Privacy policy

Last updated: 22 August 2026

Rosalind's Sewing Room respects your privacy and is committed to handling personal information responsibly and transparently.

This Privacy Policy explains what personal information we collect when you visit our website, place an order, contact us or otherwise interact with our services, why we use that information, who it may be shared with and the rights available to you.

This policy applies to rosalindssewingroom.co.uk.

1. Who We Are

Rosalind's Sewing Room is a trading name of Xirtam Holdings LLC.

Trading name: Rosalind's Sewing Room
Legal entity: Xirtam Holdings LLC
Registered business address: 158 Lee Ave, San Francisco, California 94112, United States
Email: support@rosalindssewingroom.co.uk
Telephone: +1 310-442-8937
Website: rosalindssewingroom.co.uk

For the personal information described in this policy, Xirtam Holdings LLC acts as the data controller where applicable.

Because we offer goods and services to customers in the United Kingdom, we handle relevant personal information in accordance with applicable UK data protection and privacy law, including the UK GDPR, the Data Protection Act 2018, the Data (Use and Access) Act 2025, and the Privacy and Electronic Communications Regulations 2003 (PECR), as amended from time to time.

2. Personal Information We Collect

The personal information we collect depends on how you interact with us.

It may include:

  • Your name
  • Email address
  • Telephone number
  • Billing address
  • Delivery address
  • Order and purchase information
  • Products viewed or added to your basket
  • Customer account information, if you create an account
  • Communications you send to us
  • Return, refund and customer-service information
  • Reviews, comments or other content you voluntarily submit
  • Device, browser and technical information
  • IP address and approximate location derived from it
  • Information about how you use and interact with our website
  • Advertising attribution and campaign interaction information where permitted

We only collect information that is reasonably relevant to operating our store, fulfilling orders, providing customer service, complying with legal obligations, protecting our business or carrying out activities described in this policy.

3. Information You Provide Directly

You provide personal information to us when you:

  • Place an order
  • Enter billing or delivery information
  • Create or use a customer account
  • Contact customer service
  • Request a return, refund or cancellation
  • Submit a contact form
  • Subscribe to marketing communications
  • Leave a review or provide other content
  • Otherwise communicate with us

You may choose not to provide certain information, but this can prevent us from providing a requested service or completing an order.

4. Information Collected Automatically

When you use our website, certain technical information may be collected automatically.

This may include:

  • IP address
  • Browser type and version
  • Device type
  • Operating system
  • Pages viewed
  • Referring website or advertising source
  • Date and time of visits
  • Products viewed
  • Shopping basket activity
  • Website interactions
  • Technical and security information

Some of this information is collected through cookies, pixels, tags or similar storage and access technologies.

Our use of these technologies is explained further below.

5. How We Use Personal Information

We may use personal information for the following purposes:

Processing orders
To accept payment, confirm orders, fulfil purchases, provide tracking information and deliver products.

Customer service
To answer questions, investigate delivery issues, process returns, refunds and cancellations, and resolve complaints.

Operating our website
To provide the website, customer accounts, shopping basket and checkout functionality.

Security and fraud prevention
To identify suspicious activity, prevent fraudulent transactions and protect our customers, systems and business.

Legal and accounting obligations
To maintain records required for accounting, tax, regulatory, dispute-resolution and other legal purposes.

Improving our services
To understand how our website and customer experience perform and identify areas for improvement.

Marketing
To send marketing communications where permitted and where you have subscribed or another lawful basis applies.

Advertising and measurement
Where permitted, to understand the effectiveness of advertising campaigns and to advertise our products through services such as Google Ads.

We do not use personal information for purposes that are incompatible with those explained in this policy unless permitted or required by law.

6. Lawful Bases for Processing

Where UK data protection law requires a lawful basis, we generally rely on one or more of the following:

Contract
Where processing is necessary to take steps at your request or perform our contract with you, such as processing and delivering an order.

Legal obligation
Where we need to process information to comply with applicable laws, including accounting, tax or regulatory requirements.

Legitimate interests
Where processing is reasonably necessary for our legitimate business interests and those interests are not overridden by your rights, such as fraud prevention, security, customer service and protecting legal claims.

Consent
Where you have actively agreed to processing, including certain marketing activities and non-essential advertising or tracking technologies where consent is required.

Where we rely on consent, you may withdraw it at any time.

7. Cookies and Similar Technologies

Our website uses cookies and similar technologies.

Some are strictly necessary for the website to function. For example, they may be needed to:

  • Maintain your shopping basket
  • Operate checkout
  • Provide security
  • Remember necessary session information
  • Enable essential website functionality

These technologies may be used without consent where legally permitted because they are necessary to provide the service you request.

We may also use non-essential technologies for purposes such as:

  • Analytics
  • Advertising
  • Conversion measurement
  • Advertising attribution
  • Remarketing or personalised advertising where enabled
  • Understanding website usage

Where consent is legally required, we ask for consent before using non-essential storage or access technologies.

You can manage available privacy and cookie choices through the consent controls presented on our website and, where applicable, through your browser.

Changing your consent later does not affect processing that was lawful before the change.

8. Google Advertising and Measurement

Rosalind's Sewing Room uses Google Ads to advertise our products and measure advertising performance.

Where the relevant technologies are enabled and you have provided any legally required consent, Google may receive information connected with your interaction with our website or advertisements.

This may be used for purposes such as:

  • Measuring whether an advertisement resulted in a visit or purchase
  • Advertising attribution
  • Campaign performance measurement
  • Preventing advertising fraud
  • Creating or using advertising audiences where enabled and permitted

Google's processing of information is also governed by Google's own privacy terms and settings.

You can manage Google's advertising personalisation through Google's privacy and advertising controls.

We do not require you to consent to non-essential advertising technologies in order to place an order.

9. Shopify

Our online store is hosted and operated using Shopify.

Shopify provides technology that enables us to operate our website, products, shopping basket, checkout, customer accounts and other ecommerce functions.

As a result, Shopify may process personal information in connection with your use of our store.

Depending on the circumstances, Shopify may act as our processor, service provider or as an independent controller for certain processing activities.

Shopify maintains its own privacy information explaining how it handles personal information.

10. Payments

Payments are processed through the payment methods and providers made available to you at checkout.

We do not require customers to send full payment-card details to us by email.

Payment providers may process information including:

  • Name
  • Billing information
  • Payment amount
  • Transaction information
  • Device or fraud-prevention information
  • Payment credentials

The payment provider's own privacy terms may also apply to its processing.

We may receive confirmation of whether a payment was authorised, completed, declined, refunded or disputed.

11. Fulfilment and Delivery

To fulfil and deliver your order, we may share necessary personal information with:

  • Fulfilment partners
  • Warehouses
  • Logistics providers
  • Postal operators
  • Delivery carriers

Information shared may include your:

  • Name
  • Delivery address
  • Telephone number where required
  • Order contents
  • Tracking or shipment information

Some fulfilment partners may be located outside the United Kingdom.

We only provide information reasonably necessary to fulfil and deliver the order or resolve a delivery issue.

12. Other Parties We May Share Information With

We may disclose relevant personal information to categories of recipients including:

  • Shopify and other ecommerce technology providers
  • Payment processors
  • Fulfilment and warehouse partners
  • Delivery and logistics providers
  • IT, hosting and security providers
  • Customer-service providers
  • Advertising and measurement providers, including Google where applicable
  • Email or communications providers
  • Accountants, legal advisers and other professional advisers
  • Regulators, courts, law-enforcement authorities or other public bodies where legally required
  • A buyer, investor or successor if our business is reorganised, transferred or sold

We do not disclose personal information to third parties simply because they request it.

13. International Transfers

Xirtam Holdings LLC is established in the United States and some of the service providers involved in operating our business may be located outside the United Kingdom.

Personal information may therefore be processed or transferred internationally.

Where UK data protection law requires additional safeguards for an international transfer, we use an appropriate lawful transfer mechanism.

Depending on the circumstances, this may include:

  • UK adequacy regulations
  • The UK International Data Transfer Agreement
  • The UK Addendum to approved Standard Contractual Clauses
  • Another lawful transfer mechanism recognised under applicable UK data protection law

You may contact us if you would like further information about safeguards relevant to your personal information.

14. How Long We Keep Personal Information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected and to comply with applicable legal, accounting, tax and regulatory obligations.

The appropriate retention period depends on the type of information and why we hold it.

For example:

  • Order and transaction records may be retained for the period required for accounting, tax and legal purposes.
  • Customer-service correspondence may be retained while necessary to deal with an enquiry, complaint, return or dispute.
  • Customer-account information may be retained while the account remains active and for an appropriate period afterwards.
  • Marketing information may be retained until you unsubscribe or otherwise object, subject to retaining a minimal suppression record where necessary to respect your preference.
  • Information relevant to legal claims may be retained for the applicable limitation period.

When information is no longer required, we take reasonable steps to delete, anonymise or otherwise dispose of it securely.

15. Security

We use reasonable technical and organisational measures designed to protect personal information against:

  • Unauthorised access
  • Accidental loss
  • Misuse
  • Unauthorised disclosure
  • Alteration
  • Destruction

Our website uses encrypted HTTPS connections.

Access to administrative and customer information is restricted according to operational needs.

No internet transmission or storage system can be guaranteed to be completely secure.

16. Your Data Protection Rights

Depending on the circumstances, UK data protection law may give you rights including:

  • Right of access – to request a copy of personal information we hold about you
  • Right to rectification – to ask us to correct inaccurate or incomplete information
  • Right to erasure – to ask us to delete information in certain circumstances
  • Right to restriction – to ask us to restrict certain processing
  • Right to object – to object to certain processing, including direct marketing
  • Right to data portability – to receive certain information in a portable format where applicable
  • Right to withdraw consent – where processing is based on your consent

These rights are not absolute and may be subject to legal conditions or exemptions.

To exercise a privacy right, contact:

support@rosalindssewingroom.co.uk

Please state that your request relates to data protection.

We may need to verify your identity before acting on a request.

We will respond within the timeframe required by applicable law.

17. Marketing Communications

If you receive promotional emails from us, you can unsubscribe at any time by:

Stopping marketing messages does not prevent us from sending necessary service communications relating to an order, refund, account, security issue or other transaction.

18. Automated Decision-Making

We may use automated tools to help identify potential fraud, payment risk or security issues.

We do not intend to make solely automated decisions about you that produce legal or similarly significant effects except where permitted by applicable law and subject to any required safeguards.

Where applicable law gives you rights relating to significant automated decisions, those rights remain unaffected.

19. Children's Information

Our website is intended for general retail customers and is not designed to knowingly collect personal information from children who are not legally able to provide the information or enter into the relevant transaction.

If you believe that a child has provided personal information to us in circumstances where it should not have been collected, contact us and we will review the situation.

20. Third-Party Websites

Our website may contain links to websites or services operated by third parties.

We do not control those third-party websites and are not responsible for their privacy practices.

If you follow an external link, we recommend reviewing the relevant third party's privacy information.

21. Complaints

If you have concerns about how we handle personal information, please contact us first at:

support@rosalindssewingroom.co.uk

We will investigate privacy complaints and respond in accordance with applicable data protection law.

You also have the right to complain to the UK data protection regulator:

Information Commissioner's Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
United Kingdom

You may contact the ICO directly through its official website or published contact channels.

22. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

  • Changes to our services
  • Changes to the technologies we use
  • Changes to our business practices
  • Changes to applicable legal or regulatory requirements

The date at the top of this policy shows when it was last updated.

Where required, material changes will be brought to your attention.

23. Contact Information

For questions about this Privacy Policy or how we handle personal information, contact:

Rosalind's Sewing Room
Trading name of Xirtam Holdings LLC

Email: support@rosalindssewingroom.co.uk
Telephone: +1 310-442-8937
Website: rosalindssewingroom.co.uk

Registered business address:
Xirtam Holdings LLC
158 Lee Ave
San Francisco, California 94112
United States

This is our registered administrative business address.

Customer Service Hours

Monday – Friday: 8AM – 6PM
Saturday: 8AM – 5PM
Sunday: 8AM – 1PM

UK time

For privacy-related enquiries, please email:

support@rosalindssewingroom.co.uk