Salt Bespoke - Website Privacy Policy 

Who we are

This privacy policy describes how Salt Bespoke (a trading name of Powell Collective Ltd) collects and uses personal data through our website and our service.

Data Controller: Powell Collective Ltd (trading as Salt Bespoke)

Registered Office: Veritons, Innovation Centre Medway, Maidstone Road, Chatham, ME5 9FD

Company Number: 16555372

ICO Registration Number: ZC105310

Email: info@saltbespoke.com

Personal data we collect

We collect the following categories of personal data:

·       Contact information — name, email, phone number, billing/delivery address. Collected when you enquire, place an order, or correspond with us.

·       Client information — measurements, style preferences, purchase history, appointment history. Collected during consultations and throughout your client relationship.

·       Payment information — bank or card payment details processed by our payment provider (we do not store full card details). Collected when you pay a deposit or balance.

·       Website data — IP address, browser type, device type, pages visited, cookie data. Collected automatically when you visit our website.

·       Marketing data — email consent and engagement, communication preferences. Collected when you opt in to marketing.

Lawful basis for processing

We rely on the following lawful bases under UK GDPR Article 6:

·       Providing tailoring services to a client — contractual necessity (Article 6(1)(b)).

·       Keeping measurements and order history for repeat orders — contractual necessity / legitimate interests (Article 6(1)(b)/(f)); the legitimate interest is enabling re-orders without re-measuring.

·       Sending marketing emails — consent (Article 6(1)(a)); you may withdraw at any time.

·       Maintaining financial records and tax compliance — legal obligation (Article 6(1)(c)).

·       Defending legal claims — legitimate interests (Article 6(1)(f)).

·       Website analytics (with consent) — consent (Article 6(1)(a)).

How we use your data

·       To provide bespoke tailoring services and manage your client relationship.

·       To process orders, take payments, manage appointments and fittings, and maintain measurement records.

·       To improve our service and our website.

·       To send marketing communications where you have given consent.

·       To comply with legal and regulatory obligations (tax, accounting, anti-money laundering where applicable).

·       To handle complaints, enquiries, or disputes.

How long we keep your data

·       Contact and client information (active clients) — while you are an active client, plus 6 years after your last order.

·       Financial and tax records — 6 years from the end of the relevant tax year (HMRC requirement).

·       Measurement records — up to 7 years after your last order, to enable re-orders without re-measuring.

·       Marketing data — until you withdraw consent, or 3 years of inactivity, whichever is sooner.

·       Website analytics data (Squarespace Analytics) — up to 2 years.

·       CCTV (if any) — 31 days, unless required for an investigation.

Who we share your data with

We may share limited personal data with the following categories of recipient, only where necessary:

·       Garment manufacturers and tailors — for production purposes.

·       Payment providers — for processing payments.

·       CRM provider — stores contact and client information.

·       Accounting software provider — stores financial records.

·       Email and communications provider — stores correspondence.

·       Website hosting and analytics provider (Squarespace) — hosts our website and provides built-in website analytics.

·       Delivery and courier services — where physical delivery is required.

·       Professional advisors (lawyers, accountants, insurers) — where strictly necessary.

·       Regulatory or legal authorities — where required by law.

We never sell your personal data.

International transfers

Some of our service providers are based outside the UK. Where this is the case, we ensure that transfers of personal data are subject to appropriate safeguards, such as the UK addendum to the EU Standard Contractual Clauses, or that transfers are made to countries the UK government has determined provide adequate protection.

Your rights

Under UK GDPR you have the right to:

·       Access the personal data we hold about you (subject access request).

·       Ask us to correct inaccurate or incomplete data.

·       Ask us to delete your data, subject to certain legal limits (right to erasure).

·       Ask us to restrict how we process your data in certain circumstances.

·       Object to certain types of processing, including direct marketing.

·       Withdraw consent at any time, where processing is based on consent.

·       Receive your personal data in a structured, machine-readable format and/or have it transferred to another controller (data portability).

To exercise any of these rights, email info@saltbespoke.com. We will respond within one calendar month.

Data security

We use appropriate technical and organisational measures to protect personal data, including encrypted storage, access controls, password protection, and staff training. We do not store full payment card details. If we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours and, where required, notify you directly.

Children’s data

Our services are not directed to children under 18. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child, we will delete it promptly.

Automated decision-making

We do not make decisions about clients using automated processing or profiling that have a significant effect on them.

Cookies

Our website uses cookies. Please see our separate Cookie Policy for details.

Complaints

If you are unhappy with how we have handled your personal data, please contact us first at info@saltbespoke.com so we can try to put things right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection:

Website: ico.org.uk/make-a-complaint

Helpline: 0303 123 1113

Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Updates to this policy

We may update this policy from time to time. The latest version will appear on our website along with the date last updated.

Last updated: 2 July 2026