Policies
Privacy
We ask for measurements. That is a more intimate thing to hand over than an email address, and it deserves a plainer explanation than most policies give. Here is everything we hold, why we hold it, how long for, and how to take it back.
The short version
- You can browse, and be measured, without giving us your name.
- We keep anonymous measurements to improve our patterns. They are not linked to you.
- If you make an account, we keep your measurements because you asked us to, and you can download or delete them whenever you like.
- Order details are kept for about 12 months, then removed automatically.
- We do not sell anything to anybody, and we do not run advertising trackers.
Three kinds of record, kept apart
It matters which of these a measurement is in, so they are described separately. They are also kept separately in the database, with no key joining the first to the others.
One — the anonymous pattern record
When someone uses the fitting tool, we may keep the measurements and how confident the tool was, with no name, no email and no order attached. This is what tells us whether our blocks actually match the people who wear them — whether our idea of a waist is anyone's waist. It is the difference between a house that learns and one that keeps guessing.
These records are kept indefinitely, because their whole value is in accumulating. They cannot be traced back to you — which also means we cannot pick yours out to delete on request, as there is nothing in them that says which ones are yours.
Two — your account, if you choose to have one
You never need an account to buy anything. If you make one, we store your email address, a hash of your password (never the password itself), your name if you give it, and any fit profile you save.
We keep it because you asked us to, and only for as long as you want us to. Under your settings you can download everything we hold in one file, or close the account, which deletes it.
Three — your order
To make and send a garment we need your name, address, email and the measurements it was cut to. Because each piece is cut individually, those measurements belong to the piece rather than to the order — two pieces bought together can be cut to different numbers. We keep that for about 12 months after the order, then it is deleted automatically on a schedule — not when someone remembers to.
If you close your account, orders already placed are kept for the rest of that period, because a garment may still be in the atelier and because we have to keep basic records of what we sold. They are no longer connected to your account.
What we send you when you order
Every piece is cut, so before anything is made we write to you with the measurements that piece will be cut to — each one marked as either our block for the size you chose or a number you gave us yourself. This is what a tailor does when they read the numbers back to you, and it exists so that a mistake is caught before the cloth is cut rather than after the garment arrives.
Those measurements are in the email itself. We think that is the right trade: you can check them without signing in anywhere, which is the point of checking them at all. But it is worth saying plainly that email is not encrypted the whole way to your inbox, so if you would rather we did not put them there, tell us and we will send a link to your order instead.
Nothing is cut for two working days, so there is time to correct anything.
Payment
Your measurements are never sent to our payment processor. Stripe receives an amount, an email address and a reference; the measurements stay on our own server. There is no reason for a payment company's records to hold anyone's body.
Card details never reach us. Checkout is handled by Stripe, who take the payment directly; we receive a confirmation, an amount and an email address. Stripe's own policy covers what they hold.
The check on the registration form
The registration and password-reset forms carry a check that tells a person apart from a script. Two parts of it happen entirely here and involve nobody else: a field you never see, and a note of how long the form was open before it was sent. Neither leaves this server.
The third part is Cloudflare Turnstile, and it does involve someone else. Solving it sends Cloudflare your IP address and how you interacted with the challenge, so that they can tell us whether you appear to be a person. They are not told your name, your email address, your password or anything you have measured — the check runs before any of that is looked at, and the only thing that comes back to us is yes or no.
Turnstile was chosen over the more familiar alternatives for one reason: it does not build a profile of the person solving it, and it does not follow you afterwards. Cloudflare's privacy policy covers what they do with it.
It needs JavaScript. If yours is switched off you will not be able to complete it — write to us and we will set the account up by hand rather than leave you unable to order.
Being written to
An account on its own does not put you on a list. There is a tick box when you register — never pre-ticked — and if you tick it we record that you did and the date you did it, because a consent that cannot be evidenced is not worth having.
If you tick it, we write to you when something new is cut and about anything we keep for people who already own a piece. Nothing else, and never from anyone but us: your address is not sold, rented or passed on.
You can stop it in one click, in Settings. Withdrawing clears the record of consent along with the permission — there is no longer anything to evidence.
This is separate from the emails about your own orders. Confirmation of a purchase, a question from the atelier about what it is cutting, a password reset: those are part of the transaction and are sent whether or not you have ticked anything.
We send transactional email only — confirmations, verification links, password resets, and news of your order. If you ever get marketing from us that you did not ask for, that is a mistake and we would like to know.
What we do not do
- No advertising trackers and no third-party analytics scripts.
- No selling, renting or sharing of personal information.
- No measurements in logs, and none in any analytics tool.
- No storing of your IP address in readable form. Where we need to recognise a device or limit repeated attempts, we store a one-way hash instead.
Your choices
- Change your mind without leaving anything behind. If you start a checkout and do not finish it, the measurements recorded for it are deleted within two days. An abandoned bag is not a record we have any business keeping.
- Be measured without an account. The fitting tool keeps your profile in your own browser by default. Nothing is sent to us unless you save it or place an order.
- Take a copy. Download everything we hold about you, as a file, at any time.
- Delete it. Closing your account removes it and your saved measurements.
- Ask us anything. If you want to know what we hold, or you think something is wrong, write to us and a person will answer.
If something goes wrong
If we ever discover that personal information has been exposed, we will tell the people affected and say what we know, including the parts that reflect badly on us. A policy that only describes the good days is not worth much.
Changes
If this page changes in a way that matters, we will say so rather than quietly editing it.
Questions about any of this can go to the address on our contact page.