Privacy policy

1. Introduction & Acceptance of Policy

This Privacy Policy governs all personal data collection, storage, usage, sharing, protection and deletion practices operated by Never Fully Dressed via our Shopify-powered website https://neverfullydressed.shop. The policy complies with Shopify platform data standards, the EU General Data Protection Regulation (GDPR), UK GDPR, California Consumer Privacy Act (CCPA/CPRA), and global cross-border e-commerce privacy laws.
The terms “we”, “us”, “our” refer to Never Fully Dressed operating the store at https://neverfullydressed.shop. The terms “you”, “your”, “customer”, “visitor” refer to any person browsing our site, creating an account, purchasing swimwear, dresses, tops, bottoms, sleepwear, footwear, submitting contact forms, subscribing to marketing emails or communicating with our support team.
By accessing our website, completing checkout, submitting personal details or contacting us via info@neverfullydressed.shop, you fully acknowledge reading, understanding and agreeing to all clauses within this Privacy Policy. If you disagree with any provision, you must cease all use of our website and services immediately.

2. Personal Information We Collect From You

We only gather information necessary to operate our apparel retail business and fulfill customer orders for swimwear, daily wear, loungewear and shoes. Collected data falls into two categories: voluntarily provided information and automatically collected technical data.

2.1 Voluntarily Submitted Personal Data

  • Full legal name, billing address, shipping delivery address, postal code, country and contact phone number for order fulfillment and logistics delivery
  • Valid email address used for account registration, order confirmation, shipping tracking, return/refund communication and marketing newsletter subscription
  • Payment-related identifiers processed securely by third-party payment gateways (we do not store full credit card, debit card or bank account numbers on our Shopify server)
  • Customer service correspondence content including return request photos, sizing consultation messages, defect product images sent to info@neverfullydressed.shop
  • Voluntarily shared preferences: size preferences for swimwear, dresses, footwear, favorite clothing styles, feedback and product review content posted on our store
  • Account login credentials including username and encrypted password for registered customer accounts

2.2 Automatically Captured Technical & Behavioral Data

  • Device information: device model, operating system, browser type, unique device identifier, screen resolution
  • Website access logs: IP address, page visit timestamps, viewed product pages (swimwear collections, dress lines, shoe categories, pajama sets), click paths, search keywords, cart addition records, checkout abandonment data
  • Cookie, pixel and tracking tag data stored on your browser to record session activity, marketing attribution and website performance metrics
  • Location data derived from IP address for regional shipping rule configuration, tax calculation and localized promotional offers

3. Legitimate Purposes For Using Your Personal Data

We process collected personal information only for lawful business purposes as listed below:
  1. Complete order processing: confirm purchases, arrange shipment of swimwear, clothing and footwear, send tracking updates, handle delivery exceptions and coordinate returns & refunds per our Return & Refund Policy
  2. Customer account management: authenticate logins, save size and shopping preferences, track order history for repeat purchases
  3. Customer support resolution: respond to all email inquiries sent to info@neverfullydressed.shop regarding sizing, product defects, shipping delays, exchange requests and policy questions
  4. Website optimization: analyze browsing behavior to improve page layout, category navigation for swimwear, dresses, tops and footwear, fix checkout errors and enhance overall shopping experience on https://neverfullydressed.shop
  5. Fraud prevention & payment security: verify transaction authenticity, block suspicious checkout activity and mitigate financial loss for both customers and our store
  6. Marketing communications (with explicit opt-in consent): send new arrival alerts for swimwear and seasonal apparel, exclusive discount promotions, styling guides and store updates via email; you retain permanent right to unsubscribe at any time
  7. Legal compliance: retain transaction records to satisfy tax, accounting, consumer protection and cross-border trade legal obligations
  8. Dispute resolution: use order and contact records to resolve customer disputes, return conflicts and third-party claim matters

4. Third Parties Authorized To Receive Your Personal Data

We never sell, rent or trade your personal identifiable information to unrelated advertising companies, retail brands or data brokers for independent commercial gain. We share limited necessary data only with vetted service providers bound by strict data protection contracts:
  1. Shopify Platform: Our entire store infrastructure runs on Shopify; Shopify processes order, account and analytics data per Shopify’s official privacy standards to host https://neverfullydressed.shop, power checkout and store customer records.
  2. Payment Processors: Secure third-party payment gateways handling credit card, digital wallet and online payment transactions; all payment data transmission uses end-to-end encryption.
  3. Logistics & Fulfillment Partners: Courier and warehouse providers receiving delivery name, address and order details to ship swimwear, clothing and footwear to your designated shipping location.
  4. Customer Service & Email Tools: Platforms managing incoming emails sent to info@neverfullydressed.shop, return request tickets and automated order notification delivery.
  5. Analytics & Marketing Service Providers: Cookie, pixel and tracking tool vendors collecting anonymized website traffic data to measure campaign performance; these providers cannot extract full personal identifiers without your separate consent.
  6. Legal Authorities: We may disclose your personal data if legally required by court orders, government regulatory requests, tax audit requirements or to protect our legal rights, customer safety and store assets.
  7. Business Succession Transferees: In the event of brand merger, acquisition or full store asset sale, customer data may transfer to the successor entity; we will publish advance website notice of such data transfer before completion.

5. Cookies, Tracking Pixels & Consent Controls

Our website https://neverfullydressed.shop utilizes cookies, HTML local storage and advertising pixels to distinguish returning visitors, retain cart items and measure marketing effectiveness:
  • Necessary Functional Cookies: Mandatory for basic store operation including account login, cart storage, checkout processing and multi-page navigation; these cannot be disabled without breaking core website functionality.
  • Analytics Cookies: Track anonymous page interaction data to optimize our swimwear, dress and footwear product pages; you may opt out via your browser privacy settings.
  • Marketing Advertising Cookies: Deployed only with your explicit consent to serve personalized apparel promotions and track ad conversion; you can withdraw consent at any time via website cookie pop-up controls or browser configuration.
You may clear all stored cookies and disable future tracking through your web browser’s privacy menu at any point while browsing our store.

6. Data Retention Period

We retain your personal data only for the minimum duration required to fulfill the collection purpose, following these fixed retention rules:
  1. Completed Order Transaction Data: Full order records (shipping address, purchased swimwear/clothing/footwear items, payment timestamps) stored for 7 years to comply with tax, accounting and consumer dispute legal requirements.
  2. Registered Customer Account Data: Account name, email, saved shipping addresses and size preferences retained until you submit a formal account deletion request via info@neverfullydressed.shop.
  3. Marketing Newsletter Contact Data: Email addresses kept for promotional messaging only while your subscription status remains active; unsubscribed marketing emails are marked inactive and purged from mailing lists within 30 calendar days of opt-out.
  4. Customer Service Correspondence: Emails, return photos and support tickets sent to info@neverfullydressed.shop stored for 3 years after case closure for dispute reference.
  5. Automatically Collected Anonymous Analytics Data: De-identified browsing logs retained for maximum 12 months before automated full deletion.
After the applicable retention window expires, all personal data is permanently erased or fully anonymized so it can no longer identify any individual customer.

7. Your Legal Privacy Rights

If you are a resident of the European Economic Area, United Kingdom, California or other regions with strict data protection regulations, you hold the following enforceable rights, which you may exercise free of charge by submitting a written request to info@neverfullydressed.shop:
  1. Right of Access: Request a full copy of all personal data we store linked to your email or customer account, including all swimwear, clothing and footwear order history.
  2. Right to Rectification: Request correction of inaccurate personal details such as misspelled shipping addresses, incorrect contact numbers or wrong saved sizing preferences.
  3. Right to Erasure (“Right To Be Forgotten”): Submit a request to fully delete your customer account, all stored personal information and order records where no mandatory legal retention obligation applies.
  4. Right to Restrict Processing: Request temporary suspension of data usage for marketing or analytics purposes while we verify data accuracy or resolve your privacy claim.
  5. Right to Data Portability: Receive your order and account data in a standard machine-readable digital format to transfer to another retail merchant.
  6. Right to Object: Opt out of all marketing email communications at any time, and object to data processing based on our legitimate business interest.
  7. CCPA Specific Consumer Rights (California Residents): Request disclosure of categories of personal data collected, request full deletion of records, opt out of any third-party data sharing for advertising purposes, and avoid discrimination for exercising privacy rights.
All formal privacy right requests sent to info@neverfullydressed.shop will receive a confirmation email within 5 working days, and we will complete all requested actions within 30 calendar days of verifying your identity to prevent unauthorized data access.

8. Security Measures To Protect Your Personal Data

We implement industry-standard technical and organizational safeguards to prevent unauthorized access, loss, alteration or leakage of your personal information:
  • All website traffic between your device and https://neverfullydressed.shop uses SSL/TLS end-to-end encryption
  • Shopify’s secure cloud server infrastructure stores all customer data with regular automated security backups
  • Internal data access restricted exclusively to authorized customer service staff handling order and return inquiries
  • Encrypted password storage for all registered customer accounts; plaintext passwords are never logged or saved
  • Regular security audits, malware scanning and checkout fraud monitoring to block data breach risks
  • Restricted third-party data access via signed data processing agreements mandating equivalent data security standards
No internet transmission or electronic storage method can guarantee absolute 100% security, but we continuously update our protection protocols to mitigate data vulnerability risks to the maximum commercially feasible extent.

9. Children’s Privacy Protection

Our online store selling swimwear, dresses, tops, pants, sleepwear and footwear is intended exclusively for users aged 13 years or older. We do not knowingly collect personal identifiable information from minors under the age of 13. If you are a parent or legal guardian and discover your child has submitted personal data to our website without your consent, immediately contact us at info@neverfullydressed.shop to request full deletion of all child-related records. We will complete data removal within 7 working days upon receiving verified parental notification.

10. Cross-Border Data Transfers

Customer personal data collected via https://neverfullydressed.shop may be stored and processed in server locations outside your resident country, including Canada, the United States and European Union data centers operated by Shopify and our authorized service partners. All cross-border data transfers comply with GDPR standard contractual clauses and international data protection legal requirements, ensuring consistent privacy protection standards regardless of data storage jurisdiction.

11. Policy Updates & Modifications

Never Fully Dressed reserves the right to revise, update or amend this Privacy Policy to align with new global data protection laws, Shopify platform rule changes or business operational adjustments. Any updated policy version will be published publicly on the dedicated Privacy Policy page of https://neverfullydressed.shop with a clear “Last Updated” date displayed at the top of the page. Continued website browsing, account usage and purchases after policy publication constitutes your acceptance of all revised clauses. We encourage customers to review this page periodically for privacy practice updates.

12. Contact Information For All Privacy Inquiries

For any questions, concerns, formal data subject requests, privacy complaints or clarification about how we collect and use your personal information while shopping for swimwear, dresses, tops, T-shirts, tanks, shirts, shorts, skirts, pants, sleepwear and footwear on our store, our designated privacy contact channel is:

Official Website: https://neverfullydressed.shop

Privacy & Customer Support Email: info@neverfullydressed.shop
We will respond to all privacy-related email submissions within 24 working hours from Monday through Friday; inquiries received on weekends or official public holidays will receive a formal reply on the next standard business day.