Privacy and cookies

Cygnoverse Demo (company number , registered office ) is responsible for your personal information under UK data protection law (the UK GDPR and the Data Protection Act 2018). Questions or requests go to forhad.sde@gmail.com.

• When you order: your name, email address, phone number, delivery and billing address, what you bought and what you paid.
• Payment: your payment is handled by Stripe. We receive confirmation that you paid, but never your full card number.
• When you email us: your message and your email address.
• If you use the AI try-on: the photo you upload and the image made from it. See the try-on section below.
• When you visit: our servers and our security provider record technical details such as your IP address and browser type, to keep the site working and secure.

• To take, deliver and support your order, and to email you about it. The legal basis is the contract between us.
• To keep accounting and tax records. The legal basis is our legal obligation.
• To prevent fraud and keep the site secure. The legal basis is our legitimate interest in protecting our customers and our business.
• To make a try-on image when you ask for one. The legal basis is your consent, which you give by choosing to upload a photo, and which you can withdraw by not using the feature.

We do not send marketing emails unless you have opted in, and we do not sell your information. We do not make decisions about you by automated means that have legal or similarly significant effects.

Only the companies we need to run the shop, each for its own part of the job:

• Stripe processes payments and checks them for fraud.
• Resend sends our emails, such as your order confirmation and invoice.
• Cloudflare runs our domain name system and protects the site against attacks and bots, which means traffic to the site can pass through it.
• Royal Mail receives your name and delivery address so it can deliver your parcel.
• Our hosting provider runs the servers the shop and its database live on.

Some of these providers may process information outside the UK. Where they do, we rely on the legal safeguards they offer for international transfers, such as the UK International Data Transfer Addendum or an adequacy decision.

For review: Name the hosting provider and the country its servers are in, and check each provider's data processing terms and transfer safeguards before approving this section.

The try-on is optional. If you use it, the photo you upload is processed by our own computer model to make an image of you wearing the piece. Your photo is used only for that, is not used to train any model, and is not shown to anyone else.

Your photo and the image made from it are deleted automatically within 24 hours. Before it is stored, your photo is re-encoded, which removes hidden data such as location tags. To stop automated misuse, the try-on uses a bot check provided by Cloudflare.

For review: The deletion sweep runs once an hour and removes files older than RESULTS_TTL_HOURS (24 by default), so a file can live for up to about 25 hours. Set RESULTS_TTL_HOURS=23 in production to make "within 24 hours" strictly true.

• Try-on photos and images: deleted within 24 hours.
• Orders and invoices: six years after the end of the financial year they belong to, because tax law requires it.
• Emails with us: as long as needed to deal with your query.

For review: Confirm how long server logs and email delivery logs are kept, and how long you keep customer emails once a query is closed.

You can ask for a copy of your information, ask us to correct it or delete it, ask us to limit or stop using it, object to how we use it, and ask for it in a portable format. Email forhad.sde@gmail.com and we will reply within one month. Some information, such as invoices, we must keep by law even if you ask us to delete it.

If you are unhappy with how we handle your information you can complain to the Information Commissioner's Office at ico.org.uk. We would appreciate the chance to put things right first.

We use only what the shop needs to work. Your cart is kept in your own browser's storage so it is still there when you come back. There are no analytics tools, no advertising pixels and no tracking cookies on this site, so there is nothing to opt in or out of.

When you pay, you are on Stripe's secure payment page, where Stripe sets its own cookies for payment security and fraud prevention. If Cloudflare is protecting the site it may set a strictly necessary cookie to tell people from bots. Neither is used for advertising.

If this ever changes, we will update this notice and ask for your consent before setting any cookie that is not strictly necessary.

We will update this notice when how we use information changes. The terms that apply to buying are in our terms of sale.