Privacy policy

Last updated: 23 September 2026

This Privacy Policy explains how Lawless Clothing Ltd ("Lawless Clothing", "we", "us" or "our") collects, uses, shares and protects your personal information when you visit lawlessclothing.co.uk (the "Site"), buy from us, create an account, sign up to our emails, or otherwise contact us (together, the "Services").

In this policy, "you" means anyone whose personal information we handle, whether you are a customer, a website visitor or someone who contacts us.

1. Who we are

Lawless Clothing Ltd is the data controller responsible for your personal information. This means we decide how and why it is used.

  • Company name: Lawless Clothing Ltd
  • Company number: 16162027 (registered in England and Wales)
  • Address: Unit K1, Bryn Business Centre, Bryn Lane, Wrexham, LL13 9UT, United Kingdom
  • Email: hello@lawlessclothing.co.uk

We are based in the UK and handle your information in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR). Where we handle information about people in the European Economic Area (EEA), the EU GDPR may also apply.

2. The information we collect

Information you give us

  • Contact details: your name, email address and postal address.
  • Order information: billing and delivery addresses, the items you buy, order history and payment confirmation. We never see or store your full card details. Payments are handled securely by our payment providers (see section 5).
  • Account information: if you create an account, your login email, password (stored in encrypted form) and saved addresses.
  • Customer support information: anything you tell us when you contact us, for example by email or through the messaging feature on our Site.
  • Reviews: if you leave a product review, your name (or the name you choose to display), your review, rating and any photos you upload.
  • Marketing preferences: whether you have signed up to our marketing emails, and your choices about cookies.

Information we collect automatically

When you use our Site, we and our service providers collect certain technical information, such as your IP address, device and browser type, the pages you visit, the products you view, items added to your basket, and how you arrived at our Site. We collect some of this using cookies and similar technologies. See section 7 for details.

Information from third parties

We may receive information from:

  • Shopify, which powers our online store.
  • Our payment providers, who confirm whether your payment was successful and help us detect fraud.
  • Delivery companies, who give us tracking and delivery updates.
  • Advertising platforms (Meta, TikTok and Google), which may tell us how people responded to our adverts. We only receive this where you have agreed to advertising cookies.

3. How we use your information and our legal basis

The law requires us to have a valid legal reason (a "lawful basis") for each way we use your information. The table below sets these out.

What we use your information for Our lawful basis
Processing and delivering your order, taking payment, handling returns, exchanges and refunds, and sending order and delivery updates Contract. We need it to fulfil our agreement with you.
Creating and managing your customer account Contract.
Responding to your questions and providing customer support Legitimate interests. Being able to help our customers.
Keeping records of sales and transactions for tax and accounting Legal obligation.
Preventing fraud and keeping our Site and accounts secure Legitimate interests. Protecting our business and customers.
Sending marketing emails to people who have signed up Consent.
Sending marketing emails about similar products to existing customers, and reminder emails if you leave items in your basket during checkout (the "soft opt-in") Legitimate interests, as permitted by PECR. You are given the chance to opt out when you give us your email address, and in every email we send.
Asking you to review a product you have bought (via Judge.me) Legitimate interests. Getting feedback and helping other customers choose.
Publishing reviews you submit Consent. You choose to submit a review.
Understanding how our Site is used so we can improve it (analytics) Legitimate interests. See section 7 for cookie choices.
Showing you adverts on Facebook, Instagram, TikTok and Google, and measuring how well they work Consent. Given through our cookie banner or, for customer email lists, your agreement to receive marketing.
Complying with legal requests and defending legal claims Legal obligation or legitimate interests.

Where we rely on legitimate interests, we have considered your rights and interests and are satisfied they are not overridden. You can ask us for more information about this.

4. Marketing

We will only send you marketing emails if you have signed up, or if you are an existing customer (or started a checkout) and did not opt out. Our marketing emails are sent using Shopify Email.

You can unsubscribe at any time by clicking "unsubscribe" in any marketing email, by changing your preferences in your account, or by emailing hello@lawlessclothing.co.uk. If you unsubscribe, we will keep your email address on a "do not contact" list so we can make sure you are not sent marketing again. We will still send you service messages about your orders or account.

We do not currently send marketing by text message or post.

5. Who we share your information with

We do not sell your personal information for money. We share it only with trusted organisations that help us run our business, and only as much as they need:

  • Shopify: our e-commerce platform, which hosts our Site and stores customer, order and account data. It also provides our analytics, Shopify Email and customer messaging tools.
  • Payment providers: Shopify Payments, Apple Pay and Google Pay, which process your payment securely.
  • Delivery companies: Royal Mail, Evri and DPD, which receive your name, delivery address and, where needed, your email address for tracking updates.
  • Judge.me: our product review provider, which sends review requests and hosts reviews.
  • Advertising platforms: Meta (Facebook and Instagram), TikTok and Google. We share information with them only where you have consented, for example through our cookie banner.
  • Professional advisers: such as our accountants and legal advisers, where needed.
  • Authorities: where we are legally required to, for example HMRC or the police, or to protect our rights.
  • A buyer of our business: if we sell or restructure our business, your information may be transferred to the new owner, who will continue to protect it in line with this policy.

Some of these providers, such as Shopify, Meta, TikTok and Google, also use information as independent controllers under their own privacy policies.

6. International transfers

Some of our service providers are based, or store data, outside the UK, including in the EEA, Canada and the United States. When your information is transferred outside the UK, we make sure it is protected by one of the following:

  • The destination has been recognised by the UK Government as providing adequate protection for personal data. This currently includes the EEA and Canada, and US organisations certified under the UK–US Data Bridge.
  • Our provider has signed the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses.

If you are in the EEA and your information is transferred outside the EEA, equivalent safeguards under the EU GDPR apply.

7. Cookies

Cookies are small files placed on your device when you visit a website. We use:

  • Essential cookies, which are needed for our Site to work, for example to keep items in your basket, process checkout and keep your account secure. These do not require your consent.
  • Analytics cookies, which help us understand how our Site is used so we can improve it. Where the law allows these without prior consent, we will always give you a simple way to opt out.
  • Advertising cookies and pixels from Meta, TikTok and Google. These help us show you relevant adverts on other platforms and measure how well our adverts work. We only use these if you agree to them.

When you first visit our Site, our cookie banner lets you accept or reject non-essential cookies. You can change your choices at any time using the "Cookie preferences" link at the bottom of our Site. You can also block or delete cookies through your browser settings, although some parts of our Site may not work properly as a result.

Our Site also recognises the Global Privacy Control (GPC) signal. If your browser sends it, we will treat it as a request to opt out of advertising cookies for that browser.

For more information about the cookies used by our Shopify store, see https://www.shopify.com/legal/cookies.

8. How long we keep your information

We keep your information only for as long as we need it:

  • Order and transaction records: 6 years from the end of the financial year of the purchase, to meet tax and accounting requirements.
  • Customer accounts: until you ask us to close your account, or after 3 years of inactivity. Your order records are kept as above.
  • Marketing data: until you unsubscribe. After that, we keep your email address on our "do not contact" list.
  • Customer support messages: 2 years from our last contact with you.
  • Reviews: for as long as the review is published on our Site, or until you ask us to remove it.
  • Cookies: for the periods explained in our cookie banner.

9. Keeping your information secure

We use trusted providers with appropriate security measures. Payments are processed by providers that meet the Payment Card Industry Data Security Standard (PCI DSS), and our Site uses encryption (SSL). However, no method of sending information over the internet is completely secure.

If you have an account, please keep your password safe and do not share it. If you think your account has been compromised, contact us straight away at hello@lawlessclothing.co.uk.

10. Your rights

Under UK data protection law, and EU law where it applies, you have the right to:

  • Access: ask for a copy of the personal information we hold about you.
  • Rectification: ask us to correct information that is inaccurate or incomplete.
  • Erasure: ask us to delete your information in certain circumstances.
  • Restriction: ask us to limit how we use your information in certain circumstances.
  • Data portability: ask us to send your information to you, or another organisation, in a commonly used electronic format.
  • Object: object to us using your information where we rely on legitimate interests. You have an absolute right to object to direct marketing at any time.
  • Withdraw consent: where we rely on your consent, you can withdraw it at any time. This does not affect anything we did before you withdrew it.

To use any of these rights, email hello@lawlessclothing.co.uk. There is normally no charge. We may need to ask you to confirm your identity before we act on your request. We will respond within one month. If your request is complex, we may extend this by up to two further months, and we will tell you if so.

We do not make decisions about you based solely on automated processing, including profiling, that have legal or similarly significant effects on you.

11. Complaints

If you are unhappy with how we have handled your information, please contact us first at hello@lawlessclothing.co.uk and we will try to put things right.

You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO):

  • Website: ico.org.uk/make-a-complaint
  • Telephone: 0303 123 1113
  • Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

If you live in the EEA, you can also complain to the data protection authority in your country.

12. Children

Our Services are not intended for children under 16, and we do not knowingly collect personal information from anyone under 16. If you believe a child under 16 has given us their information, please contact us at hello@lawlessclothing.co.uk and we will delete it.

13. Customers outside the UK and EEA

We ship internationally. If you order from outside the UK and EEA, your information will be handled as described in this policy.

Some US state privacy laws treat the use of advertising cookies and pixels as a "sale" or "sharing" of personal information. We only use these with your consent, and we honour the Global Privacy Control signal as an opt-out. You can also opt out, or exercise any of the rights in section 10, by emailing hello@lawlessclothing.co.uk. We will not treat you differently for exercising your rights.

14. Third-party websites

Our Site may link to other websites and social media platforms, such as Instagram and TikTok. We are not responsible for how those sites handle your information, so please read their privacy policies.

15. Changes to this policy

We may update this Privacy Policy from time to time, for example if we change how we use your information or if the law changes. The latest version will always be on our Site, with the "Last updated" date at the top. If we make significant changes, we will let you know, for example by email or a notice on our Site.

16. Contact us

If you have any questions about this Privacy Policy or your personal information, please contact us:

Lawless Clothing Ltd Unit K1, Bryn Business Centre, Bryn Lane, Wrexham, LL13 9UT, United Kingdom Email: hello@lawlessclothing.co.uk