top of page

Privacy Policy

Jane Amor · British Bridal Couture

Last Updated: 02 July 2026

 

At Jane Amor, we are committed to protecting your privacy and ensuring you have a positive experience on our website and when interacting with our business. This Privacy Policy explains how we collect, use, protect, and share your personal data, and your rights in relation to that data.

1. Who We Are

Jane Amor is a British bridal couture house based in Folkestone, Kent, operated by Jana. We are the data controller for any personal data you provide to us. For any questions about this Privacy Policy or our data practices, you can contact us using the details in Section 12.

2. What Personal Data We Collect

We collect personal data in the following ways:

  • Direct Contact: When you enquire about our services, book a consultation, or contact us via the website, email, phone, or post, we collect your name, email address, phone number, and any other information you choose to share with us.

  • Consultations & Services: When you visit our boutique or have a virtual consultation, we collect information relevant to your bespoke gown, including measurements, design preferences, fabric choices, and special requirements (including accessibility needs). Payment information is collected securely through third-party payment processors.

  • Alterations & Repair Services: When you use our alterations or gown repair services, we collect your name, contact details, delivery/collection preferences, and detailed information about the gown and work required.

  • Website & Cookies: When you visit our website, we automatically collect information about your browsing activity through cookies and similar tracking technologies. This includes IP address, browser type, pages visited, and time spent on the site.

  • Marketing Communications: If you opt in to receive updates about new collections, special events, or promotions, we collect your email address and marketing preferences.

  • Reviews & Testimonials: If you provide a review or agree to share your wedding story, we collect your name, location, and the content you provide.

3. How We Use Your Personal Data

We use your personal data for the following purposes:

  • Service Delivery: Processing your orders, fulfilling your bespoke gown commissions, managing alterations and repairs, coordinating consultations, and providing customer support.

  • Legal Compliance: Complying with UK law, including contract law, tax obligations, and legal requests.

  • Communication: Responding to your enquiries, confirming orders, providing updates on your gown, and following up after your wedding.

  • Marketing: Sending you information about new collections, upcoming events, and special offers — only with your consent.

  • Website Improvement: Analysing website traffic and user behaviour to improve our website, services, and customer experience.

  • Safety & Fraud Prevention: Protecting against fraud, unauthorised transactions, and other harmful activities.

  • Legitimate Business Interests: Managing our business, improving our operations, and understanding how customers interact with our brand.

 

4. Legal Basis for Processing

Under UK GDPR, we only process your personal data when we have a lawful basis to do so. Our lawful bases are:

  • Contract: Processing is necessary to fulfil your bespoke gown commission, alterations order, or other service agreement.

  • Consent: You have given us explicit consent to process your data for marketing communications or photography/testimonial use.

  • Legal Obligation: We are required by UK law to collect and process certain data (e.g., tax records).

  • Legitimate Interests: We have a legitimate business interest that is not overridden by your rights and interests (e.g., fraud prevention, website analytics).

5. Who We Share Your Data With

We do not sell or rent your personal data. However, we may share your data with:

  • Payment Processors: Secure third-party payment providers who process your payment information.

  • Email & Communication Services: Service providers who help us send emails and communications (with your consent for marketing emails).

  • Website Hosting & Analytics: Cloud hosting providers and analytics services that help us operate and improve our website.

  • Legal & Compliance: Law enforcement or regulatory bodies if required by law.

  • With Your Permission: If you agree to have your wedding story or photos featured on our website or social media, we may share this content.

All processors who access your data are bound by confidentiality agreements and are required to implement appropriate security measures.

6. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected:

  • Consultation Records: Retained for 3 years after your final consultation, unless you opt out earlier.

  • Order & Commission Data: Retained for 7 years for tax and contract purposes.

  • Alterations Records: Retained for 3 years after completion of the service.

  • Marketing List: Retained until you unsubscribe; we review inactive contacts every 12 months.

  • Website Cookies: Retained according to the cookie settings; see our Cookie Policy for details.

  • Payment Records: Retained for 7 years for tax compliance.

7. Cookies & Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your experience and gather analytics. These include:

  • Essential Cookies: Required for the website to function (e.g., login sessions).

  • Analytics Cookies: Help us understand how visitors use our website and identify areas for improvement.

  • Marketing Cookies: Used to deliver personalised content and track marketing campaigns.

You can control cookie settings through your browser. Disabling cookies may affect your ability to use certain features of our website.

8. International Data Transfers

Your personal data is primarily processed in the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place, such as standard contractual clauses or other GDPR-compliant mechanisms.

9. Security

We take the security of your personal data very seriously. We have implemented technical and organisational measures to protect your data against unauthorised access, loss, alteration, and misuse. These include:

  • Encrypted data transmission (HTTPS) on our website.

  • Secure payment processing through PCI-compliant providers.

  • Restricted access to personal data (staff access is on a need-to-know basis).

  • Regular security audits and staff training on data protection.

However, no system is entirely secure. If we become aware of a data breach affecting your personal data, we will notify you and relevant authorities in accordance with UK GDPR (within 72 hours of discovery).

10. Your Rights

You have the following rights under UK GDPR:

  • Right of Access: You can request a copy of the personal data we hold about you.

  • Right to Rectification: You can request that we correct inaccurate or incomplete data.

  • Right to Erasure: You can request that we delete your personal data (subject to certain exceptions, such as legal obligations).

  • Right to Restrict Processing: You can ask us to limit how we use your data while we verify its accuracy or lawfulness.

  • Right to Data Portability: You can request your data in a structured, machine-readable format and ask us to transfer it to another service provider.

  • Right to Object: You can object to processing based on legitimate interests or marketing communications.

  • Right to Withdraw Consent: If you have given us consent to process your data, you can withdraw it at any time.

  • Rights Related to Automated Decision-Making: You have the right to request human review of any decisions made about you based solely on automated processing.

To exercise any of these rights, please contact us using the details in Section 12. We will respond within 30 days (or up to 90 days for complex requests).

11. Children's Privacy

Our website and services are not intended for children under 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will take steps to delete it and notify parents or guardians.

12. Contact Us

If you have any questions about this Privacy Policy, our data practices, or to exercise your rights, please contact us:

If you are not satisfied with our response to your concerns, you also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's independent data protection authority, at https://ico.org.uk.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of significant changes by posting the updated policy on our website and updating the "Last Updated" date. Continued use of our services constitutes your acceptance of the updated Privacy Policy.

14. Intellectual Property

All content on our website, including but not limited to images, text, graphics, logos, and trademarks, is the property of Jane Amor or our licensors and is protected by copyright and trademark laws. You may not use any content on our website without our express written permission.

bottom of page