Privacy Policy

1. Who we are

LOVECLOTHES.shop is a trading name of Explosive Beatz Limited ("we", "us"), a made-to-order fashion house based in Birmingham, United Kingdom. Explosive Beatz Limited is the data controller for the personal data collected through this website. For any privacy matter — including access, correction, erasure or a complaint — write to our Data Protection contact using the form at loveclothes.shop/contact, choosing "Other" as the topic and starting your message with "Data protection". We reply within one month.

2. What data we collect

Account data — your name, email address and password (stored securely, never in plain text) when you register.

Order data — delivery address, items ordered, order history and order value.

Checkout data — if you begin checkout but do not complete it, we temporarily hold your email and cart contents to send you a single reminder.

Reviews — your name, rating, review text and any photos you choose to upload.

Technical data — essential local storage on your device to keep your shopping bag, language/currency preference and cookie choice working.

Analytics data (optional, only with your consent) — first-party browsing events such as pages viewed, products clicked and sizes selected, linked to a random session identifier. We never sell or share this data and use no third-party analytics services.

3. How and why we use it (lawful bases)

To fulfil your orders and provide customer service — performance of a contract (UK GDPR Art. 6(1)(b)).

To send order updates, delivery notifications and review invitations — performance of a contract.

To send one abandoned-cart reminder after you start checkout — legitimate interests (Art. 6(1)(f)); every reminder tells you how to opt out.

To keep financial records — legal obligation (Art. 6(1)(c), UK tax law).

Essential site functionality (bag, preferences) — legitimate interests; these are strictly necessary and store no tracking identifiers.

To understand how the shop is used and improve it (optional analytics) — your consent (Art. 6(1)(a)), given via the cookie banner and withdrawable at any time using the button at the bottom of this page.

4. Payments

Payments are processed entirely by Stripe. We never see or store your card details. Stripe processes your payment data as an independent controller under its own privacy policy.

5. Who we share data with

Production and delivery partners (Printful, Printify, Contrado, CJdropshipping) receive your name and delivery address solely to make and ship your order — they act as our processors and may transfer data outside the UK under appropriate safeguards (Standard Contractual Clauses / UK IDTA).

Stripe for payment processing.

Our hosting and infrastructure provider (Base44) which stores app data securely.

We never sell your personal data and never share it for third-party advertising.

6. Cookies & local storage

We use no advertising or third-party tracking cookies. Your browser always stores strictly necessary items: your shopping bag, your language and currency preference, your login session, and your cookie choice — UK PECR does not require consent for these.

Analytics is switched OFF by default. Only if you turn it on in our cookie banner do we store a random session identifier used for our own first-party analytics. You can change or withdraw this at any time using the button below, or "Cookie Settings" in the footer of every page.

So we can show that consent was properly obtained, we keep a record of each cookie choice: a random consent identifier, the choice itself, the date and time, the policy version and the page you were on. This record holds no name or address unless you were signed in, and it is kept for 12 months.

7. How long we keep data

Order and financial records — 6 years, as required by UK tax law.

Abandoned-cart data — deleted or anonymised within 30 days.

Analytics events — kept for a maximum of 12 months, then deleted.

Cookie consent records — 12 months from the date of the choice.

Account data — for as long as your account exists; deleted on request.

Reviews — until you ask us to remove them.

8. Your rights

Under UK GDPR you can: access a copy of your data, correct it, have it erased, restrict or object to processing, request portability, and withdraw consent at any time. To exercise any right, contact us and we will respond within one month.

You can do most of this yourself: sign in and open "Your data & privacy" in your account to download a copy of everything we hold about you, change your cookie and analytics choices, or send us a deletion request. Marketing emails also carry an unsubscribe link that takes effect immediately.

You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

9. Security

All traffic is encrypted (HTTPS), passwords are hashed, access to customer data is restricted to authorised administrators, and every administrative action on customer records is logged in an audit trail.

10. Children

Our store sells clothing for adults and children, but the website is intended for use by adults. We do not knowingly collect personal data from anyone under 16.

11. Changes to this policy

We will post any changes on this page. Last updated: 27 July 2026.