Privacy policy

PRIVACY POLICY

Last updated: 15 August 2026

This Privacy Policy explains how CURFEW CLUB LTD (“Curfew Club”, “we”, “us” or “our”) collects, uses, stores and shares personal information when you visit curfew-club.com, place an order, sign up to receive marketing, contact us or otherwise interact with our website and services.

CURFEW CLUB LTD is the data controller for the personal information described in this policy, except where another organisation, such as Shopify or a payment provider, acts as a separate controller for its own processing.

This policy should be read alongside our Terms of Service, Refund & Returns Policy and Shipping & Delivery Policy.

1. WHO WE ARE

Company: CURFEW CLUB LTD
Company number: 17286148
Registered office: 19 Fleet Street, Nelson, England, BB9 7XP
Email: admin@curfew-club.com

For the purposes of UK data-protection law, CURFEW CLUB LTD is the controller of the personal information we process about our customers and website visitors, except where stated otherwise.

2. PERSONAL INFORMATION WE COLLECT

The information we collect depends on how you interact with Curfew Club.

We may collect the following categories of personal information.

Contact information

Including:

  • your name;

  • email address;

  • telephone number;

  • billing address; and

  • delivery address.

Order and transaction information

Including:

  • products ordered;

  • size and colour selections;

  • order value;

  • order history;

  • delivery information;

  • returns and refunds;

  • discount codes used; and

  • transaction records.

Payment information

Payments are processed through payment providers made available through Shopify.

We may receive information confirming that a payment has been made, together with limited transaction details.

We do not normally receive or store your complete payment-card number ourselves.

Account information

If customer accounts are available, we may process information associated with your account, including:

  • account identifiers;

  • saved details;

  • order history; and

  • preferences.

Communications

If you contact us, we may collect the contents of your communication and any information you provide to us.

This may include customer-service enquiries, return requests, complaints and other correspondence.

Website and device information

When you use our website, certain information may be collected automatically, including:

  • IP address;

  • browser type;

  • device type;

  • operating system;

  • approximate location derived from technical information;

  • pages viewed;

  • interactions with our website;

  • referral information; and

  • cookie or similar technology identifiers.

Marketing information

If you sign up to receive marketing from us, or where we are otherwise permitted by law to contact you for marketing purposes, we may process:

  • your email address;

  • telephone number;

  • postal address;

  • marketing preferences;

  • the date and method of your signup;

  • records of consent, objection or opt-out; and

  • interactions with marketing communications where our systems provide this information.

3. HOW WE COLLECT YOUR INFORMATION

We collect personal information in several ways.

Directly from you

For example, when you:

  • place an order;

  • enter information at checkout;

  • create an account;

  • join our mailing list;

  • provide contact information;

  • contact us;

  • request a return or refund; or

  • otherwise provide information to us.

Automatically

Certain technical and usage information may be collected when you access or use our website through cookies and similar technologies.

From service providers

We may receive information from organisations that help us operate our store, including:

  • Shopify;

  • payment providers;

  • fulfilment and production providers;

  • delivery companies;

  • analytics providers;

  • fraud-prevention providers; and

  • marketing service providers.

4. WHY WE USE YOUR PERSONAL INFORMATION

UK data-protection law requires us to have a lawful basis for processing personal information.

The lawful basis we rely on depends on why and how we use the information.

To process and fulfil your order

We may use information such as your name, contact details, delivery address, payment confirmation and order details to:

  • process your order;

  • take or verify payment;

  • arrange production and fulfilment;

  • deliver your order;

  • send transactional order updates;

  • handle returns and refunds; and

  • respond to order-related enquiries.

Lawful basis: performance of a contract with you, or taking steps at your request before entering into a contract.

To provide customer service

We may use your information to:

  • answer enquiries;

  • investigate delivery issues;

  • deal with returns, faults or complaints; and

  • maintain appropriate records of our communications.

Lawful basis: performance of our contract with you and, where appropriate, our legitimate interests in providing effective customer service and managing our business.

To prevent fraud and protect our business

We may process personal information to:

  • identify suspicious transactions;

  • prevent and investigate fraud;

  • protect customer accounts;

  • maintain website security; and

  • investigate misuse of our services.

Lawful basis: our legitimate interests in protecting Curfew Club, our customers and our systems, and compliance with legal obligations where applicable.

To comply with legal and regulatory obligations

We may retain or use information where necessary to:

  • comply with tax and accounting requirements;

  • comply with consumer-protection obligations;

  • respond to lawful requests from authorities;

  • establish, exercise or defend legal claims; or

  • comply with other legal duties.

Lawful basis: compliance with a legal obligation and, where appropriate, our legitimate interests in establishing, exercising or defending legal rights.

To improve our website and services

We may process information about how customers interact with our website to:

  • understand how the website is used;

  • identify technical issues;

  • improve navigation;

  • improve our products and services; and

  • measure website performance.

Lawful basis: depending on the processing involved, our legitimate interests in understanding and improving our website, or your consent where required.

Where consent is required for cookies or similar technologies, we will not use those technologies unless and until the required consent has been obtained.

5. MARKETING

We may use your personal information to send you marketing and promotional communications about Curfew Club, including information about:

  • new product releases;

  • collection launches;

  • promotional offers;

  • discount codes; and

  • other Curfew Club news.

Depending on the information you provide to us and the marketing preferences you select, marketing communications may be sent by:

  • email;

  • SMS or other electronic messaging;

  • telephone; or

  • post.

We will only use your personal information for direct marketing where we have an appropriate lawful basis and will obtain consent where required by law.

Different rules apply depending on the marketing channel being used.

Email, SMS and electronic marketing

For electronic marketing such as email and SMS, we may rely on your consent or, where all applicable legal requirements are met, the UK electronic-marketing soft opt-in.

The soft opt-in may apply where:

  • you previously purchased a product from us or entered into negotiations to purchase from us;

  • we obtained your contact details in connection with that sale or proposed sale;

  • we are marketing our own similar products or services; and

  • you were given a clear and simple opportunity to opt out when your details were collected and in each subsequent marketing message.

Where we send electronic marketing based on consent, our UK GDPR lawful basis will generally be consent.

Where we lawfully rely on the soft opt-in, our UK GDPR lawful basis will generally be our legitimate interests in marketing our own similar products and maintaining our customer relationship.

Telephone marketing

Where we conduct live telephone marketing, we will comply with applicable direct-marketing and privacy rules.

We will respect objections to receiving marketing calls and will not make live marketing calls to numbers registered with the Telephone Preference Service where the applicable rules prohibit us from doing so, unless we have the necessary permission to call.

We will also comply with any specific consent requirements that apply to particular types of marketing calls.

Postal marketing

We may use your postal address for direct marketing where we have an appropriate lawful basis to do so.

You may object to postal marketing from us at any time.

Opting out of marketing

You can change your marketing preferences or opt out of direct marketing at any time.

For email marketing, you can use the unsubscribe link included in our emails.

For SMS or other electronic messages, you may use any unsubscribe method stated in the message.

For telephone or postal marketing, or if you otherwise wish to change your preferences, contact us at admin@curfew-club.com.

You have the right to object to the use of your personal information for direct marketing at any time.

Withdrawing consent or opting out of marketing will not affect essential service communications. We may still contact you where necessary regarding:

  • an order;

  • payment;

  • delivery;

  • a return or refund;

  • a customer-service request; or

  • another matter relating to our contract with you.

6. COOKIES AND SIMILAR TECHNOLOGIES

Our website may use cookies and similar technologies.

These technologies may be used for purposes including:

  • keeping the website functioning;

  • maintaining the shopping basket and checkout;

  • remembering preferences;

  • website security;

  • analytics;

  • measuring website performance; and

  • advertising or marketing where enabled.

Some cookies and similar technologies are necessary for the website to operate correctly.

Other technologies, including certain analytics, advertising or tracking technologies, may require your consent.

Where UK law requires consent, we will seek that consent through our cookie controls before the relevant non-essential technologies are used.

You can use the cookie settings available on our website to manage your preferences where those controls are provided.

You can withdraw or change your consent to non-essential cookies through the available cookie controls.

Refusing or withdrawing consent to non-essential cookies should not prevent you from accessing the core functions of our website, although some optional features may work differently.

7. WHO WE SHARE PERSONAL INFORMATION WITH

We may share personal information where reasonably necessary for the purposes described in this policy.

This may include the following categories of recipients.

Shopify

Our online store is powered by Shopify.

Shopify provides ecommerce infrastructure and may process personal information to provide and improve its services.

Shopify may also act as a separate controller for certain processing carried out for its own purposes.

Payment providers

Payment providers process information required to authorise and complete transactions.

Their own privacy policies may apply to processing for which they act as separate controllers.

Fulfilment and production providers

We may share information necessary to produce and fulfil your order.

This may include:

  • your name;

  • delivery details;

  • contact information; and

  • order information.

Delivery and courier providers

We may share information necessary to deliver your order, including:

  • recipient name;

  • delivery address;

  • telephone number where required; and

  • email address where needed for tracking or delivery notifications.

Technology and service providers

We may use third-party service providers for functions including:

  • website hosting;

  • email delivery;

  • analytics;

  • fraud prevention;

  • customer support;

  • data storage; and

  • marketing.

These providers may process personal information where necessary to provide their services.

Professional advisers and authorities

We may disclose personal information where reasonably necessary to:

  • accountants;

  • lawyers;

  • insurers;

  • regulators;

  • courts;

  • law-enforcement bodies; or

  • other public authorities.

This will generally occur where required by law or where necessary to establish, exercise or defend legal rights.

Business transfers

If Curfew Club is sold, reorganised, merged or otherwise involved in a corporate transaction, personal information may form part of that transaction where legally permitted.

8. SHOPIFY

Our online store is hosted by Shopify.

When you use our website, Shopify may collect and process information about your use of our store in order to provide the Shopify platform and related services.

Information submitted through our store may be transmitted to Shopify and to service providers used in connection with the Shopify platform.

Shopify may process certain information for its own purposes and, in those circumstances, is responsible for that processing.

You can find further information about Shopify's processing in Shopify's Consumer Privacy Policy and Privacy Portal.

9. INTERNATIONAL TRANSFERS

Although Curfew Club currently sells to customers in the United Kingdom, some organisations that provide services to us may process or store personal information outside the UK.

For example, Shopify and certain technology, payment, fulfilment, delivery or marketing providers may operate internationally.

Where our use of a service results in a restricted transfer of personal information outside the UK, we will ensure that an appropriate lawful transfer mechanism applies.

Depending on the destination and circumstances, this may include:

  • transferring information to a country or organisation covered by UK adequacy regulations;

  • using appropriate contractual safeguards recognised under UK data-protection law, such as the UK International Data Transfer Agreement or an applicable UK Addendum; or

  • using another transfer mechanism permitted by UK law.

Where required, we will also carry out any transfer assessment and implement any additional safeguards required under applicable UK data-protection law.

10. HOW LONG WE KEEP YOUR INFORMATION

We do not keep personal information for longer than is reasonably necessary for the purposes for which it was collected.

Retention periods depend on factors including:

  • why the information was collected;

  • whether we need it to fulfil an order or provide a service;

  • whether you continue to hold a customer account;

  • tax, accounting and record-keeping requirements;

  • whether there is an unresolved complaint, refund, chargeback or dispute;

  • whether information may be needed to establish, exercise or defend a legal claim; and

  • any other applicable legal requirements.

Order and transaction records may need to be retained for several years for accounting, tax and legal purposes.

Customer-service records may be retained where necessary to manage enquiries, disputes or claims.

Marketing information may be retained for as long as you remain subscribed or while we otherwise lawfully market to you.

If you opt out of direct marketing, we may retain limited information on a suppression list so that we can record your objection and avoid sending marketing to you in future.

When personal information is no longer required, we will delete it, anonymise it or otherwise dispose of it appropriately.

11. DATA SECURITY

We take reasonable technical and organisational measures to protect personal information against:

  • accidental loss;

  • misuse;

  • unauthorised access;

  • alteration;

  • destruction; and

  • unauthorised disclosure.

We also use established third-party providers, including Shopify and payment processors, to operate important parts of our ecommerce service.

However, no internet transmission or data-storage system can be guaranteed to be completely secure.

If you believe that your personal information or account may have been compromised, please contact us at admin@curfew-club.com.

12. YOUR UK DATA-PROTECTION RIGHTS

Depending on the circumstances and the type of processing involved, UK data-protection law may give you the following rights.

Right of access

You may ask whether we process personal information about you and request a copy of that information.

Right to rectification

You may ask us to correct inaccurate personal information or complete information that is incomplete.

Right to erasure

In certain circumstances, you may ask us to delete personal information about you.

This right does not apply where we are required or otherwise legally permitted to retain the information.

Right to restriction

You may have the right to ask us to restrict how we process your information in certain circumstances.

Right to object

You may have the right to object to processing carried out on the basis of legitimate interests.

You have the right to object to the processing of your personal information for direct marketing at any time.

Right to data portability

Where applicable, you may have the right to receive certain personal information in a structured, commonly used and machine-readable format and, in some circumstances, have it transferred to another organisation.

Right to withdraw consent

Where we rely on your consent, you may withdraw it at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

Rights relating to automated decision-making

Where applicable, you may have rights in relation to decisions based solely on automated processing where those decisions produce legal or similarly significant effects.

We do not currently make decisions about customers solely by automated means that produce legal or similarly significant effects.

13. HOW TO EXERCISE YOUR RIGHTS

To exercise an applicable data-protection right, contact us at:

admin@curfew-club.com

Please provide enough information for us to identify you and understand your request.

We may ask for additional information where reasonably necessary to confirm your identity before acting on a request.

We will respond within the timeframe required by applicable law.

You will not normally be charged for exercising your data-protection rights.

However, where permitted by law, we may charge a reasonable fee or refuse to act on a request that is manifestly unfounded or excessive.

14. CHILDREN'S INFORMATION

Our website is not directed at children.

We do not knowingly seek to collect personal information directly from children in circumstances where parental consent would be required under applicable UK law.

If you believe that a child has provided us with personal information in circumstances where this should not have occurred, please contact us at admin@curfew-club.com so that we can investigate and take appropriate action.

15. THIRD-PARTY WEBSITES

Our website may contain links to third-party websites, platforms or services.

We do not control the privacy practices of independent third parties.

If you follow a third-party link, we recommend reviewing that organisation's privacy information before providing personal information.

The presence of a link on our website does not mean that Curfew Club controls or accepts responsibility for that third party's privacy practices.

16. COMPLAINTS

If you have concerns about how we collect or use your personal information, please contact us first at:

admin@curfew-club.com

We will try to resolve your concern.

You also have the right to make a complaint to the UK's data-protection regulator, the Information Commissioner's Office (ICO).

Further information about your data-protection rights and how to make a complaint is available through the ICO's official website.

17. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time.

For example, we may make changes where:

  • our business practices change;

  • we introduce new marketing channels;

  • the services or technologies we use change;

  • our website changes; or

  • legal or regulatory requirements change.

Where we make changes, we will update the “Last updated” date at the top of this policy.

Where required by law, we will provide additional notice of material changes.

If we intend to use personal information for a materially different purpose from the purpose for which it was originally collected, we will provide any additional privacy information required before beginning that processing.

18. CONTACT US

For questions about this Privacy Policy, our privacy practices or your personal information, contact:

CURFEW CLUB LTD
Email: admin@curfew-club.com
Registered office: 19 Fleet Street, Nelson, England, BB9 7XP
Company number: 17286148