Privacy policy

This Privacy Policy explains how Rules Of Faith Ltd (registered as Rules Of Faith Limited, company number 15038993) uses personal data when you visit rulesoffaith.com, buy from us, join the mailing list, or access The Collective.

We are the data controller. Our registered office is Rougham, The Firs, Bowdon, Cheshire, WA14 2TN, United Kingdom. Email: hello@rulesoffaith.com.

UK data protection law (UK GDPR and the Data Protection Act 2018) applies. This notice is written for how we actually operate the shop — not as a generic template.

What we collect

Depending on how you use the site, we may process:

identity and contact details (name, email, phone, billing and delivery addresses);
order, payment-status, and fulfilment information (we do not store full card numbers — Shopify and the payment provider handle that);
account details if you create an account;
messages you send via the contact form or email;
newsletter signup details, if you subscribe;
The Collective profile details if you scan a garment chip and create a member profile;
device and usage data (IP address, browser, pages viewed, approximate location derived from IP); and
reviews you choose to submit via Judge.me.

Why we use it

To take and fulfil orders — contract. Checkout, payment, shipping, returns, and order emails.
To run your account and Client Service — contract and legitimate interests.
To send order and service messages — contract.
To send marketing (newsletter, drops, Collective news) — consent, or soft opt-in where UK law allows for existing customers. You can unsubscribe at any time.
To keep the site secure, prevent fraud, and improve the shop — legitimate interests. This includes Shopify analytics and Microsoft Clarity session analytics.
To show reviews — legitimate interests and, where you submit a review, your request.
To run The Collective (chip scan, member access, early access) — contract and legitimate interests in running a members layer for people who own the garments.
To meet legal duties — tax, accounting, consumer law, and dispute records.

Who we share it with

We do not sell your personal data. We use processors who only handle it on our instructions:

Shopify — store platform, checkout, accounts, and store analytics;
payment providers shown at checkout (card schemes, Shop Pay, Apple Pay, Google Pay, Klarna where offered);
carriers who deliver your order;
Microsoft Clarity — on-site analytics;
Judge.me — reviews;
email tools we use for newsletters and service mail (Shopify, and Klaviyo if that integration is active); and
professional advisers (for example accountants or solicitors) where required.

Some of these companies are outside the UK. Where that happens, we rely on UK-approved safeguards such as the UK Addendum to the EU Standard Contractual Clauses or an adequacy regulation.

Cookies

See our Cookie Policy for the cookies and similar tools we use, including essential Shopify cookies, analytics, and marketing cookies.

How long we keep it

Order and invoice records are kept for as long as tax and accounting law requires (typically six years after the end of the relevant tax year). Account, Collective, and marketing data is kept while you use the service and for a reasonable period afterwards, or until you ask us to delete it where we have no legal need to retain it. Analytics data follows the retention settings of Shopify and Clarity.

Your rights

You can ask us to access, correct, or delete your data, restrict or object to certain processing, and (where we rely on consent or a contract and the processing is automated) request a copy in a portable format. You can withdraw marketing consent at any time.

Write to hello@rulesoffaith.com or use the Contact page. You can also complain to the Information Commissioner’s Office at ico.org.uk.

Children

The shop is for adults. We do not knowingly collect data from children under 18.

Changes

We will update this page when our practices or the law change. The live version on this URL is the current notice.

House policies