Legal
Privacy Policy
Last updated 3 June 2026
This policy explains how AP Clothing collects, uses and protects your personal data when you shop with us. We are the data controller for the information you provide, and we handle it in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
What we collect
To process and deliver your order, we collect:
- Your name
- Your delivery address
- Your email address
- Your phone number (where provided)
- Order details (the items you bought and your order history)
Payment details
Your payment is handled securely by Stripe, our payment processor. Stripe collects and processes your card details directly — we never see or store your full card number. Stripe is certified to the highest payment-security standard (PCI DSS Level 1).
Why we use your data
We use your personal data to fulfil your order — to take payment, dispatch your items, deliver them to you, send order and tracking updates, and handle any returns, refunds or customer-service queries. Our lawful basis for this is the performance of our contract with you, and compliance with our legal obligations (such as keeping records for tax purposes).
Who we share it with
We only share your data where it's needed to get your order to you. Specifically:
- Stripe — to process your payment securely.
- Couriers and suppliers — strictly to fulfil and deliver your order to your address.
We do not sell your personal data, and we don't share it with third parties for their own marketing.
Cookies
Our store uses a small number of cookies and similar technologies to keep the site working — for example, to remember the contents of your basket during your visit. Some third parties we rely on (such as Stripe) may also set cookies needed to provide their service securely. You can control or block cookies through your browser settings, though some parts of the store may not work properly if you do.
How long we keep it
We keep your personal data only for as long as necessary to fulfil the purposes above, including to meet any legal, accounting or reporting requirements. Order and transaction records are typically retained for up to 6 years to comply with UK tax law, after which they're securely deleted.
Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you.
- Rectify inaccurate or incomplete data.
- Erase your data ("the right to be forgotten"), where there's no overriding legal reason for us to keep it.
- Restrict or object to certain processing, and request data portability.
To exercise any of these rights, email us at apcapital@gmail.com. We'll respond within one month.
Contact & complaints
For any data-protection request or question, contact AP Clothing at apcapital@gmail.com, by WhatsApp on +44 7497 812186, or by post at 24 Hallaway, Carlisle, CA3 9RG, United Kingdom.
If you're unhappy with how we've handled your data, you have the right to complain to the Information Commissioner's Office (ICO), the UK's data-protection regulator, at ico.org.uk. We'd appreciate the chance to put things right first, so please do come to us before contacting the ICO.
Changes to this policy
We may update this policy from time to time. The latest version will always be published on this page with a revised "last updated" date.