Privacy policy

Privacy Policy

Last updated: 9 August 2026

1. Who We Are

This website is operated by blueAnt Consultancy Limited, trading as Hermione de Paula.

blueAnt Consultancy Limited is the data controller responsible for the personal information described in this policy.

Company number: 10872030
VAT registration number: GB294694839
Registered office: 128 City Road, London, United Kingdom, EC1V 2NX
Email: info@hermionedepaula.com

The registered office is not an atelier, showroom, warehouse or returns address.

2. Scope of This Policy

This policy explains how we collect, use, store and share personal information when you:

• Visit hermionedepaula.com
• Create or use a customer account
• Place or enquire about an order
• Request sizing, fitting or alteration guidance
• Contact our team
• Subscribe to marketing
• Attend an appointment or event
• Interact with our advertisements or social-media accounts

3. Information We Collect

Depending on how you interact with us, we may collect:

Identity and Contact Information

• Name
• Billing and delivery addresses
• Email address
• Telephone number
• Account login details

Order and Transaction Information

• Products viewed, requested or purchased
• Order history and correspondence
• Payment status and transaction references
• Shipping, delivery and returns information
• Customs information where required

Payment-card details are processed securely by Shopify and the relevant payment provider. We do not ordinarily receive or store complete card details.

Sizing and Client-Service Information

• Selected garment size
• Body measurements
• Fit preferences
• Fitting and alteration notes
• Appointment details
• Images or information you choose to provide in connection with a Made-to-Order, Custom or Couture project

Please provide only information that is relevant to your enquiry or order.

If you voluntarily provide health, mobility or accessibility information relevant to a fitting or garment requirement, we will use it only for that purpose and, where required, with your explicit consent.

Website and Device Information

• IP address
• Browser and device type
• Operating system
• Approximate location
• Pages visited and actions taken
• Referring website
• Cookie and consent preferences

Marketing Information

• Email subscription status
• Marketing preferences
• Engagement with emails and advertisements
• Competition, event or campaign participation

Fraud-Prevention Information

• Order-risk indicators
• Payment-verification results
• Information required to verify identity or prevent fraudulent transactions

4. How We Collect Information

We collect information:

• Directly from you when you place an order, create an account, contact us or subscribe
• Automatically through cookies and similar technologies
• From Shopify, payment providers, couriers and other companies involved in fulfilling your order
• From boutiques, stylists or professional partners where you have asked them to introduce or assist you
• From publicly available sources and social-media platforms where appropriate
• From analytics and advertising providers, subject to your consent where required

5. How and Why We Use Your Information

We process personal information only where we have a lawful basis.

To Fulfil a Contract or Take Steps at Your Request

We use information to:

• Process and fulfil orders
• Take payment and arrange delivery
• Create Made-to-Order, Custom and Couture pieces
• Provide sizing, fitting and alteration services
• Manage returns, repairs and complaints
• Communicate about an order, appointment or enquiry
• Maintain customer accounts

To Comply With Legal Obligations

We use information to:

• Maintain tax, accounting and transaction records
• Meet consumer-protection requirements
• Respond to lawful requests from regulators or authorities
• Prevent and investigate unlawful activity
• Comply with customs and international-trade obligations

For Our Legitimate Interests

Where these interests are not overridden by your rights, we use information to:

• Operate, secure and improve the website
• Provide customer service
• Understand demand and improve our collections
• Prevent fraud and protect our business
• Manage professional, retail and supplier relationships
• Establish, exercise or defend legal claims
• Send relevant marketing to existing customers where permitted by law

With Your Consent

We rely on consent where required to:

• Send certain marketing communications
• Use non-essential analytics or advertising cookies
• Process information requiring explicit consent
• Share information for a purpose you have specifically approved

You may withdraw consent at any time. Withdrawal does not affect processing carried out before consent was withdrawn.

6. Marketing Communications

We may send news, collection updates, invitations and offers where you have consented or where marketing is otherwise permitted by law.

You can unsubscribe at any time by:

• Selecting the unsubscribe link in an email
• Updating available account preferences
• Contacting info@hermionedepaula.com

We may retain limited information on a suppression list to ensure that we respect your request not to receive further marketing.

We do not sell personal information or provide customer lists to unrelated businesses for their independent marketing.

7. Cookies and Similar Technologies

We use cookies and similar technologies to:

• Operate essential website functions
• Remember your bag and preferences
• Secure accounts and payments
• Understand website performance
• Measure marketing activity
• Personalise content and advertising where permitted

Essential cookies may operate without consent where they are strictly necessary. Non-essential analytics and advertising technologies are used only in accordance with applicable consent requirements.

You can manage your choices through the website’s cookie-consent controls and your browser settings. Disabling certain cookies may affect website functionality.

8. Who We Share Information With

We share personal information only where reasonably necessary with:

• Shopify, which hosts and operates our ecommerce platform
• Payment processors and fraud-prevention providers
• Couriers, customs agents, insurers and fulfilment providers
• Atelier staff, artisans, alterations specialists and production partners
• Retail or appointment partners where you have requested their involvement
• Email, customer-service, analytics, advertising and technology providers
• Accountants, lawyers, insurers and other professional advisers
• Government authorities, regulators, courts and law-enforcement bodies where legally required
• A buyer, investor or adviser involved in a proposed sale, restructuring or transfer of our business or assets

Service providers may use personal information only as permitted by their contracts and applicable law.

Some providers, including Shopify and payment platforms, may also process information for their own legally defined purposes. Their handling of that information is governed by their respective privacy notices.

9. International Transfers

Some service providers and business partners may process personal information outside the United Kingdom.

Where personal information is transferred internationally, we use a lawful transfer mechanism where required, which may include:

• UK adequacy regulations
• The UK International Data Transfer Agreement
• The UK Addendum to approved contractual clauses
• Another legally permitted safeguard or exception

You may contact us for further information about the safeguards applying to your information.

10. How Long We Keep Information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting and reporting requirements.

Retention periods are determined by the nature of the information, the relevant transaction, legal requirements and the possibility of a dispute.

In general:

• Order, payment and tax records are normally retained for up to six years after the relevant financial reporting period
• Customer-service and complaint records are retained for as long as reasonably necessary to resolve the matter and protect legal rights
• Sizing, fitting and project information is retained for the duration of the project and for a reasonable period afterwards to manage alterations, aftercare or claims
• Customer-account information is retained while the account remains active and for a reasonable period after closure
• Marketing information is retained until you unsubscribe or we determine that it is no longer required
• Cookie information is retained according to the duration stated through our consent controls or the relevant provider

We may retain anonymised information that can no longer identify you.

11. Security

We use appropriate organisational and technical measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

Access is limited to people and service providers who require the information for legitimate business purposes.

No internet transmission or storage system can be guaranteed as completely secure. If we become aware of a personal-data breach, we will assess and report it as required by law.

12. Fraud Prevention and Automated Tools

Shopify, payment providers and fraud-prevention services may use automated tools to assess transaction risk.

A risk assessment may result in an order being delayed, reviewed or declined. Where required by law, you may request human review of a decision that significantly affects you.

13. Your Data-Protection Rights

Depending on the circumstances and applicable law, you may have the right to:

• Request access to your personal information
• Ask us to correct inaccurate or incomplete information
• Request deletion of your information
• Restrict how your information is used
• Object to processing based on legitimate interests
• Object to direct marketing at any time
• Request transfer of information in a portable format
• Withdraw consent
• Challenge certain automated decisions
• Complain about how your information has been handled

These rights are not absolute and may be subject to legal exceptions.

To exercise a right, email info@hermionedepaula.com. Please include enough information for us to identify you and understand your request. We may request proof of identity before releasing or changing personal information.

We will normally respond within one month, although the law permits additional time for particularly complex requests.

14. Data-Protection Complaints

If you believe we have not handled your personal information correctly, please email info@hermionedepaula.com with the subject line Data Protection Complaint.

We will acknowledge your complaint within 30 days, investigate it appropriately and communicate the outcome to you.

You also have the right to complain to the Information Commissioner’s Office:

ico.org.uk/make-a-complaint
Telephone: 0303 123 1113

If you live outside the United Kingdom, you may also be entitled to complain to your local data-protection authority.

15. Children’s Information

The website is not directed at children, and online orders must be placed by an adult.

We do not knowingly collect personal information directly from children without appropriate authorisation. If you believe a child has provided information to us improperly, please contact us so that we can investigate and take appropriate action.

16. Third-Party Websites

The website may contain links to external websites. Those websites operate under their own privacy policies, and we are not responsible for their content, security or handling of personal information.

Please review the relevant privacy policy before providing information to a third-party website.

17. Changes to This Policy

We may update this Privacy Policy to reflect changes to our services, technology or legal obligations.

The latest version will be published on this page with its revision date. Where a change materially affects how we use personal information, we will provide additional notice where appropriate.

18. Contact Us

Questions, rights requests and privacy complaints should be sent to:

info@hermionedepaula.com

blueAnt Consultancy Limited
Trading as Hermione de Paula
128 City Road
London
United Kingdom
EC1V 2NX