Privacy Policy

Last updated: June 2025

This Privacy Policy explains how NOIR London ("we", "us", "our") collects, uses and protects your personal data when you interact with our website (noirthebrand.co.uk) or contact us via our social media channels. We are committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

NOIR London is a luxury goods curator based in London, United Kingdom. For the purposes of UK GDPR, we are the data controller for the personal information collected via this website and our social media channels. To contact us about your data, please DM us at @official_noir_the_brand on Instagram.

2. What Data We Collect

We may collect the following categories of personal data:

• Contact and identity information — such as your name, email address, phone number or social media handle, provided when you enquire about a purchase.
• Transaction data — details of items you have enquired about or purchased.
• Delivery information — your shipping address when you place an order.
• Communication data — messages sent to us via Instagram, TikTok, or any other channel.
• Technical data — limited data collected automatically by our website, such as IP address and browser type, used for security and analytics purposes only.

We do not collect sensitive personal data (such as health data, ethnicity, or financial account details) through this website.

3. How We Use Your Data

We use your personal data for the following purposes:

• To respond to your enquiries and process your purchase.
• To fulfil and deliver orders, including communicating with you about shipping and handling.
• To comply with our legal obligations (e.g. financial record-keeping).
• To prevent fraud or misuse of our services.

We do not use your personal data for marketing purposes without your explicit consent, and we do not sell or share your data with third parties for their marketing purposes.

4. Legal Basis for Processing

We process your personal data on the following legal bases under UK GDPR:

• Contract performance — where processing is necessary to fulfil your order or respond to a pre-contractual enquiry.
• Legitimate interests — where we have a legitimate business interest that is not overridden by your rights (e.g. fraud prevention, security).
• Legal obligation — where we are required by law to process your data (e.g. tax records).

5. Data Sharing

We may share your personal data with the following third parties only where necessary:

• Delivery and logistics providers — to fulfil your order.
• Payment processors — if you pay online (e.g. Stripe or PayPal), your payment data is processed directly by them under their own privacy policies.
• Legal or regulatory authorities — where required by law.

6. International Transfers

We serve customers across the UK, Europe, UAE, and other regions. Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR.

7. Data Retention

We retain your personal data only for as long as necessary for the purposes described in this policy, or as required by law. Transaction records are generally retained for 6 years to comply with UK tax obligations. Enquiry data not resulting in a purchase is deleted within 12 months.

8. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data ("right to be forgotten") where applicable.
• Object to or restrict certain types of processing.
• Data portability — receive your data in a structured, machine-readable format.
• Withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, please contact us via Instagram DM at @official_noir_the_brand. We will respond within 30 days. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

9. Cookies

This website uses only essential technical cookies necessary for the site to function. We do not use tracking, advertising, or analytics cookies. No cookie consent banner is required.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The most current version will always be available at this URL. We will notify you of material changes where we have a means to contact you.