Last updated: 28 February 2026

1. Who We Are

West of Sloane ("we," "us," or "our") is a couture and made-to-measure fashion house registered in Singapore. We operate internationally, serving clients across Singapore, the United Kingdom, the European Union, Australia, the United States, the United Arab Emirates, and beyond through our website at [www.westofsloane.com] (the "Site").

We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights you have over your data.

By using our Site or engaging our services, you confirm that you have read and understood this policy. If you do not agree with any part of it, please do not use our Site or services.

For any questions about this policy or how we handle your data, please contact us at westofsloane@gmail.com.

2. The Data We Collect

Depending on how you interact with us — whether browsing our website, placing an order, or commissioning a made-to-measure or couture piece — we may collect the following categories of personal data:

A. Identity & Contact Information

• Full name
• Email address
• Postal address (billing and delivery)
• Phone number

B. Order & Transaction Information

• Products or services ordered
• Order history and correspondence
• Payment confirmation details

Please note: We do not store your full payment card details. All payment processing is handled securely by our third-party payment providers — Stripe, PayPal, and Shopify Payments. We receive only a confirmation of successful payment.

C. Made-to-Measure & Couture Order Data For clients commissioning made-to-measure or couture pieces, we additionally collect:

• Body measurements — including but not limited to bust, waist, hip, height, and any additional measurements required for garment construction
• Style preferences and design brief notes — aesthetic references, occasion details, design requests, and feedback provided during the consultation process
• Reference photographs — images submitted by you to assist in the design and production of your garment

We treat this category of data with particular care given its personal and sensitive nature. It is collected solely for the purpose of creating your garment and is not used for any other purpose.

D. Website & Analytics Data

• IP address
• Browser type and version
• Device information
• Pages visited, time spent, and interactions on our Site
• Referring website or search terms used to find us
• Cookie identifiers (see Section 7 for full details)

E. Marketing & Communications Data

• Email marketing preferences
• Records of communications between you and West of Sloane

3. How We Collect Your Data

We collect personal data in the following ways:

• Directly from you — when you place an order, create an account, complete a contact or enquiry form, book a discovery call, submit measurements or design briefs, or correspond with us by email
• Automatically — through cookies and tracking technologies when you browse our Site (see Section 7)
• From third-party platforms — Shopify collects certain technical and transactional data as part of powering our online store

4. Why We Collect Your Data & Our Legal Basis for Processing

We only collect and use your personal data where we have a lawful reason to do so. Depending on the nature of the data and the applicable laws in your jurisdiction, our legal bases are as follows:

Purpose	Legal Basis
Processing and fulfilling your order	Performance of a contract
Creating and producing your made-to-measure or couture garment	Performance of a contract
Processing payment	Performance of a contract
Arranging delivery of your order	Performance of a contract
Communicating with you about your order	Performance of a contract
Sending you marketing emails (where you have opted in)	Consent
Improving our website and user experience	Legitimate interests
Analytics and understanding how our Site is used	Legitimate interests / Consent (for cookies)
Complying with legal and regulatory obligations	Legal obligation
Retargeted advertising via Meta and Google	Consent (via cookie preferences)

Where we rely on consent as our legal basis, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing carried out before withdrawal.

Where we rely on legitimate interests, we have assessed that our interests are not outweighed by your rights and interests. You may object to this processing at any time (see Section 9).

5. Made-to-Measure & Couture Data — Special Notice

We recognise that the body measurements, design briefs, and photographs you share with us for a couture or made-to-measure commission are deeply personal. We want to be transparent about exactly how this data is handled:

• Measurements and design briefs are collected during your consultation process and are used exclusively for the design, production, and quality assurance of your garment
• Reference photographs are used solely as design references during your commission and are not published, shared publicly, or used for any marketing purpose without your explicit written consent
• This data is shared with our production partner — a trusted atelier — for the sole purpose of constructing your garment. They are contractually bound to handle this data confidentially and to use it only for that purpose
• We retain this data for the duration of your order and for a reasonable period thereafter to assist with any quality queries, alteration requests, or future commissions. You may request deletion of this data at any time (see Section 9), subject to any legal retention obligations

6. How We Share Your Data

We do not sell, rent, or trade your personal data to any third party. We share your data only where necessary, and only with the following categories of recipients:

Shopify Inc. Our website is hosted and operated on Shopify's platform. Shopify processes data on our behalf as a data processor in accordance with their own privacy policy and data processing agreement. For more information, visit shopify.com/legal/privacy.

Payment Processors — Stripe, PayPal, Shopify Payments Your payment information is processed securely by these providers. Each operates under its own privacy policy and PCI DSS compliance framework. We do not receive or store your full card details.

Production Partner For made-to-measure and couture orders, your measurements and relevant order details are shared with our atelier production partner to enable garment construction. This partner is bound by confidentiality obligations and may not use your data for any purpose other than fulfilling your order.

Shipping & Logistics Partner Your name and delivery address are shared with our courier and shipping partner(s) for the purpose of delivering your order to you.

Google Analytics & Google Ads We use Google Analytics to understand how visitors use our Site, and Google Ads for advertising. Google may process your data in accordance with their privacy policy at policies.google.com/privacy. You can opt out of Google Analytics tracking at tools.google.com/dlpage/gaoptout.

Meta (Facebook & Instagram) Pixel We use the Meta Pixel on our Site to measure the effectiveness of our advertising, understand customer actions on our Site, and serve relevant advertisements on Facebook and Instagram. Meta processes this data in accordance with their Data Policy at facebook.com/privacy/policy. You can manage your ad preferences at facebook.com/ads/preferences.

Legal Authorities We may disclose your personal data to law enforcement, regulatory bodies, or other authorities where we are legally required or permitted to do so.

We require all third parties to respect the security of your personal data and to treat it in accordance with applicable law. We do not allow our third-party service providers to use your data for their own purposes.

7. Cookies & Tracking Technologies

Our Site uses cookies and similar tracking technologies to enhance your browsing experience, analyse Site performance, and deliver relevant advertising.

What are cookies? Cookies are small text files placed on your device when you visit a website. They allow the website to recognise your device and remember certain information about your visit.

The types of cookies we use:

Essential Cookies (Always active) These cookies are necessary for the Site to function properly. They enable core features such as shopping cart functionality, secure checkout, and account login. These cannot be disabled without affecting how the Site works. Set by: Shopify

Analytics Cookies (Require consent) These cookies help us understand how visitors interact with our Site — which pages are visited, how long people spend on the Site, and how they arrived. This helps us improve our website and user experience. Set by: Google Analytics

Marketing & Retargeting Cookies (Require consent) These cookies are used to deliver advertisements relevant to you across other websites and platforms. They track your visits to our Site and may share this information with advertising partners. Set by: Meta Pixel, Google Ads

Managing your cookie preferences: When you first visit our Site, you will be presented with a cookie consent banner allowing you to accept or decline non-essential cookies. You can update your preferences at any time by clicking [Cookie Preferences] in the footer of our Site.

You may also control cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our Site.

For more information on cookies and how to manage them, visit allaboutcookies.org.

8. International Data Transfers

West of Sloane is based in Singapore and operates internationally. When you interact with our Site or services, your personal data may be transferred to and processed in countries outside of your own — including Singapore, the United Kingdom, the United States (where Shopify, Stripe, Google, and Meta are based), and the country in which our production partner operates.

We ensure that any international transfers of personal data are subject to appropriate safeguards in accordance with applicable law, including:

• For EU and UK customers: Transfers are made pursuant to Standard Contractual Clauses (SCCs) approved by the European Commission and the UK Information Commissioner's Office, or to countries that have received an adequacy decision
• For Australian customers: We take reasonable steps to ensure overseas recipients handle your data in a manner consistent with the Australian Privacy Principles
• For UAE customers: We comply with the requirements of the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) regarding cross-border data transfers
• For US customers: We comply with applicable US state privacy laws, including the California Consumer Privacy Act (CCPA) where applicable

By using our Site and services, you acknowledge that your data may be transferred internationally as described above.

9. Your Privacy Rights

Depending on where you are located, you have the following rights regarding your personal data. We will respond to all legitimate requests within 30 days of receipt.

All Customers — Universal Rights

• Right to be informed — You have the right to know what data we hold about you and how we use it (which is what this policy is for)
• Right of access — You may request a copy of the personal data we hold about you
• Right to rectification — You may ask us to correct any inaccurate or incomplete data
• Right to deletion — You may ask us to delete your personal data, subject to any legal retention obligations we are required to fulfil
• Right to withdraw consent — Where processing is based on consent, you may withdraw it at any time

EU & UK Customers (GDPR / UK GDPR)

In addition to the above, you have the right to:

• Restrict processing — Request that we limit how we use your data in certain circumstances
• Data portability — Receive your data in a structured, machine-readable format and transfer it to another controller
• Object to processing — Object to processing based on legitimate interests or for direct marketing purposes
• Lodge a complaint — You have the right to lodge a complaint with your local supervisory authority:
• EU: Your national Data Protection Authority (DPA)
• UK: The Information Commissioner's Office (ICO) at ico.org.uk

Australian Customers (Privacy Act 1988)

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Make a complaint to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au if you believe we have breached the Australian Privacy Principles

California Customers (CCPA/CPRA)

California residents have the right to:

• Know what categories of personal information we collect and how they are used
• Request deletion of your personal information
• Opt out of the sale or sharing of your personal information — Note: We do not sell your personal information
• Non-discrimination for exercising your privacy rights
• Limit the use of sensitive personal information

To exercise any California privacy rights, please contact us at westofsloane@gmail.com with the subject line "California Privacy Request."

Singapore Customers (PDPA)

Under Singapore's Personal Data Protection Act, you have the right to:

• Access personal data we hold about you
• Correct personal data that is inaccurate or incomplete
• Withdraw consent for the collection, use, or disclosure of your personal data (subject to reasonable notice and legal/contractual limitations)

UAE Customers (PDPL)

Under the UAE Personal Data Protection Law, you have the right to:

• Access, correct, and request deletion of your personal data
• Withdraw consent where processing is consent-based
• Object to automated processing
• Lodge a complaint with the UAE Data Office

How to exercise your rights: To make any data request, please email us at westofsloane@gmail.com with the subject line "Data Request — [Your Name]" and clearly describe what you are requesting. We may need to verify your identity before processing your request.

10. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, and for as long as required or permitted by applicable law.

Our general retention approach is as follows:

Data Type	Retention Period
Order and transaction records	7 years from the date of the transaction (to comply with financial and tax record-keeping obligations across our operating jurisdictions)
Customer account data	Duration of your account, plus 3 years after your last interaction with us
Made-to-measure measurements and design briefs	Duration of your order plus 3 years, to assist with future commissions and quality queries — unless you request earlier deletion
Reference photographs	Duration of your commission plus 12 months, unless you request earlier deletion
Marketing preferences	Until you unsubscribe or request deletion
Analytics and cookie data	As set by each third-party provider (typically 13–26 months)

When data is no longer required, we delete or anonymise it securely. Where this is not immediately possible (for example, where data is stored in backup archives), we will isolate it from further processing until deletion is possible.

11. Data Security

We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, loss, alteration, or disclosure. These measures include:

• Secure HTTPS encryption across our entire Site
• Shopify's enterprise-grade security infrastructure, including PCI DSS compliance for payment processing
• Restricted access to personal data within our team — only individuals who need data to fulfil their role can access it
• Contractual confidentiality obligations with all third-party partners who process data on our behalf

While we take every reasonable precaution, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we will notify you and relevant authorities promptly in the event of a data breach where we are legally required to do so.

12. Marketing Communications

If you have opted in to receive marketing emails from us, we will send you updates about new collections, events, and offers from West of Sloane. We use Shopify's messaging platform to manage our email communications.

You can opt out at any time by:

• Clicking the "Unsubscribe" link in any marketing email we send you
• Emailing us at westofsloane@gmail.com with the subject line "Unsubscribe"

Please note that even if you unsubscribe from marketing communications, we will continue to send you transactional emails related to any active orders (such as order confirmations, shipping updates, and delivery notifications).

13. Children's Privacy

Our Site and services are intended for adults only. We do not knowingly collect personal data from anyone under the age of 18. If you believe we have inadvertently collected data from a minor, please contact us immediately at westofsloane@gmail.com and we will delete it promptly.

14. Third-Party Links

Our Site may contain links to third-party websites, social media platforms, or other online services. This Privacy Policy applies only to our Site. We are not responsible for the privacy practices of any third-party sites and encourage you to read their privacy policies before providing any personal information.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email.

We encourage you to review this policy periodically to stay informed about how we are protecting your data.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal data, please contact us:

West of Sloane Email: westofsloane@gmail.com Subject line for data requests: "Privacy Request — [Your Name]"

We aim to respond to all enquiries within 5 business days and to fulfil all formal data requests within 30 days.

This Privacy Policy was prepared for West of Sloane and reflects the data practices of the business as of the date above. While every effort has been made to ensure compliance across all operating jurisdictions, we recommend periodic review by a qualified legal professional, particularly as privacy laws continue to evolve.