Cloth & Clover Limited is committed to protecting and respecting your privacy.

This Privacy Policy explains how personal information is collected, used and safeguarded when visiting www.clothandclover.com (http://www.clothandclover.com) or corresponding directly with the studio.

Who Cloth & Clover is

Cloth & Clover Limited is registered in England and Wales under company number 08054493, with its registered office at 147 Studdridge Street, London SW6 3TD.

For the purposes of the UK General Data Protection Regulation and the Data Protection Act 2018, Cloth & Clover Limited acts as the data controller in respect of personal data collected through the website and through direct communications.

The website is operated from the United Kingdom but may be accessed internationally. Personal data is processed in accordance with applicable UK data protection legislation.

Information collected

Cloth & Clover may collect personal information including your name, company name, contact details, billing and delivery addresses, order history, correspondence records and marketing preferences.

When the website is used, certain technical information may also be collected through cookies and analytics tools in order to understand how the website is accessed and used. Further details are set out in the Cookie Policy.

Payments made through the website are processed securely via Shopify Payments, provided by Shopify International Limited (an Irish company registered under number 560279 with its registered office at 2nd Floor, 1–2 Victoria Buildings, Haddington Road, Dublin 4, D04 XN32, Ireland). Cloth & Clover does not store or have access to full payment card or bank details. Payment information is encrypted and transmitted directly to Shopify’s secure systems in accordance with applicable data protection legislation.

How personal information is used

Personal information is used to process orders, manage payments, arrange delivery, respond to enquiries, maintain business records and comply with legal obligations.

Where permitted by law, Cloth & Clover may also send information regarding new collections, studio news or relevant updates. Marketing communications are sent only where consent has been provided, and consent may be withdrawn at any time.

Personal information is processed on lawful bases including contractual necessity, legitimate interests, legal obligation and consent, depending on the circumstances.

Cloth & Clover does not sell personal information and does not pass personal details to third parties for marketing purposes.

Sharing information

Personal information is shared only where necessary to fulfil an order or operate the business. This may include secure payment providers, website hosting platforms, delivery services, professional advisers and regulatory authorities where required by law.

All service providers are expected to process personal information lawfully and securely.

International transfers

Where personal information is processed outside the United Kingdom, appropriate safeguards are implemented in accordance with applicable data protection legislation. These safeguards may include adequacy regulations or approved international transfer agreements.

Retention

Accounting and order records are retained for six years in accordance with UK tax and legal requirements.

Marketing information is retained until consent is withdrawn.

Other personal data is retained only for as long as necessary to fulfil the purpose for which it was collected.

Your rights

Under applicable data protection law, you have the right to request access to personal information held by Cloth & Clover, to request correction or deletion of that information, to restrict processing in certain circumstances and to object to direct marketing.

Requests may be made by contacting enquiries@clothandclover.com.

If you believe that personal data has been handled improperly, you have the right to lodge a complaint with the Information Commissioner’s Office at www.ico.org.uk (http://www.ico.org.uk).

Security

Cloth & Clover implements appropriate technical and organisational measures to protect personal information against unauthorised access, misuse, alteration or loss.

Changes to this policy

This Privacy Policy may be updated from time to time. The most current version will always be available on the website.

Effective date: February 2026.