Privacy & Data Security Policy

Version 2.1 – Last Updated: March 2026

TrueLayer Clothing Ltd (“the Company”) is committed to the protection of user data in accordance with the UK General Data Protection Regulation (UK GDPR). This document outlines how we manage personal identifiers collected via truelayerclothing.com.

1. Data Identification

We collect Identity Data (Name), Contact Data (Address, Email), and Transaction Data. We do not process “Special Category” data (medical, political, etc.).

2. Secure Payment Processing

All financial data is processed by our third-party partner, Stripe. Stripe operates as an independent Data Controller for payment purposes. They utilize vaulted tokenization, ensuring that TrueLayer personnel never view or store your CVV or full card number.

3. Data Sharing Disclosure

Personal data is shared only with functional partners: Logistics (Royal Mail/FedEx), Payment Gateways (Stripe), and Automated Email Systems. We do not sell user databases to third-party marketing firms.

4. Your Rights

Under UK law, you have the Right to Erasure (“Right to be Forgotten”) and the Right to Data Portability. For any data-related requests, please contact our Compliance Officer at truelayer@truelayerclothing.com.