Privacy Policy

1. Introduction

This Privacy Policy explains how Fashion Business Collective Ltd ("we", "us", "our") collects, uses, stores, and shares your personal data when you use our website at fashion.business and our related services.

Fashion Business Collective Ltd is registered in England and Wales. Our registered office is at 124 City Road, London, EC1V 2NX.

We are committed to protecting your privacy and handling your data in an open and transparent manner. This policy should be read alongside our Terms of Service.

2. Data Controller

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the data controller is:

If you have any questions about this Privacy Policy or our data practices, please contact us.

3. Information We Collect

3.1 Information You Provide

We collect information that you voluntarily provide when using our services, including:

• Account registration details (name, email address, company name, job title)
• Business contact information
• Communication preferences
• Correspondence with our team
• Event registration and attendance information
• Membership and subscription details
• Payment information (processed securely via our payment provider)

3.2 Information Collected Automatically

When you use our services, we automatically collect certain technical information:

• IP address and approximate location
• Browser type and version
• Device information
• Pages visited and features used
• Date and time of access

4. How We Use Your Information

We use your personal data for the following purposes:

• To provide and maintain our services, including research, reports, and events
• To process your requests and respond to enquiries
• To improve and develop our services
• To communicate with you about service updates, events, and relevant information
• To send promotional communications (with your consent)
• To comply with legal obligations
• To protect against fraudulent or unlawful activity

5. Legal Basis for Processing

We process your personal data on the following legal grounds under UK GDPR:

• Contractual necessity: Processing necessary to perform our contract with you
• Legitimate interests: Processing necessary for our legitimate business interests, such as improving our services and fraud prevention
• Consent: Where you have given explicit consent for specific processing activities
• Legal obligation: Processing necessary to comply with applicable laws

6. Data Sharing and Disclosure

6.1 We Do Not Sell Your Data

We do not sell, rent, or trade your personal data to third parties for their marketing purposes.

6.2 Sharing Across Our Brands and Partners

• Other brands operated by Fashion Business Collective Ltd - including id.codes and SureTariff
• Our authorised representatives - employees and contractors working on our behalf under appropriate confidentiality agreements
• Delivery partners - independent companies that represent one or more of our brands and provide implementation and client account management, often within a specific industry segment or region, under partner agreements that specifically require them to keep your data confidential. A delivery partner is only given access to the data relevant to the clients and enquiries they handle - for example, a partner responsible for one region would not have access to another region's client data - and only to the extent required to perform their services

This shared access enables us to provide integrated services across our brands and services and deliver enhanced value to our users. Everyone with access to your data is bound by appropriate confidentiality and data protection obligations.

6.3 Other Disclosures

We may also disclose your data:

• To comply with legal obligations or respond to lawful requests from authorities
• To protect our rights, privacy, safety, or property
• In connection with a merger, acquisition, or sale of assets (with notice to you)
• To service providers who assist in operating our platform (e.g., cloud hosting, analytics, payment processing)

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Access controls and authentication mechanisms
• Regular security assessments
• Staff training on data protection

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements.

Account information and service data is typically retained for the duration of your account plus six years thereafter for legal and regulatory compliance.

9. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Right of access - to obtain a copy of your personal data
• Right to rectification - to have inaccurate data corrected
• Right to erasure - to have your data deleted in certain circumstances
• Right to restriction - to limit how we use your data
• Right to data portability - to receive your data in a structured format
• Right to object - to object to processing based on legitimate interests
• Right to withdraw consent - where processing is based on consent

To exercise any of these rights, please contact us. We will respond to your request within one month.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data protection rights have been violated.

10. International Data Transfers

Your data may be transferred to and processed in countries outside the United Kingdom. Where such transfers occur, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the relevant authorities, to protect your personal data.

11. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience on our website. Essential cookies are required for site functionality. You can control cookie settings through your browser preferences. For detailed information about the cookies we use and how to manage your preferences, please see our Cookie Policy.

12. Third-Party Services

We use third-party services including payment processors (such as Stripe) and email providers for communications. These services have their own privacy policies governing their use of your data.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on our website with an updated "Last Updated" date. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: