Privacy policy

Last updated: 12 July 2026

Theologie Clothing (“we”, “us” or “our”) is committed to protecting and respecting your privacy.

This Privacy Policy explains how we collect, use, store and share your personal information when you:

• Visit or use our website

• Browse or purchase our products

• Create or use a customer account, where available

• Subscribe to marketing communications

• Contact us

• Otherwise interact with Theologie Clothing

Our online store is hosted and supported by Shopify, which provides the ecommerce platform through which we offer our products and services.

For the purposes of applicable data protection law, Theologie Clothing is the data controller responsible for the personal information described in this policy, except where another organisation processes information as an independent data controller for its own purposes.

Nothing in this Privacy Policy limits any rights available to you under applicable data protection law.

1. Who We Are

Business: Theologie Clothing
Email: info@theologieclothing.com

2. What Is Personal Information?

Personal information means information that identifies you or can reasonably be linked to you.

It does not include information that has been anonymised so that you can no longer be identified.

The personal information we collect depends on how you interact with our website and services.

3. Information We Collect

We may collect and process the following categories of personal information.

Contact Information

This may include:

• Your name

• Email address

• Contact number, where provided

• Billing address

• Delivery address

Order and Transaction Information

This may include:

• Products viewed or purchased

• Products placed in your basket

• Order number

• Order value

• Selected product, size, colour and quantity

• Delivery method

• Order and delivery status

• Purchase history

• Cancellation, return and refund information

• Discount codes or promotional offers used

Payment Information

Payments are processed securely through Shopify and authorised payment providers.

We may receive limited information relating to your payment, such as:

• The payment method used

• Payment status

• Transaction reference

• Billing details

• Card type

• Limited card information, such as the final digits of the payment card

Theologie Clothing does not ordinarily receive or store your full payment-card number or card security code.

Payment providers process payment information in accordance with their own privacy notices and security requirements.

Customer Account Information

Where customer accounts are available, we may collect:

• Your account contact details

• Saved delivery addresses

• Account preferences

• Order history

• Login and account-security information

Passwords and authentication information may be managed through Shopify and may not be directly accessible to Theologie Clothing.

Communications

When you contact us, we may collect:

• Your name and contact details

• The contents of your enquiry or message

• Order information

• Customer-support history

• Complaint information

• Photographs or other evidence supplied in connection with a damaged, defective, incorrect or missing order

Please do not send us sensitive or confidential information unless it is reasonably necessary for us to deal with your request.

Technical and Device Information

When you visit or use our website, we may automatically collect:

• Internet Protocol address

• Browser type

• Device type

• Operating system

• Network information

• General location derived from your IP address

• Unique device or browser identifiers

• Website security and diagnostic information

Website Usage Information

We may collect information about how you interact with our website, including:

• Pages viewed

• Links selected

• Products viewed

• Time spent on the website

• Dates and times of visits

• Referring websites

• Basket and checkout activity

• Website navigation and interaction information

Marketing Information

Where you subscribe to marketing communications, or where marketing is otherwise permitted by law, we may collect:

• Your email address

• Your marketing preferences

• The date and method of subscription

• Whether you opened or interacted with a marketing email

• Products, offers or content that may be relevant to your interests

4. How We Collect Your Information

We may collect personal information from the following sources.

Directly From You

This includes information you provide when you:

• Place an order

• Complete checkout

• Create or use a customer account

• Subscribe to marketing

• Contact us

• Request a cancellation, return or refund

• Submit an enquiry or complaint

• Provide evidence relating to an order

• Participate in a promotion, where offered

Automatically Through Our Website

Information may be collected through:

• Cookies

• Pixels

• Tags

• Server logs

• Analytics tools

• Security technologies

• Similar online technologies

From Organisations That Support Our Services

We may receive information from organisations that help us operate our business, including:

• Shopify

• Payment providers

• Product production and order-processing partners

• Delivery companies

• Website and technology providers

• Marketing platforms

• Analytics providers

• Fraud-prevention and security providers

From Other Sources

Where permitted by law, we may receive information from:

• Social-media platforms

• Advertising or marketing partners

• Publicly available sources

• A person acting on your behalf

5. How We Use Your Information

We may use your personal information for the following purposes.

Processing and Fulfilling Orders

We use personal information to:

• Accept and process orders

• Confirm and verify payments

• Produce and prepare ordered products

• Arrange delivery

• Provide order and delivery updates

• Manage cancellations, returns and refunds

• Resolve product or delivery problems

• Provide customer support

Operating and Improving Our Website

We may use information to:

• Operate and maintain our online store

• Provide customer-account functionality, where available

• Remember customer choices and preferences

• Improve website performance and functionality

• Understand how visitors use the website

• Identify and resolve technical problems

• Improve our products and customer experience

• Analyse business and website performance

Communicating With You

We may use your information to:

• Respond to enquiries

• Provide customer support

• Send order confirmations

• Send payment and delivery information

• Notify you about returns or refunds

• Handle complaints and disputes

• Send important service, policy or account notices

Marketing and Promotions

Where permitted by law, we may use personal information to:

• Send promotional emails

• Inform you about product launches, offers or updates

• Measure the effectiveness of our communications

• Understand customer interests

• Present relevant advertising, where applicable and subject to your choices

You may unsubscribe from promotional emails at any time by using the unsubscribe link contained in the email or by contacting us.

Unsubscribing from marketing will not prevent us from sending necessary communications about your orders, payments, deliveries, returns, refunds or customer-support requests.

Security and Fraud Prevention

We may use personal information to:

• Protect our website and systems

• Verify transactions

• Prevent fraudulent or unauthorised activity

• Investigate suspicious activity

• Maintain the security of customer accounts

• Enforce our terms and policies

• Protect our rights, property and customers

Legal and Regulatory Purposes

We may process personal information to:

• Comply with legal and regulatory obligations

• Maintain tax and accounting records

• Respond to lawful requests from courts, regulators or public authorities

• Establish, exercise or defend legal claims

• Resolve disputes

• Cooperate with investigations

• Enforce our contracts, terms and policies

6. Lawful Bases for Processing

Under UK data protection law, we must have a lawful basis for processing your personal information.

The lawful basis used will depend on the purpose and circumstances of the processing.

Contract

We rely on contract where processing is necessary to:

• Take steps at your request before you place an order

• Accept and process your order

• Take and confirm payment

• Produce and deliver products

• Communicate with you about your order

• Provide order-related customer support

• Manage cancellations, returns and refunds

If you do not provide the information needed for these purposes, we may be unable to accept or fulfil your order.

Legal Obligation

We rely on legal obligation where processing is necessary to:

• Maintain tax and accounting records

• Comply with consumer-protection requirements

• Respond to legally valid requests

• Meet fraud-prevention or regulatory requirements

• Comply with other applicable laws

Legitimate Interests

We may rely on our legitimate interests where processing is necessary for the reasonable operation and protection of our business and where those interests are not overridden by your rights.

Our legitimate interests may include:

• Operating and improving our website and services

• Providing effective customer support

• Understanding business performance

• Preventing fraud and misuse

• Securing our systems

• Managing complaints and disputes

• Maintaining appropriate business records

• Protecting and enforcing our legal rights

• Promoting our products where permitted by law

Where we rely on legitimate interests, we consider the nature of the information, the purpose of the processing and the potential effect on your rights.

Consent

We rely on consent where required, including for:

• Certain marketing communications

• Non-essential cookies

• Certain analytics, advertising or tracking technologies

You may withdraw your consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

7. Cookies and Similar Technologies

Our website uses cookies and similar technologies.

Cookies are small files stored on your device when you visit a website. Similar technologies may include pixels, tags and local storage.

They may be used to:

• Operate essential website functions

• Maintain website and checkout security

• Keep products in your basket

• Remember your preferences

• Understand website use

• Measure performance

• Improve the website

• Support marketing and advertising, where enabled and permitted

Essential Cookies

Essential cookies are required for the website, checkout, security and related services to function properly.

These cookies may be used without consent where permitted by law.

Non-Essential Cookies

Non-essential cookies may include:

• Analytics cookies

• Advertising cookies

• Marketing cookies

• Preference or functionality cookies

Where required by law, non-essential cookies will not be placed or accessed unless you have provided consent.

You can manage your choices using the cookie banner or privacy controls displayed on our website.

You may also manage cookies through your browser settings. Blocking certain cookies may affect the operation or functionality of the website.

You can change or withdraw your cookie choices through the privacy controls made available on our website, where supported.

8. Marketing Communications

We may send marketing communications where:

• You have provided consent

• Marketing is otherwise permitted by applicable law

• You have not opted out

Marketing communications may include information about:

• New products

• Collections

• Offers

• Promotions

• Theologie Clothing news or updates

You can stop receiving marketing emails at any time by:

• Selecting the unsubscribe link in an email

• Updating your available communication preferences

• Contacting info@theologieclothing.com

We may retain limited information showing that you have unsubscribed so that we can continue to respect your preference.

You may still receive necessary non-marketing communications relating to:

• Orders

• Payments

• Deliveries

• Cancellations

• Returns or refunds

• Customer support

• Legal or policy updates

9. How We Share Personal Information

We do not disclose personal information to third parties unless it is reasonably necessary for the purposes described in this policy, you have directed us to do so, or disclosure is permitted or required by law.

Shopify

Our online store is hosted by Shopify.

Shopify processes personal information to provide and improve services including:

• Website hosting

• Ecommerce functionality

• Checkout

• Payments

• Customer accounts, where available

• Security

• Fraud prevention

• Customer privacy tools

Information submitted through our website may be transmitted to Shopify and its authorised service providers.

Shopify may process certain personal information as an independent data controller for its own authorised purposes. Its processing is governed by Shopify’s own privacy documentation and privacy controls.

Payment Providers

We share necessary information with payment providers to:

• Process payments

• Verify transactions

• Prevent fraud

• Issue refunds

• Manage payment disputes

Product Production and Order-Processing Partners

We may share information necessary to produce, package and prepare your order, including:

• Your name

• Order details

• Selected products and options

• Delivery address

• Information required to resolve an order issue

These organisations receive only the information reasonably necessary to provide their services.

Delivery Companies

We may share necessary contact and delivery information with postal and delivery companies to:

• Deliver your order

• Provide tracking

• Resolve delivery problems

• Manage returned parcels

Website, Technology and Professional Service Providers

We may share information with providers that support:

• Website hosting and administration

• Data storage

• Customer communications

• Email marketing

• Analytics

• Fraud prevention

• Cybersecurity

• Accounting

• Legal and professional services

These organisations may process information only as necessary to provide their services and subject to applicable contractual and legal safeguards.

Marketing and Advertising Partners

Where marketing or advertising services are enabled, permitted by law and consistent with your privacy choices, limited information may be processed for:

• Marketing measurement

• Audience analysis

• Advertising

• Presenting relevant content

We do not knowingly provide personal information to unrelated third parties for their own direct marketing without an appropriate lawful basis.

Legal Disclosures

We may disclose personal information where reasonably necessary to:

• Comply with the law

• Respond to a court order or lawful request

• Prevent or investigate fraud

• Protect our rights or property

• Protect customers or other individuals

• Establish, exercise or defend legal claims

Business Changes

Personal information may be transferred as part of a genuine:

• Sale of the business

• Merger

• Restructuring

• Financing arrangement

• Transfer of all or part of the business or its assets

Any recipient would be required to handle the information in accordance with applicable data protection law.

10. Shopify Privacy Features

Shopify may provide features that use information collected from interactions with our store to improve ecommerce, security, analytics or other services.

The availability and operation of these features may depend on:

• Our Shopify settings

• The services or applications enabled on our store

• Your location

• Your consent or privacy choices

• Applicable law

Where Shopify processes personal information as an independent data controller, requests relating specifically to that processing may need to be made directly through Shopify’s consumer privacy controls.

Further information about Shopify’s processing and privacy rights is available through Shopify’s Consumer Privacy Policy and privacy portal.

11. International Data Transfers

Some organisations that support our services may process personal information outside the United Kingdom.

Where personal information is transferred internationally, we take reasonable steps to ensure that an appropriate level of protection is in place.

Depending on the circumstances, safeguards may include:

• A UK adequacy regulation

• The UK International Data Transfer Agreement

• The UK Addendum to the European Commission’s Standard Contractual Clauses

• Contractual protections

• Other transfer mechanisms permitted under applicable law

Service providers operating internationally may also be subject to local laws in the countries where they process information.

12. How Long We Keep Your Information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected.

The retention period will depend on factors including:

• The nature of the information

• Whether you have an active customer account

• Whether the information relates to an order

• Tax and accounting requirements

• Consumer-protection obligations

• Fraud-prevention needs

• The existence of a complaint, dispute or legal claim

• The need to enforce our terms or protect our legal rights

Order, transaction and accounting information may generally be retained for up to six years after the relevant transaction or accounting period where necessary for tax, accounting, contractual or legal purposes.

Customer-service and complaint records may be retained for as long as reasonably necessary to resolve the matter and protect the legal rights of the parties.

Marketing information may be retained until you unsubscribe, withdraw consent or the information is no longer required.

We may retain limited suppression information after you unsubscribe to ensure that your preference continues to be respected.

When personal information is no longer required, we will delete it, anonymise it or securely restrict its use, subject to legal and technical limitations.

13. Data Security

We take reasonable technical and organisational measures to protect personal information against:

• Unauthorised access

• Accidental loss

• Misuse

• Alteration

• Unauthorised disclosure

• Destruction

These measures may include access controls, secure payment processing, system security, contractual safeguards and limiting access to those who reasonably need the information.

However, no method of internet transmission or electronic storage can be guaranteed to be completely secure.

You are responsible for keeping any customer-account credentials confidential.

Please contact us promptly if you believe that your account or personal information has been compromised.

Do not send full payment-card details, passwords or other highly sensitive information through ordinary email.

14. Your Data Protection Rights

Depending on the circumstances and applicable law, you may have the following rights.

Right of Access

You may request confirmation of whether we process your personal information and ask for a copy of the information we hold about you.

Right to Correction

You may ask us to correct inaccurate personal information or complete information that is incomplete.

Right to Deletion

You may ask us to delete your personal information in certain circumstances.

This right does not apply where we are legally required or otherwise permitted to retain the information.

Right to Restrict Processing

You may ask us to restrict how we use your personal information in certain circumstances.

Right to Object

You may object to processing based on legitimate interests in certain circumstances.

You have the right to object at any time to your personal information being used for direct marketing.

Right to Data Portability

Where processing is based on consent or contract and carried out by automated means, you may have the right to receive certain personal information in a structured, commonly used and machine-readable format.

You may also have the right to request that the information be transferred to another organisation where technically feasible.

Right to Withdraw Consent

Where we rely on your consent, you may withdraw it at any time.

Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

Rights Relating to Automated Decisions

You may have rights concerning decisions made solely by automated means that produce legal or similarly significant effects.

Theologie Clothing does not ordinarily make significant decisions about customers solely through automated processing.

These rights are not absolute and may be subject to legal conditions, limitations and exemptions.

15. Exercising Your Rights

To exercise a data protection right, contact:

info@theologieclothing.com

Please provide:

• Your name

• The right you wish to exercise

• A description of the information or processing concerned

• Any relevant order or account information

We may request reasonable information to verify your identity before responding.

This helps protect personal information from unauthorised access or disclosure.

We will normally respond without undue delay and within one month.

Where a request is particularly complex or numerous, applicable law may allow us additional time. We will inform you if an extension is required.

You will not normally be charged for exercising your rights.

Where permitted by law, we may charge a reasonable fee or refuse to act where a request is manifestly unfounded or excessive.

You may authorise another person to submit a request on your behalf. We may require evidence of their authority and may also need to verify your identity directly.

16. Children’s Information

Our website and services are not specifically directed at children.

We do not knowingly collect personal information directly from children who are unable to provide valid consent under applicable law.

If you are a parent or guardian and believe that a child has provided personal information to us, please contact:

info@theologieclothing.com

We will investigate the matter and delete or restrict the information where required by law.

17. Third-Party Websites and Links

Our website may contain links to:

• External websites

• Social-media platforms

• Payment services

• Learning resources

• Other services operated by third parties

These organisations are responsible for their own privacy and security practices.

Theologie Clothing is not responsible for the privacy, security, availability, accuracy or content of external websites or services.

You should review the privacy policy and terms of any external service before providing personal information.

The inclusion of a link does not necessarily mean that Theologie Clothing endorses or controls the external organisation or its content.

18. Complaints

Please contact us first if you have concerns about how we collect or use your personal information.

We will investigate your concern and try to resolve the matter.

Contact:

Theologie Clothing
Email: info@theologieclothing.com

You also have the right to complain to the Information Commissioner’s Office, the United Kingdom’s data protection supervisory authority.

You can find information about making a complaint through the Information Commissioner’s Office website.

If you live outside the United Kingdom, you may also have the right to complain to the data protection authority responsible for your location.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• Changes to our business practices

• Changes to our website or services

• Changes to the organisations supporting our services

• New technologies

• Legal or regulatory developments

• Security or operational requirements

The revised Privacy Policy will be published on our website and the “Last updated” date will be changed.

Where required by law, we will provide additional notice or request your consent.

20. Contact Us

For questions about this Privacy Policy, our privacy practices or your personal information, contact:

Theologie Clothing
Email: info@theologieclothing.com

For applicable data protection purposes, Theologie Clothing is the data controller responsible for the personal information described in this policy.