Privacy Policy — World Citizen Style
1. Who we are
World Citizen Ventures Ltd ("we", "us", "our") sells garments online at worldcitizenstyle.com to customers in the United Kingdom and Europe. We are the data controller for the personal data collected through our website.
This policy explains what personal data we collect when you visit our website, buy from us or contact us, how we use it, and the rights you have. It applies to customers and visitors in the United Kingdom, covered by the UK GDPR, and in the European Economic Area (EEA), covered by the EU GDPR.
| Address | 124 City Road, London, EC1V 2NX, United Kingdom |
| hello@worldcitizenstyle.com | |
| Phone | +44 7721 912876 |
We have not appointed a data protection officer. Please send any privacy question or request to the email address above.
2. The personal data we collect
We collect only the data we need to run our shop, deliver your order and look after you as a customer.
| Category | What it includes | Where it comes from |
|---|---|---|
| Identity and contact | Name, email address, phone number, billing and delivery addresses | You, when you order, open an account or contact us |
| Order | Garments bought, sizes, colours, order value, delivery choices, returns and refunds | You and our order system |
| Payment | Payment method, transaction reference, partial card details such as the last four digits | Our payment providers. We never see or store your full card number |
| Account | Login email, saved addresses, order history, preferences | You, when you create an account |
| Communications | Emails, messages, enquiry forms, reviews and wholesale, wedding or event enquiries | You |
| Marketing | Your marketing preferences and how you respond to our emails | You and our email provider |
| Technical and usage | IP address, device and browser type, pages viewed, items added to basket, approximate location | Cookies and similar technologies on your device |
We do not ask for special category data, such as health information, religious beliefs or ethnic origin, and we ask you not to send it to us.
If you give us someone else's details, for example a gift recipient's address, please make sure they are happy for you to do so.
3. How we use your data and our lawful bases
We use your personal data only where the UK GDPR and the EU GDPR give us a lawful basis to do so.
| Purpose | Data used | Lawful basis |
|---|---|---|
| Taking and fulfilling your order, including payment, delivery, returns and refunds | Identity and contact, order, payment | Performance of our contract with you |
| Managing your customer account | Identity and contact, account, order | Performance of our contract with you |
| Answering enquiries, including wholesale, wedding and event enquiries | Identity and contact, communications | Steps taken at your request before a contract; our legitimate interest in responding to you |
| Keeping tax, accounting and customs records | Identity and contact, order, payment | Legal obligation |
| Preventing fraud and keeping our site secure | Order, payment, technical and usage | Our legitimate interest in protecting our business and customers |
| Sending marketing emails or messages | Identity and contact, marketing | Your consent, or our legitimate interest where the law lets us contact existing customers about similar products |
| Understanding how our site is used and improving it | Technical and usage | Your consent, where cookies are used; otherwise our legitimate interest in improving our shop |
| Showing or measuring advertising | Technical and usage, marketing | Your consent |
| Handling complaints and legal claims | Any relevant data | Legal obligation; our legitimate interest in defending our rights |
Where we rely on legitimate interests, we have weighed them against your rights and you can object at any time (see section 9). Where we rely on consent, you can withdraw it at any time without affecting earlier use.
If you do not give us the data we need for an order, such as a delivery address, we will not be able to supply it.
Automated checks. Our platform runs automated fraud checks on orders. We do not make decisions about you that have legal or similarly significant effects by automated means alone; a person reviews any order flagged as high risk before it is cancelled.
4. Who we share your data with
We never sell your personal data. We share it only with the providers below, who need it to help us run our shop, and with authorities where the law requires.
| Recipient | Why they receive data |
|---|---|
| Shopify International Limited (Ireland) and its group companies | Hosts our online shop and processes orders, accounts and site data on our behalf as our processor |
| Payment providers, such as Shopify Payments and the other payment methods shown at checkout | Take payment and carry out fraud and security checks. They act as independent controllers of your payment details |
| Delivery and logistics partners, such as postal services and couriers | Deliver your order and send you tracking updates |
| Email and marketing providers | Send order emails and, where you have agreed, marketing |
| Analytics and advertising providers | Measure site use and advertising, only where you have consented to those cookies |
| Providers of apps we add to our shop | Provide features such as product reviews and customer support |
| Professional advisers, such as accountants, lawyers and insurers | Advise us and help us meet our legal duties |
| HMRC, customs authorities, regulators, courts and the police | Where we are legally required, including customs declarations for orders sent to the EU |
| A buyer or successor of our business | If we sell or reorganise the business, under the same protections as this policy |
Our processors may use your data only on our instructions and must keep it secure.
Shop Pay and other Shopify services. If you choose to use Shopify's own consumer services, such as Shop Pay or the Shop app, Shopify is the controller of the data you give it and Shopify's privacy policy applies.
5. International transfers
Some of our providers store or access personal data outside the UK and the EEA, including in Canada and the United States, and we make sure it stays protected when they do.
We are based in the UK. If you are in the EEA, your data is transferred to us in the UK, which the European Commission recognises as providing adequate protection.
When we send an order from the UK to a country in the EU, we share your name, delivery address, contact details and order contents with the couriers and customs authorities that handle it, so they can deliver it and collect any import VAT and duties.
When data is sent to any other country, we rely on one of these safeguards:
- an adequacy decision or adequacy regulations covering that country, such as those for Canada;
- the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, for data covered by the UK GDPR;
- the European Commission's Standard Contractual Clauses, for data covered by the EU GDPR;
- certification under the EU-US Data Privacy Framework and its UK extension, where the provider is certified.
You can ask us for more detail about the safeguard used for a particular transfer by emailing hello@worldcitizenstyle.com.
6. Cookies and similar technologies
We set essential cookies automatically and all other cookies only if you agree through our cookie banner.
| Type | What it does | Needs your consent |
|---|---|---|
| Essential | Keeps your basket, lets you check out and log in, remembers your cookie choice, protects against fraud | No |
| Preferences | Remembers choices such as your country, currency and language | Yes |
| Analytics | Shows us how visitors find and use the site so we can improve it | Yes |
| Marketing | Measures our advertising and shows you relevant ads on other sites | Yes |
You can change or withdraw your choice at any time using the cookie settings link at the bottom of every page. You can also block or delete cookies in your browser settings, although parts of the site, such as the checkout, may then not work.
Most cookies on our site are set by Shopify. Shopify publishes a list of the cookies its shops use in its cookie policy.
7. Marketing
We send you marketing only if you have signed up for it, or if you have bought from us and the law allows us to tell you about similar products.
Every marketing message includes an unsubscribe link, and you were or will be offered the chance to opt out when we collect your details. You can also opt out at any time by emailing hello@worldcitizenstyle.com.
Opting out of marketing does not stop service messages about an order, such as confirmations and delivery updates.
8. How long we keep your data
We keep personal data only for as long as we need it for the purpose it was collected, and then delete or anonymise it.
| Data | How long we keep it |
|---|---|
| Order, invoice and payment records | 6 years after the end of the financial year of the order, to meet tax and accounting law |
| Customer account | Until you ask us to close it, or after 2 years without a login or order |
| Enquiries and customer service messages | 2 years after the enquiry is closed |
| Marketing contact details | Until you unsubscribe; we then keep your email on a suppression list so we do not contact you again |
| Abandoned checkout details | 3 months |
| Cookie and analytics data | Up to 14 months, depending on the cookie |
| Records of privacy requests and complaints | 3 years after the request is closed |
We may keep data longer where we need it to deal with a dispute or legal claim.
9. Your rights
You have the rights below over your personal data under the UK GDPR and the EU GDPR, and using them is free.
| Right | What it means |
|---|---|
| Access | Ask for a copy of the personal data we hold about you |
| Rectification | Ask us to correct data that is wrong or incomplete |
| Erasure | Ask us to delete your data where we no longer need it or have no lawful reason to keep it |
| Restriction | Ask us to pause our use of your data in certain cases |
| Portability | Ask for data you gave us in a commonly used, machine-readable format, or for it to be sent to another provider |
| Objection | Object to use based on our legitimate interests, and to direct marketing at any time |
| Withdraw consent | Withdraw any consent you have given, at any time |
| Automated decisions | Not be subject to a decision made solely by automated means that has a legal or similarly significant effect on you |
To use any right, email hello@worldcitizenstyle.com or write to us at the address in section 1. We may ask for proof of identity before we act.
We reply within one month. If a request is complex or you have made several, the law lets us extend this by up to two further months, and we will tell you if we need to.
Some rights apply only in certain circumstances. For example, we must keep order records for tax purposes even if you ask us to delete them.
10. Security, children and other websites
Security. We protect your data with measures suited to the risk, including encrypted connections (HTTPS) across our site, payment processing by PCI DSS compliant providers, and access limited to people who need it. No online service is completely secure, so if we become aware of a breach that is likely to put you at high risk, we will tell you and the relevant regulator without undue delay.
Children. Our shop is intended for adults. We do not knowingly collect personal data from anyone under 16. If you believe a child has given us their details, please contact us and we will delete them.
Other websites. Our site may link to other websites, such as social media or our brand partners. We are not responsible for how they handle your data, so please read their privacy policies.
11. Complaints, changes and contact
Complaints to us. If you are unhappy with how we have handled your personal data, please email hello@worldcitizenstyle.com with the subject line "Data protection complaint". We will acknowledge your complaint within 30 days, look into it without undue delay and tell you the outcome.
Complaints to a regulator. You also have the right to complain to a data protection regulator.
In the UK: the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, telephone 0303 123 1113, ico.org.uk/make-a-complaint. The ICO will usually expect you to have complained to us first.
In the EEA: the supervisory authority in the country where you live or work, or where you believe the problem happened. The European Data Protection Board keeps a list of authorities.
Changes to this policy. We may update this policy from time to time. The latest version is always on this page, and we will tell you by email or a notice on our site about any change that significantly affects you.
Contact. For any question about this policy, email hello@worldcitizenstyle.com or write to World Citizen Ventures, 124 City Road, London, EC1V 2NX, United Kingdom.
Last updated: 9 October 2026