Privacy notice
Last updated: 13 October 2026.
Draft notice: business identity and contact details must be completed before this notice is finalised.
Who is responsible?
DeipoUK operates this shop and is responsible for the personal information it uses to fulfil orders and provide customer support.
Deipo Clothes trading as DeipoUK
Email: contact@deipo.shop
Information we use
When you buy a bundle, we use your email address, order contents, payment reference and status, payment amount, delivery name and address, dispatch status, carrier and parcel tracking references. Stripe collects your checkout contact information, phone number, delivery address and payment details. We do not store full card numbers or card security codes on this website.
If you create an account, we store your name, verified email, a password hash, account creation and verification dates, and temporary hashed verification or reset tokens. We link orders to your account identifier or to your verified checkout email. Private support conversations store the subject, message text, related order reference, timestamps and read status so you and the shop owner can follow up.
If you contact us, we use the information you provide to answer your enquiry. Our hosting and security systems may record technical request information such as IP addresses, dates, requested pages and errors. Login and payment endpoints also use temporary rate-limit records to protect the service.
Why we use it
We use information to take steps you request before a purchase, process and deliver your order, manage subscriptions, and answer order enquiries (performance of a contract). We keep information needed for tax, accounting and other applicable obligations (legal obligation). We use limited technical information to prevent abuse, keep the shop secure and resolve service problems (legitimate interests in running a reliable, secure shop).
You may object to processing based on legitimate interests. We will consider your circumstances and any overriding grounds that apply.
You need to provide the contact and delivery details requested at checkout for us to process and deliver an order. We do not use the shop’s order data for automated decisions that produce legal or similarly significant effects.
Who receives information?
We share the information needed for payments with Stripe, for website operation and account-email delivery with our hosting provider, and for delivery with the courier handling your parcel. Professional advisers or public authorities may receive information where necessary for accounting or legal obligations. We do not sell personal information.
Stripe and other providers may process information outside the UK under their applicable transfer arrangements. See Stripe’s privacy policy. You can ask us for information about the safeguards applicable to your order.
Browser storage
The shop uses essential local storage to remember bundle selections and reconcile your cart after payment. It stores product identifiers, quantities, random cart identifiers and temporary checkout-attempt records. It does not save your name, delivery address, phone number or email in browser storage. Customer and owner sign-in use an essential session cookie. Customer sessions have a maximum signed-in lifetime of 12 hours; signing out or resetting a password invalidates customer access. Verification and recovery links expire after 30 minutes and are single-use. You can clear site storage in your browser, but doing so removes the saved cart.
This version of the shop does not include advertising trackers or analytics scripts. Stripe’s separate checkout and portal have their own privacy and cookie information.
How long we keep information
We retain order records for as long as needed to fulfil the order, resolve enquiries and disputes, and meet applicable accounting and legal record-keeping requirements. Retention depends on those obligations and any unresolved claim; records should be reviewed and removed or anonymised when no longer needed. Outstanding orders are not automatically deleted based on the number of new orders.
Temporary rate-limit records expire within one hour and are removed when the service next updates those records. Cart and checkout-attempt data is cleared as described above or when you clear browser storage. Completed checkout snapshots contain only an identifier and completion time.
Account details and support conversations are retained while needed to provide your account, answer enquiries and meet applicable obligations. They do not currently have automated expiry; the shop owner must review retention and handle deletion requests, subject to any records that must be kept.
Your rights and complaints
Depending on the circumstances, you can ask to access, correct or erase your information, restrict its use, object to processing, or receive a portable copy. These rights are subject to applicable conditions; we may need to retain some information for legal obligations.
Contact us using the details above for a privacy request. You can also complain to the Information Commissioner’s Office.
Updates
We will update this notice if the shop’s processing changes. The date above identifies this version.