrastructure run on global cloud servers. Your personal data may be transferred between the UK, European Economic Area (EEA) and other international territories.
All cross-border data transfers are protected by legally compliant safeguards including EU Standard Contractual Clauses (SCCs), to ensure your personal data receives an identical level of data protection as required under UK GDPR.

6. Data Security Measures

We deploy industry-standard technical and organisational security safeguards to protect your personal data against unauthorised access, unapproved use, accidental disclosure, alteration or permanent destruction. Sensitive bespoke data such as body measurements and custom order specifications are stored with end-to-end encryption.
Please note that no method of internet data transmission or digital electronic storage can be guaranteed 100% secure against unforeseen data breaches. We cannot provide absolute security warranties for online data transmission.

7. Data Retention Periods

We only retain your personal data for the minimum duration necessary to fulfil the original purpose for which it was collected:
  1. Core transaction & logistics records (order number, order value, recipient contact details, payment reference, delivery tracking records): stored for 7 years post-delivery, to satisfy tax compliance, customs audit, legal dispute resolution and other statutory record-keeping requirements
  2. Bespoke tailoring data (body measurements, custom fit preferences): retained for 3 years post-delivery, to facilitate after-sales garment adjustments and repeat order support; all such data will be fully deleted or anonymised once this retention period expires
  3. Orders cancelled within the statutory cooling-off period: all custom body measurements and bespoke garment specifications are permanently deleted within 30 calendar days of order cancellation. Only mandatory accounting records will be retained
  4. Marketing email subscription data: stored indefinitely until you submit an unsubscribe request
  5. Anonymous website analytics data: retained for 12 months, after which all personal identifiers are permanently removed via anonymisation

8. Your Data Subject Rights

Depending on your country of residence, you hold the following enforceable legal rights in respect of your stored personal data:
  1. Right of Access: You may submit a formal request to receive a full copy of all personal data we hold about you
  2. Right to Rectification: You may request us to correct any inaccurate or incomplete personal information stored on your account
  3. Right to Erasure (Right to be Forgotten): You may request full permanent deletion of your personal data, subject to limited legal retention exceptions
  4. Right to Restriction of Processing: You may request us to pause all processing of your personal data under specific qualifying conditions
  5. Right to Data Portability: You may request we transfer your personal data to you, or a nominated third-party controller, in a standardised machine-readable digital format
  6. Right to Withdraw Consent: You may withdraw any previously granted data processing consent at any time. Consent withdrawal will not invalidate any lawful data processing completed prior to your withdrawal request.
To exercise any of the above data rights, please contact our data team via simonettawang@simonettawang.com. We will respond to all valid formal data requests within a statutory 30-day window.
If you believe our processing of your personal data breaches applicable data protection legislation, you retain the right to submit a formal complaint to your local data protection supervisory authority, including the UK Information Commissioner’s Office (ICO).

9. Cookie Policy

Cookies are small text files saved to your personal device when you visit our website. We utilise three distinct categories of cookies:
  1. Necessary Essential Cookies: Mandatory for core website functionality including shopping cart storage, payment validation and user session persistence. These cookies activate automatically and cannot be fully disabled via standard browser settings without breaking core site features.
  2. Analytics Cookies: Used to measure website visitor traffic and user browsing behaviour, to help us continuously improve our website and tailoring products. These cookies will only activate with your explicit consent.
  3. Marketing Cookies: Deployed to deliver personalised brand content and relevant promotional offers. These cookies will only activate with your explicit consent.
You may manage, restrict or fully delete stored cookies at any time via your device browser settings, or through our website pop-up cookie consent banner. Please be aware that disabling non-essential cookies may limit the functionality of certain sections of our website.

10. Children’s Privacy

Our Service is exclusively designed for users aged 18 years and older. We do not knowingly collect or store personal data from minors under 18 years of age. If you are a parent or legal guardian and become aware your child has submitted personal data to us without your formal consent, please contact our data team immediately.
If you are under the age of 18, you may only use our Service and submit personal data under the direct supervision and formal consent of a parent or legal guardian.

11. Amendments to This Privacy Policy

We reserve the right to update and revise this Privacy Policy periodically to reflect changes to our business operations or updates to applicable data protection regulations. All revised policy versions will be published on this page with an updated “Last Updated” date clearly displayed.
For material policy changes that alter core personal data processing rules, we will provide a minimum of 30 days advance notice via customer email or a prominent static notice on our website homepage. We recommend all customers review this policy regularly for updates.

12. Contact Information

If you hold any questions regarding this Privacy Policy, or wish to submit a formal request to exercise your data subject rights, please contact us via the below details:

Email: simonettawang@simonettawang.com
Data Controller: Simonetta Wang Ltd (registered in the United Kingdom)