Privacy Policy
Sanne Limited
The Elsie Whiteley Innovation Centre, Hopwood Lane, Halifax, HX1 5ER
Company number: 10026906
Last updated: September 2026
1. Introduction
This privacy policy explains how Sanne Limited (“we,” “us,” “Sanne”) collects, uses, and protects your personal data when you use our website, make a purchase, or interact with our services.
We take your privacy seriously. This policy is transparent about:
What data we collect and why
How we use it
Who we share it with
Your rights
Please read this carefully. If you have questions, contact us at info@sanne.com.
2. Data Controller
Sanne Limited is the data controller for personal data collected through our website and during transactions. This means we determine what data we collect and how we use it.
We are registered in England and Wales (number 10026906) and operate under UK data protection law and the General Data Protection Regulation (GDPR).
3. What Data We Collect
We collect data in the following ways:
3.1 Data You Provide Directly
When you interact with us, we collect:
Contact information: name, email address, phone number, postal address
Account information: login credentials, preferences, saved addresses
Order information: items ordered, delivery address, shipping preferences, special requests
Payment information: processed by Shopify Pay (we do not store full payment card details)
Communications: messages sent to us via email, contact forms, live chat (Bambuser), or WhatsApp
Marketing preferences: consent for email marketing via Klaviyo
3.2 Data Collected Automatically
When you visit our website, we automatically collect:
Technical data: IP address, browser type, operating system, pages visited, time spent on site
Tracking data: via Google Analytics, Shopify Analytics, and Meta Pixel (for advertising retargeting)
Cookies: as described in Section 11 below
3.3 Data from Third Parties
We may receive data about you from:
Shopify: transaction history, order notes, saved preferences
DHL: delivery tracking and delivery status updates
4. How We Use Your Data
We use your data for the following purposes:
4.1 Essential for Contract Performance
Processing and fulfilling your order
Managing delivery via DHL
Handling returns via Loop Returns
Contacting you about your order or delivery
Processing refunds or exchanges
4.2 Legal Compliance
Maintaining records for UK tax purposes (6 years)
Complying with consumer protection law
Responding to legal requests
4.3 Marketing & Communications
With your consent:
Sending marketing emails via Klaviyo (newsletter, product updates, special offers)
Showing you Sanne ads on other websites (Meta Pixel retargeting)
Contacting you about new products or services that match your interests
You can withdraw marketing consent at any time by emailing info@sanne.com or clicking “unsubscribe” in any marketing email.
4.4 Service Improvement
Analyzing website traffic and user behavior (Google Analytics, Shopify Analytics)
Improving product recommendations and fit accuracy
Understanding which features are most useful
Testing new website functionality
5. Legal Basis for Processing
We process your data on the following legal grounds:
|
Purpose |
Legal Basis |
|
Order fulfillment, delivery, payment |
Contractual necessity |
|
Tax and regulatory compliance |
Legal obligation |
|
Marketing emails (soft opt-in) |
Legitimate interest |
|
Marketing emails (other) |
Consent |
|
Analytics and site improvement |
Legitimate interest |
|
Retargeting ads (Meta Pixel) |
Consent |
6. Third Parties & Data Sharing
We share your data with the following service providers:
6.1 Payment Processing
Shopify Pay processes your payment. Sanne does not store full card details.
6.2 Email Marketing
Klaviyo sends marketing emails on our behalf. Your email address and order history are shared with Klaviyo (under their Data Processor Agreement with us).
6.3 Shipping & Returns
DHL handles delivery. We share your name, address, and order details with DHL for tracking and delivery.
Loop Returns manages return logistics. Return-related data (order ID, tracking, reason) is shared with Loop.
6.4 Analytics & Advertising
Google Analytics tracks website behavior (anonymized).
Shopify Analytics tracks transaction and traffic patterns.
Meta Pixel tracks website visits and purchases for retargeting ads. To opt out of Meta retargeting, adjust your cookie settings.
6.5 Live Consultations
Bambuser provides our live video consultation service and acts as our data processor under a signed Data Processing Agreement (DPA). Sanne remains the data controller for this data.
During a consultation, Bambuser may process: your name, email address and IP address; any information shared during the video call or chat, including special category data if you choose to share it; booking details you provide when scheduling; and call satisfaction data where collected.
This data is retained for the duration of our agreement with Bambuser and is destroyed or returned to us on termination of that agreement or on our written request. Full sub-processor details are available at bambuser.com/docs/agreement-details.
6.6 Internal Operations
We may share data with:
Our employees and contractors (under confidentiality obligations)
Legal and financial advisors (as needed)
Our accountant and auditors (for UK tax compliance)
6.7 Legal Obligations
We may disclose data if required by law, court order, or regulatory authority.
6.8 Business Sale
If Sanne is sold or merged, customer data may transfer to the new owner. We will notify you of any material changes to this policy.
7. International Data Transfers
Your data is processed principally in the UK and EEA. In addition:
Sanne manufacturing (UAE): When you place an order, your customer data (name, address, order specifications) is transferred to our manufacturing facility in Dubai, UAE. This is necessary to produce and ship your garment. Data is stored in a password-protected Excel file on a secure network, accessible only to the production team. After your order is fulfilled and shipped, this data is retained for 6 years as part of order records for customer service and dispute resolution.
Bambuser (live video consultations): call audio and video from live styling consultations is relayed via our video infrastructure provider, LiveKit Inc., based in the United States. This transfer is protected by Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework.
These are the only transfers of personal data Sanne makes outside the UK/EEA.
8. Data Retention
8.1 Order & Customer Data
We retain order data, customer contact information, and purchase history for 6 years after your last purchase, for:
UK tax compliance (HMRC requirement)
Customer service and dispute resolution
Reorder and account management
After 6 years, we delete or anonymize this data.
8.2 Marketing Data
Email addresses and marketing preferences are retained until you unsubscribe or request deletion.
8.3 Analytics
Google Analytics and Shopify Analytics retain aggregated data indefinitely. Individual tracking data is anonymized after 26 months.
9. Your Rights
Under UK data protection law and GDPR, you have the following rights:
9.1 Right to Access
Request a copy of all personal data we hold about you. We will provide it in a readable format within 30 days.
9.2 Right to Rectification
Request that we correct inaccurate or incomplete data.
9.3 Right to Erasure (Right to Be Forgotten)
Request deletion of your data, except where:
We need it for legal, tax, or contractual reasons
You have an active order or unresolved dispute
9.4 Right to Restrict Processing
Ask us to limit how we use your data (e.g., pause marketing without deleting your record).
9.5 Right to Data Portability
Request your data in a structured, machine-readable format (e.g., CSV) to transfer to another service.
9.6 Right to Object
Object to processing for marketing or profiling purposes.
9.7 Right to Withdraw Consent
Withdraw consent for marketing emails or cookies at any time.
9.8 How to Exercise Your Rights
Contact us at info@sanne.com with:
Your name and order number (if applicable)
Clear description of your request
Any supporting documents
We will respond within 30 days. If we need more information to verify your identity, we may ask follow-up questions.
10. Security
We implement technical and organizational measures to protect your data:
HTTPS encryption for all website traffic
Secure password-protected accounts
Encrypted data storage on secure servers
Limited access (employees and contractors only, under confidentiality agreements)
Regular security audits and updates
PCI DSS compliance for payment handling
However: No system is 100% secure. If you suspect unauthorized access to your account, contact us immediately at info@sanne.com.
11. Cookies
11.1 What Are Cookies?
Cookies are small text files stored on your device when you visit our website. They help us:
Remember your login and preferences
Track website usage (analytics)
Show you relevant ads (retargeting)
11.2 Cookie Consent
When you first visit our website, you will see a banner asking for cookie consent. You can:
Accept all cookies
Reject non-essential cookies
Customize your preferences
11.3 Types of Cookies We Use
Essential: Session management, security (cannot be disabled)
Analytics: Google Analytics, Shopify Analytics (for site improvement)
Marketing/Retargeting: Meta Pixel (for personalized ads)
Functional: Remember your preferences, language settings
11.4 Manage Cookies
You can change your cookie preferences at any time:
Adjust settings in your browser
Clear cookies from your device (note: you may lose saved preferences)
Visit aboutcookies.org for detailed guidance
11.5 Do Not Track
If your browser is set to “Do Not Track,” we respect that preference. Analytics and retargeting will be limited.
12. Children's Privacy
Our services are not directed to anyone under 18. We do not knowingly collect data from children. If we become aware that a child has provided data, we will delete it promptly. Contact us at info@sanne.com if you believe this has occurred.
13. Your Rights If You are in the EEA
If you reside in the EEA, you have additional rights under GDPR. If you are not satisfied with our response to a data request, you can lodge a complaint with your national data protection authority:
UK: Information Commissioner's Office (ICO) at ico.org.uk
Other EEA countries: Your national DPA (see edpb.ec.europa.eu/about-edpb_en for a directory)
14. Changes to This Policy
We may update this policy to reflect changes in our services, technology, or law. The updated policy will be posted on our website.
Your continued use of our website constitutes acceptance of any updated policy. Check back regularly for updates.
15. Contact Us
For any questions or requests regarding this privacy policy or your personal data:
Email: info@sanne.com
Mailing Address:
Sanne Limited
38 Haycroft Gardens
London, NW10 3BN
England
We aim to respond to all data requests within 30 days.
16. Data Protection Officer
Sanne Limited appoints a Data Protection Officer (DPO) to oversee GDPR compliance. For data protection-specific queries, you can contact the DPO via info@sanne.com (marked “Attention: Data Protection Officer”).
End of Privacy Policy
