سياسة الخصوصية

Privacy Policy

Sanne Limited

The Elsie Whiteley Innovation Centre, Hopwood Lane, Halifax, HX1 5ER

Company number: 10026906

Last updated: September 2026

1. Introduction

This privacy policy explains how Sanne Limited (“we,” “us,” “Sanne”) collects, uses, and protects your personal data when you use our website, make a purchase, or interact with our services.

We take your privacy seriously. This policy is transparent about:

• What data we collect and why

• How we use it

• Who we share it with

• Your rights

Please read this carefully. If you have questions, contact us at info@sanne.com.

2. Data Controller

Sanne Limited is the data controller for personal data collected through our website and during transactions. This means we determine what data we collect and how we use it.

We are registered in England and Wales (number 10026906) and operate under UK data protection law and the General Data Protection Regulation (GDPR).

3. What Data We Collect

We collect data in the following ways:

3.1 Data You Provide Directly

When you interact with us, we collect:

• Contact information: name, email address, phone number, postal address

• Account information: login credentials, preferences, saved addresses

• Order information: items ordered, delivery address, shipping preferences, special requests

• Payment information: processed by Shopify Pay (we do not store full payment card details)

• Communications: messages sent to us via email, contact forms, live chat (Bambuser), or WhatsApp

• Marketing preferences: consent for email marketing via Klaviyo

3.2 Data Collected Automatically

When you visit our website, we automatically collect:

• Technical data: IP address, browser type, operating system, pages visited, time spent on site

• Tracking data: via Google Analytics, Shopify Analytics, and Meta Pixel (for advertising retargeting)

• Cookies: as described in Section 11 below

3.3 Data from Third Parties

We may receive data about you from:

• Shopify: transaction history, order notes, saved preferences

• DHL: delivery tracking and delivery status updates

4. How We Use Your Data

We use your data for the following purposes:

4.1 Essential for Contract Performance

• Processing and fulfilling your order

• Managing delivery via DHL

• Handling returns via Loop Returns

• Contacting you about your order or delivery

• Processing refunds or exchanges

4.2 Legal Compliance

• Maintaining records for UK tax purposes (6 years)

• Complying with consumer protection law

• Responding to legal requests

4.3 Marketing & Communications

With your consent:

• Sending marketing emails via Klaviyo (newsletter, product updates, special offers)

• Showing you Sanne ads on other websites (Meta Pixel retargeting)

• Contacting you about new products or services that match your interests

You can withdraw marketing consent at any time by emailing info@sanne.com or clicking “unsubscribe” in any marketing email.

4.4 Service Improvement

• Analyzing website traffic and user behavior (Google Analytics, Shopify Analytics)

• Improving product recommendations and fit accuracy

• Understanding which features are most useful

• Testing new website functionality

5. Legal Basis for Processing

We process your data on the following legal grounds:

Purpose	Legal Basis
Order fulfillment, delivery, payment	Contractual necessity
Tax and regulatory compliance	Legal obligation
Marketing emails (soft opt-in)	Legitimate interest
Marketing emails (other)	Consent
Analytics and site improvement	Legitimate interest
Retargeting ads (Meta Pixel)	Consent

6. Third Parties & Data Sharing

We share your data with the following service providers:

6.1 Payment Processing

Shopify Pay processes your payment. Sanne does not store full card details.

6.2 Email Marketing

Klaviyo sends marketing emails on our behalf. Your email address and order history are shared with Klaviyo (under their Data Processor Agreement with us).

6.3 Shipping & Returns

DHL handles delivery. We share your name, address, and order details with DHL for tracking and delivery.

Loop Returns manages return logistics. Return-related data (order ID, tracking, reason) is shared with Loop.

6.4 Analytics & Advertising

Google Analytics tracks website behavior (anonymized).

Shopify Analytics tracks transaction and traffic patterns.

Meta Pixel tracks website visits and purchases for retargeting ads. To opt out of Meta retargeting, adjust your cookie settings.

6.5 Live Consultations

Bambuser provides our live video consultation service and acts as our data processor under a signed Data Processing Agreement (DPA). Sanne remains the data controller for this data.

During a consultation, Bambuser may process: your name, email address and IP address; any information shared during the video call or chat, including special category data if you choose to share it; booking details you provide when scheduling; and call satisfaction data where collected.

This data is retained for the duration of our agreement with Bambuser and is destroyed or returned to us on termination of that agreement or on our written request. Full sub-processor details are available at bambuser.com/docs/agreement-details.

6.6 Internal Operations

We may share data with:

• Our employees and contractors (under confidentiality obligations)

• Legal and financial advisors (as needed)

• Our accountant and auditors (for UK tax compliance)

6.7 Legal Obligations

We may disclose data if required by law, court order, or regulatory authority.

6.8 Business Sale

If Sanne is sold or merged, customer data may transfer to the new owner. We will notify you of any material changes to this policy.

7. International Data Transfers

Your data is processed principally in the UK and EEA. In addition:

Sanne manufacturing (UAE): When you place an order, your customer data (name, address, order specifications) is transferred to our manufacturing facility in Dubai, UAE. This is necessary to produce and ship your garment. Data is stored in a password-protected Excel file on a secure network, accessible only to the production team. After your order is fulfilled and shipped, this data is retained for 6 years as part of order records for customer service and dispute resolution.

Bambuser (live video consultations): call audio and video from live styling consultations is relayed via our video infrastructure provider, LiveKit Inc., based in the United States. This transfer is protected by Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework.

These are the only transfers of personal data Sanne makes outside the UK/EEA.

8. Data Retention

8.1 Order & Customer Data

We retain order data, customer contact information, and purchase history for 6 years after your last purchase, for:

• UK tax compliance (HMRC requirement)

• Customer service and dispute resolution

• Reorder and account management

After 6 years, we delete or anonymize this data.

8.2 Marketing Data

Email addresses and marketing preferences are retained until you unsubscribe or request deletion.

8.3 Analytics

Google Analytics and Shopify Analytics retain aggregated data indefinitely. Individual tracking data is anonymized after 26 months.

9. Your Rights

Under UK data protection law and GDPR, you have the following rights:

9.1 Right to Access

Request a copy of all personal data we hold about you. We will provide it in a readable format within 30 days.

9.2 Right to Rectification

Request that we correct inaccurate or incomplete data.

9.3 Right to Erasure (Right to Be Forgotten)

Request deletion of your data, except where:

• We need it for legal, tax, or contractual reasons

• You have an active order or unresolved dispute

9.4 Right to Restrict Processing

Ask us to limit how we use your data (e.g., pause marketing without deleting your record).

9.5 Right to Data Portability

Request your data in a structured, machine-readable format (e.g., CSV) to transfer to another service.

9.6 Right to Object

Object to processing for marketing or profiling purposes.

9.7 Right to Withdraw Consent

Withdraw consent for marketing emails or cookies at any time.

9.8 How to Exercise Your Rights

Contact us at info@sanne.com with:

• Your name and order number (if applicable)

• Clear description of your request

• Any supporting documents

We will respond within 30 days. If we need more information to verify your identity, we may ask follow-up questions.

10. Security

We implement technical and organizational measures to protect your data:

• HTTPS encryption for all website traffic

• Secure password-protected accounts

• Encrypted data storage on secure servers

• Limited access (employees and contractors only, under confidentiality agreements)

• Regular security audits and updates

• PCI DSS compliance for payment handling

However: No system is 100% secure. If you suspect unauthorized access to your account, contact us immediately at info@sanne.com.

11. Cookies

11.1 What Are Cookies?

Cookies are small text files stored on your device when you visit our website. They help us:

• Remember your login and preferences

• Track website usage (analytics)

• Show you relevant ads (retargeting)

11.2 Cookie Consent

When you first visit our website, you will see a banner asking for cookie consent. You can:

• Accept all cookies

• Reject non-essential cookies

• Customize your preferences

11.3 Types of Cookies We Use

• Essential: Session management, security (cannot be disabled)

• Analytics: Google Analytics, Shopify Analytics (for site improvement)

• Marketing/Retargeting: Meta Pixel (for personalized ads)

• Functional: Remember your preferences, language settings

11.4 Manage Cookies

You can change your cookie preferences at any time:

• Adjust settings in your browser

• Clear cookies from your device (note: you may lose saved preferences)

• Visit aboutcookies.org for detailed guidance

11.5 Do Not Track

If your browser is set to “Do Not Track,” we respect that preference. Analytics and retargeting will be limited.

12. Children's Privacy

Our services are not directed to anyone under 18. We do not knowingly collect data from children. If we become aware that a child has provided data, we will delete it promptly. Contact us at info@sanne.com if you believe this has occurred.

13. Your Rights If You are in the EEA

If you reside in the EEA, you have additional rights under GDPR. If you are not satisfied with our response to a data request, you can lodge a complaint with your national data protection authority:

• UK: Information Commissioner's Office (ICO) at ico.org.uk

• Other EEA countries: Your national DPA (see edpb.ec.europa.eu/about-edpb_en for a directory)

14. Changes to This Policy

We may update this policy to reflect changes in our services, technology, or law. The updated policy will be posted on our website.

Your continued use of our website constitutes acceptance of any updated policy. Check back regularly for updates.

15. Contact Us

For any questions or requests regarding this privacy policy or your personal data:

Email: info@sanne.com

Mailing Address:

Sanne Limited

38 Haycroft Gardens

London, NW10 3BN

England

We aim to respond to all data requests within 30 days.

16. Data Protection Officer

Sanne Limited appoints a Data Protection Officer (DPO) to oversee GDPR compliance. For data protection-specific queries, you can contact the DPO via info@sanne.com (marked “Attention: Data Protection Officer”).

End of Privacy Policy