Legal
Privacy Policy
Last updated: 25 September 2026
1. Who we are
This website is operated by The Chic Noir. We are the data controller for the personal information collected through this website.
You can contact us at [email protected]. This is the address to use for any privacy-related enquiry or rights request.
2. What information we collect and why
We only collect information you give us directly or that is necessary to complete a transaction. We do not sell your data. We use analytics cookies, including Google Analytics, only if you consent to them. See our Cookie Policy below.
Contact enquiries
When you use our contact form, we collect your first and last name, email address, enquiry type, subject, message, and any estimated date you choose to provide. We use this to respond to your enquiry. The legal basis is our legitimate interest in handling business correspondence. We retain contact messages for up to two years, or until the matter is resolved.
Testimonials and product reviews
If you submit a testimonial or product review, we collect the name and content you provide, together with any rating, title, or optional description. Approved submissions may be displayed publicly on this website. The legal basis is your consent, given when you submit it. You may request removal at any time by contacting us.
Orders and payments
When you place an order, we collect your name, email address, and shipping address, and retain records relating to the order, payment, refunds, and transaction status. We use this information to fulfil purchases, manage refunds, maintain financial records, protect transactions, and resolve payment-related issues. Stripe processes the payment; we do not store or handle your card details. Our legal bases are performance of a contract, compliance with legal obligations, and our legitimate interests in transaction security and resolving payment issues. We retain order and associated financial records for seven years in line with UK financial record-keeping requirements.
Cookies and technical data
We use a small number of strictly necessary cookies to operate the website, primarily to maintain your shopping session. See our Cookie Policy for full details. Analytics cookies are set only if you consent to them and can be withdrawn at any time via the Cookie preferences link in the footer.
3. Who we share your information with
We share data with a small number of third-party service providers necessary to operate the site. Depending on the service, they process data on our instructions or for the purposes described in their own privacy information.
- Stripe, Inc. — payment processing, authentication, transaction security, and fraud and loss prevention. Stripe may collect transaction and device information through its payment services. Stripe's privacy policy is available at stripe.com/gb/privacy.
- Bunny.net — distributes images and media for this website. When your browser requests these files, Bunny.net may receive technical data such as your IP address and request details. We do not share order or payment data with Bunny.net.
- Google (Analytics & Tag Manager) — used, only with your consent, to measure how the site is used. Google's privacy policy is available at policies.google.com/privacy.
We may also use service providers needed to host the site, send email, operate the store, and deliver purchases. We do not sell personal data or share it for another business's own marketing, and we only disclose it where needed to provide the service or where required by law.
4. International transfers
Some of our processors, including Stripe and Google, may process your data outside the UK. Where this occurs, we rely on standard contractual clauses or adequacy decisions to ensure your data receives the same level of protection as it would under UK law.
5. Your rights
Under UK GDPR, you have the following rights regarding your personal data:
- Access: you can request a copy of the personal data we hold about you.
- Rectification: you can ask us to correct inaccurate data.
- Erasure: you can ask us to delete your data, subject to any legal retention obligations.
- Restriction: you can ask us to pause processing while a complaint is investigated.
- Portability: where processing is based on consent or contract, you can request your data in a portable format.
- Objection: you can object to processing based on legitimate interests.
- Withdraw consent: where we rely on consent, you can withdraw it at any time without affecting prior processing.
To exercise any of these rights, email us at [email protected]. We will respond within one month.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk, or by calling 0303 123 1113.
6. Changes to this policy
We may update this policy from time to time. The date at the top of this page will always reflect when it was last revised.