Policy
Privacy notice
What is collected, why, how long it is kept and what you can do about it. The short version: photographs of garments are processed to produce your readings, they are never used to train models, and you can delete everything yourself at any time.
Last updated 1 September 2026
Other policies
Who is responsible
The company that operates this service is the data controller for the personal data described here. Its registered name and address are on the legal information page.
For anything about your data, write to support@darcyclothinguk.shop or telephone +44 1273 471586.
This notice is written for the UK GDPR and the Data Protection Act 2018. Where the EU GDPR applies to you it is applied on the same terms. Section 11 sets out the additional rights of California residents.
What is collected
| Data | Why | Legal basis |
|---|---|---|
| Email address and password hash | To create and secure your account | Performance of a contract |
| Photographs you upload, and the readings produced | To produce, store and re-open your readings | Performance of a contract |
| Plan, billing period, renewal dates, invoices, payment status | To run your subscription and meet tax obligations | Performance of a contract; legal obligation for tax records |
| Server logs: IP address, request time, user agent, error traces | Security, fraud prevention and fixing faults | Legitimate interests in keeping the service working |
| Optional usage measurement | To see which parts of the reading tools are used | Consent, given through the cookie banner |
| Emails you send us and our replies | To answer you and to keep a record of complaints | Performance of a contract; legitimate interests |
Card numbers are never collected by us. They go directly to an external payment processor certified to PCI DSS Level 1. We receive only the last four digits, the card brand, the expiry date and whether the payment succeeded.
We do not seek special category data. Photographs must not contain people, and uploads that appear to contain a person are refused before any reading is produced.
Your photographs, specifically
Photographs you upload are not used to train or fine-tune any model, ours or anyone else’s. They are not sold, licensed, published or shared with third parties for that purpose, and no arrangement we have with any supplier permits it.
A photograph is sent to a feature-recognition service to identify which construction features are visible in it. That supplier processes the image on our instructions, retains it only for as long as the request takes, and is contractually prohibited from using it for training or for any purpose of its own.
The dating itself never leaves your browser. The intervals come from a reference table published on this site, and the overlap and the clash detection are computed on your device.
You can delete any photograph and its reading at any time from the reading room, and everything at once from the billing page. Deletion removes the file from storage; backups containing it are overwritten within 30 days.
How long things are kept
| What | Kept for |
|---|---|
| Photographs and readings, Free and Era plans | 90 days from the date the reading was produced |
| Photographs and readings, Archive plan | While the collection record exists; 90 days after you delete it or close the account |
| Account record | Until you close the account, then 30 days |
| Invoices and tax records | 6 years after the end of the accounting period, as tax law requires |
| Server logs | 90 days |
| Support correspondence | 2 years from the last message |
| Cookie choice | 12 months, then you are asked again |
Transfers outside the UK
Some of the suppliers above process data outside the United Kingdom. Where they do, the transfer is covered either by UK adequacy regulations, or by the International Data Transfer Agreement (IDTA), or the International Data Transfer Addendum to the EU Standard Contractual Clauses, issued by the Information Commissioner under section 119A of the Data Protection Act 2018.
Each transfer is subject to a transfer risk assessment, kept under review. You can ask us for a copy of the mechanism relied on for any particular supplier at support@darcyclothinguk.shop.
Security
The whole site is served over HTTPS. Passwords are stored as salted hashes and are never stored or transmitted in a readable form. Uploads are held in access-controlled storage and are reachable only through short-lived signed links tied to your account.
Access to production data is limited to the people who need it, requires multi-factor authentication and is logged. Card details are never on our systems.
If a breach is likely to result in a risk to your rights, we report it to the Information Commissioner within 72 hours and tell you without undue delay where the risk is high.
Your rights
You have the right to:
- ask what we hold about you and get a copy;
- have inaccurate data corrected;
- have data erased, where we have no overriding obligation to keep it;
- restrict how we use it while a question about it is resolved;
- receive the data you gave us in a portable form;
- object to processing we carry out on the basis of legitimate interests;
- withdraw consent at any time, where we rely on consent, without affecting what was done before; and
- not be subject to a decision with legal or similarly significant effects taken solely by automated means. We take no such decisions.
Write to support@darcyclothinguk.shop. We answer within one month and will say so if a request is complex enough to need longer. There is no charge.
Complaining to the regulator
You have the right to complain to the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection.
The ICO can be reached at ico.org.uk/make-a-complaint or on 0303 123 1113. You do not have to raise it with us first, though we would like the chance to put it right.
If you are in the EEA, you may also complain to the supervisory authority in the country you live in.
If you live in California
Under the California Consumer Privacy Act, as amended, you may ask what personal information has been collected about you in the past 12 months and where it came from, ask for it to be deleted, ask for inaccurate information to be corrected, and limit the use of sensitive personal information. We do not collect sensitive personal information as that Act defines it.
We do not sell personal information and we do not share it for cross-context behavioural advertising, as those terms are defined in that Act, and we have not done so in the past 12 months. There is therefore nothing to opt out of, and no financial incentive is offered for your data.
You will not be treated differently for exercising any of these rights. Write to support@darcyclothinguk.shop.
Children
The service is for people aged 18 or over. It is not directed at children and we do not knowingly collect data from anyone under 18. If you believe a child has given us data, tell us and it will be deleted.
Changes to this notice
If this notice changes in a way that affects you, we will tell you by email before the change takes effect and the date at the top of the page will change. Previous versions are available on request.