Idripify is an online fashion retailer operating through idripify.com, offering clothing and accessories for men, women, and children across the United Kingdom.
Data Controller: Idripify Ltd is the data controller responsible for your personal information collected through this website. As a UK-based business, we comply fully with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
We collect information from you when you browse our site, create an account, place an order, or contact us. The types of data we collect include:
Identity Data — First name, last name, username (collected at registration and checkout)
Contact Data — Email address, phone number, billing and delivery address (collected at checkout and account creation)
Transaction Data — Order details, products purchased, payment amounts (collected at purchase)
Financial Data — Payment method type such as card type and last 4 digits. We do not store full card numbers.
Technical Data — IP address, browser type, device type, pages visited, and time on site (collected automatically)
Marketing Data — Your preferences for receiving marketing from us (collected at sign-up or in your account settings)
Communications Data — Emails, live chat messages, and support requests (collected when you contact us)
We do not collect any Special Categories of personal data such as race, religion, health data, or biometric data, and we do not collect information about criminal convictions.
3. How We Use Your Data
We use your personal data for the following purposes:
To process and fulfil your orders — including payment, dispatch, and delivery notifications.
To manage your account — registration, login, order history, and saved preferences.
To provide customer support — responding to your queries, returns, and complaints.
To send transactional emails — order confirmations, shipping updates, and receipts.
To send marketing communications — promotional emails, discount codes, and new arrival alerts, only where you have opted in or we have a legitimate interest.
To improve our website — analysing traffic and user behaviour to enhance your experience.
To prevent fraud — monitoring transactions and protecting against fraudulent activity.
To comply with legal obligations — maintaining records for tax, accounting, and regulatory purposes.
4. Legal Basis for Processing
Under UK GDPR, we must have a lawful basis to process your personal data. We rely on the following:
Contract Performance — Processing is necessary to fulfil your order and deliver our services to you.
Legitimate Interests — We may process data where it is in our legitimate interest, such as fraud prevention and improving our website, provided your rights are not overridden.
Consent — Where you have explicitly agreed, for example to receive our marketing emails. You may withdraw consent at any time.
Legal Obligation — Where we are required by law to process your data, for example HMRC tax records.
Where we rely on consent as our legal basis, you have the right to withdraw that consent at any time. This will not affect the lawfulness of any processing carried out before you withdraw consent.
5. Sharing Your Data
We do not sell, rent, or trade your personal data. We may share your information with trusted third parties only where necessary:
Payment Processors — Stripe, PayPal, Klarna, and Clearpay, to securely handle payments. These providers are PCI-DSS compliant.
Delivery Partners — Royal Mail, DPD, and Evri, to dispatch and deliver your orders.
IT & Hosting Providers — Our website hosting and e-commerce platform providers.
Marketing Platforms — Email marketing tools where you have opted in to marketing communications.
Analytics Providers — Google Analytics, to help us understand how our website is used. Data is anonymised where possible.
Legal Authorities — Where required by law, court order, or to protect our legal rights.
All third-party service providers are required to take appropriate security measures to protect your personal data and are not permitted to use it for their own purposes.
6. Cookies
Our website uses cookies to enhance your browsing experience. Cookies are small text files placed on your device. We use the following types:
Essential Cookies — Required for the website to function, such as your shopping cart and login session. These cannot be disabled.
Performance Cookies — Collect anonymous data about how visitors use our site, such as Google Analytics. These require your consent.
Functional Cookies — Remember your preferences such as saved items and currency settings. These require your consent.
Marketing Cookies — Used to deliver relevant advertisements on other platforms such as Facebook Pixel and Google Ads. These require your consent.
You can manage your cookie preferences at any time via the cookie banner on our website or through your browser settings. Please note that disabling certain cookies may affect website functionality.
7. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes we collected it for, including satisfying any legal, accounting, or reporting requirements.
Data Type
Retention Period
Order and transaction records
7 years (UK tax law requirement)
Customer account data
Duration of account plus 2 years after last activity
Marketing preferences
Until you unsubscribe or withdraw consent
Customer support communications
3 years from last interaction
Website analytics data
26 months (anonymised)
Fraud prevention records
5 years
8. Your Rights Under UK GDPR
As a data subject under UK GDPR, you have the following rights regarding your personal data:
Right to Access — Request a copy of the personal data we hold about you, known as a Subject Access Request.
Right to Rectification — Request correction of inaccurate or incomplete personal data.
Right to Erasure — Request deletion of your personal data, known as the right to be forgotten, where no legal obligation requires us to retain it.
Right to Restriction — Request that we restrict processing of your data in certain circumstances.
Right to Portability — Receive your data in a structured, machine-readable format to transfer to another provider.
Right to Object — Object to processing based on legitimate interests, including direct marketing.
Automated Decision-Making — Not be subject to decisions made solely by automated processing that significantly affects you.
Right to Complain — Lodge a complaint with the Information Commissioner’s Office (ICO) if you believe we have mishandled your data.
To exercise any of these rights, please email us at privacy@idripify.com with the subject line “Data Rights Request”. We will respond within 30 days. There is no charge for making a request.
To make a complaint to the ICO, visit ico.org.uk or call their helpline on 0303 123 1113.
9. International Data Transfers
Some of our third-party service providers are based outside the UK. Where we transfer your personal data outside the UK, we ensure appropriate safeguards are in place, such as:
Transfers to countries with an adequacy decision from the UK Secretary of State.
Use of UK Standard Contractual Clauses or International Data Transfer Agreements (IDTAs).
Binding Corporate Rules where applicable.
We will never transfer your data outside the UK without ensuring an equivalent level of protection is applied.
10. Children’s Privacy
Our website is intended for use by individuals aged 16 and over. We do not knowingly collect personal data from children under the age of 16 without verifiable parental consent.
While we sell children’s clothing, the purchasing account must be created and operated by an adult aged 16 or over. If you believe a child under 16 has provided us with personal data without consent, please contact us immediately at privacy@idripify.com and we will delete the information promptly.
11. Data Security
We take the security of your personal data seriously and have implemented appropriate technical and organisational measures to protect it from unauthorised access, alteration, disclosure, or destruction. These measures include:
SSL/TLS Encryption — All data transmitted between your browser and our website is encrypted.
Secure Payment Processing — We use PCI-DSS compliant payment processors. We never store your full card details.
Access Controls — Access to your personal data is restricted to authorised personnel only, on a need-to-know basis.
Regular Security Reviews — We periodically review and update our security practices.
Password Protection — Customer accounts are protected by passwords. We strongly encourage you to use a strong, unique password.
Despite our best efforts, no method of transmission over the internet is 100% secure. In the event of a data breach that poses a risk to your rights, we will notify you and the ICO within 72 hours as required by UK GDPR.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make significant changes, we will update the date at the top of this page and notify registered customers by email where changes are material.
We encourage you to review this Privacy Policy periodically. Continued use of our website after changes have been posted constitutes your acceptance of the updated policy.
Version: 2.0 | Next Review: May 2027
13. Contact Us
If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how we handle your personal data, please get in touch:
We aim to respond to all privacy-related enquiries within 30 days. For Subject Access Requests, please include proof of identity so we can process your request securely.
