Re:Finery

Privacy Policy

Version 2026-06-v1  Last updated: June 2026.

1. Who we are

Re:Finery is a trading name of Really Clean Ltd, a company registered in England and Wales, Companies House Registration Number 16462299, registered office 55 Borough Road, Altrincham WA15 9RA. Our Re:Finery operations are based at Unit B, Systems House, Ocean Street, Altrincham WA14 5DH.

Really Clean Ltd is the data controller for personal data processed in connection with Re:Finery. You can contact us about anything in this policy at info@re-finery.co.uk or 07966 873385.

This policy explains what personal data we collect when you use re-finery.co.uk and our mail-in cleaning service, why we collect it, who we share it with, how long we keep it, and your rights.

2. The data we collect

When you place an order: your name, email address, phone number, billing and delivery addresses, the items and services you purchase, anything you tell us in the order notes field, your declared dress value band where applicable, and your answer to whether your item still has its original care label.

Payment data: your payment is processed by Stripe. We never see or store your full card number — we receive only confirmation of payment, the card type, and the last four digits.

When you tell us about your item: after ordering, you can send us photographs of your item and its care label, confirm whether a care label is present, and add notes describing anything you’d like us to know. You choose what to upload. Please only send photographs you are comfortable sharing with us — if an image happens to show a person, that image will be treated as part of your order record and used only for the purposes in section 4.

When we process your items: photographs of your items taken on arrival and after cleaning (see section 4), our inspection notes, and correspondence with you about your order.

Records of the consents you give: when you accept our Terms & Conditions, acknowledge that an item has no care label, or opt in to marketing, we record the exact wording shown to you, the version, the date and time, and your IP address. We keep these records because we are required to be able to demonstrate that consent was given, and because a no-care-label acknowledgment affects how your item is treated and insured.

When you contact us: your contact details and the content of your messages.

When you browse our website: technical data such as IP address, browser type and pages visited, collected through cookies and similar technologies as described in section 8.

3. Why we use your data and our lawful bases

What we do Lawful basis Notes
Take and fulfil your order: payment, courier labels, service emails (confirmation, item received, dispatch), and contacting you about risks identified during inspection Performance of a contract We cannot provide the service without this
Keep records of orders, payments and consents Legal obligation / legitimate interests Tax law requires financial records; consent logs evidence compliance
Photograph items on arrival and after cleaning as condition records Legitimate interests Evidencing item condition protects both you and us in any dispute
Use anonymised before-and-after photographs in marketing Consent Only where you ticked the photography box at checkout; withdraw any time
Send you marketing emails about Re:Finery offers and care tips Consent Only where you opted in; unsubscribe in any email or by contacting us
Analyse website use and measure advertising Consent (cookies) / legitimate interests See section 8 — non-essential cookies only run with your consent
Prevent fraud and secure our website and systems Legitimate interests

Including payment fraud screening by Stripe

Record your care-label answer and, where applicable, your acknowledgment that an item has no care label Performance of a contract / legal obligation This determines how your item is treated and what cover applies; the record evidences your informed consent
Use photographs and notes you send us to assess your item and plan its treatment Performance of a contract We cannot advise on or safely clean an item we cannot see

 Where we rely on legitimate interests, we have assessed that our interests are not overridden by your rights. You can object to any processing based on legitimate interests (section 9).

4. Photographs of your items

Photographs you send us. After you order, you can upload photographs of your item and its care label so our specialists know exactly what they’re working with before it arrives. We use these only to assess your item, plan its treatment, tell you honestly what’s achievable, and — if we can’t safely do what you’ve asked — to let you know before you send it. They are linked to your order and visible to our team.

Photographs we take. We photograph every item when it arrives with us and again after cleaning. These are part of how we deliver the service: they record the condition of your items, support fair resolution of any damage or insurance claim, and form part of our quality control.

Both kinds are internal records. They are not published, and they are kept in line with the retention periods in section 7. You can ask us to delete photographs relating to your order at any time (section 9), unless we need them for an ongoing dispute or claim.

Marketing use is separate, and always optional. At checkout you can consent to us using anonymised before-and-after photographs of your items in our marketing (for example on our website and social media). We will not use any photograph of your item in marketing without that consent. Marketing images never include your name, order details or anything identifying you. If you withdraw consent we will stop further use of your images, though copies may persist where content has already been shared publicly.

5. Who we share your data with

    • DPD (courier): your name, address and phone number, so they can collect, track and deliver your parcels and send you delivery notifications.

    • Stripe (payments): processes your payment as an independent controller for fraud and compliance purposes; see Stripe’s privacy policy for details.

    • Intuit Mailchimp (email): if you opt in to marketing, your name and email address are held in our Mailchimp audience, tagged as a Re:Finery contact.

    • Our website hosting and IT providers: who store data on our behalf under contracts that meet UK GDPR requirements.

    • Google and Meta (analytics and advertising): where you consent to the relevant cookies, as described in section 8.

    • Professional advisers, insurers and authorities: where necessary for legal claims, insurance claims relating to your items, or where the law requires.

We never sell your personal data.

6. International transfers

Some of our providers process data outside the UK. Mailchimp, Stripe, Google and Meta process data in the United States. These transfers are protected by safeguards recognised under UK law, including the UK–US Data Bridge and the International Data Transfer Agreement / Addendum to the EU Standard Contractual Clauses, as applicable to each provider.

7. How long we keep your data

Data Retention
Order and payment records 7 years from the end of the financial year (HMRC requirement)
Condition-record photographs and inspection notes 12 months after your order completes, unless needed longer for a dispute or insurance claim
Consent records (T&Cs, marketing, photography) As long as the consent remains relied upon, plus 6 years
Marketing data Until you unsubscribe or after prolonged inactivity, after which we suppress or delete
Enquiry correspondence (no order placed) 12 months
Photographs and notes you upload about your item 12 months after your order completes, unless needed longer for a dispute or insurance claim

8. Cookies

Our website uses essential cookies (required for the shop basket and checkout to function) and, with your consent, analytics and advertising cookies (Google Analytics, Google Ads and Meta Pixel). Non-essential cookies only run after you accept them through our cookie banner. You can change your choices at any time via [TO CONFIRM: cookie settings URL — same consent platform as ADC site once installed].

9. Your rights

Under UK GDPR you have the right to: access a copy of your personal data; have inaccurate data corrected; have your data erased in certain circumstances; restrict or object to processing (including any processing based on legitimate interests, and direct marketing — an objection to direct marketing is absolute); data portability for data you provided to us; and to withdraw consent at any time where processing is based on consent, without affecting processing before withdrawal.

To exercise any right, email info@re-finery.co.uk. We will respond within one month. We may need to verify your identity first. Exercising your rights is free of charge.

10. Marketing choices

You will only receive marketing emails from us if you opted in. Every marketing email contains an unsubscribe link, or you can email us. Unsubscribing from marketing does not stop service emails about an active order (order confirmation, item received, dispatch) — those are part of providing the service.

11. Security

We protect your data with appropriate technical and organisational measures, including encrypted connections (HTTPS) across our website, payment processing handled entirely by Stripe under PCI DSS, and access controls limiting who in our team can view order data. Photographs relating to your order are stored on our website’s servers and are not published, listed or indexed, but are retrieved by direct link rather than held behind a login. We are in the process of moving them to protected storage.

 

12. Changes to this policy

We will post any changes on this page and update the version and date at the top. Significant changes will be flagged on the website or by email where appropriate.

13. Complaints

If you are unhappy with how we have handled your data, please contact us first and we will do our best to put it right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.