Privacy policy

We collect what we need to run unsuited and serve you well. We do not sell your personal data. We use a small number of trusted platforms (Shopify, Klaviyo, payment and shipping providers) to operate the business, and we follow Irish and EU data protection law in how we handle your information.

This policy explains the detail. It is written for the web, not for a courtroom, but it is meant to be accurate. If anything is unclear, email privacy@unsuited.com and we will explain it.

 

WHO WE ARE

 

We are Tomorrow Begins Tonight Limited, an Irish company trading as unsuited. We are the data controller for the personal information we collect through unsuited.com.

Registered office: Venture Hub, 136 Capel Street, Dublin, D01 T2C9, Ireland.

Company registration (CRO): 791606. VAT: IE4437681EH.

For any privacy question, contact privacy@unsuited.com.

 

WHAT INFORMATION WE COLLECT 

 

Depending on how you use the site, we may collect:

• Contact details. Your name, email, phone number, billing and shipping addresses.
• Order details. What you bought, when, how much you paid, and any returns or exchanges.
• Payment details. Card type and last four digits. Full card numbers go to our payment processor, not to us.
• Account details. If you create an account: your login details and saved preferences.
• Communications. Anything you send us by email, contact form or social media.
• Device and usage information. Your IP address, device type, browser, pages viewed, time spent, referring site. Collected automatically through cookies and similar technologies.

We do not collect special category data (such as health, religion or biometric data) and we do not ask for it.

 

WHERE WE GET IT

 

Most of it comes directly from you, when you order, sign up to our list, or contact us.

Some is collected automatically when you visit the site, through cookies and similar technologies. 

A small amount may come from third parties: payment fraud-check services, shipping carriers updating us on delivery, or advertising platforms confirming an ad led to a purchase.

 

WHY WE USE IT, AND OUR LEGAL BASIS

 

Under GDPR we have to tell you why we process your data and on what legal basis. Here is the breakdown.

 

TO TAKE AND FULFIL YOUR ORDER

 

Processing your payment, shipping the goods, handling returns and exchanges, sending order confirmations and delivery updates.

Legal basis: performance of a contract with you (Article 6(1)(b) GDPR).

 

TO RUN YOUR ACCOUNT

 

If you create one: storing your saved details, order history and preferences.

Legal basis: performance of a contract with you (Article 6(1)(b) GDPR).

 

TO SEND YOU MARKETING EMAILS AND SMS

 

If you have signed up to our list, or are an existing customer who has not opted out, we may send you email or SMS about new products, restocks, the brand and occasional promotions.

Legal basis: your consent (Article 6(1)(a) GDPR), or our legitimate interest in marketing similar products to existing customers under Regulation 13 of the Irish ePrivacy Regulations 2011, where applicable.

You can unsubscribe from any email using the link in the email, or by emailing privacy@unsuited.com.

 

TO RUN AND IMPROVE THE WEBSITE

 

Site analytics, error tracking, performance monitoring, A/B testing, and improving how the site works.

Legal basis: our legitimate interest in running an effective business (Article 6(1)(f) GDPR), and your consent for any non-essential cookies (Regulation 5 of the Irish ePrivacy Regulations 2011).

 

TO SHOW YOU ADVERTISING

 

We may use platforms such as Meta and Google to show you ads on other sites, including based on your visits to unsuited.com.

Legal basis: your consent, given through our cookie banner (Regulation 5 of the Irish ePrivacy Regulations 2011 and Article 6(1)(a) GDPR).

 

TO PREVENT FRAUD AND KEEP THE SITE SECURE

 

Detecting suspicious orders, blocking abuse, securing the site against attack.

Legal basis: our legitimate interest in protecting the business and our customers (Article 6(1)(f) GDPR), and where applicable, compliance with our legal obligations (Article 6(1)(c) GDPR).

 

TO MEET OUR LEGAL OBLIGATIONS 

 

For example, retaining sales records for tax purposes, responding to lawful requests from authorities, exercising or defending legal claims.

Legal basis: compliance with a legal obligation (Article 6(1)(c) GDPR).

 

WHO WE SHARE IT WITH

 

We share data only with vendors who help us run the business, and only what they need to do their job. We do not sell your data to anyone.

Categories of recipients:

• Ecommerce platform. The host of unsuited.com.
• Payment processors. To take and verify your payment.
• Shipping and fulfilment partners. To deliver your order.
• Email and SMS marketing platform. To send you communications you have opted in to.
• Analytics and advertising platforms. To understand how the site is used and run advertising you have consented to.
• Customer review platform. If you choose to leave a review.
• Professional advisers. Lawyers, accountants and auditors when reasonably needed.

We may also disclose data where required by law, in connection with a corporate transaction (for example a sale of the business), or to protect our or others’ rights.

 

WHERE YOUR DATA GOES

 

Some of our vendors may be based outside the European Economic Area in the future, including in the United Kingdom, the United States, and Canada.

If we ever transfer your data outside the EEA, we will rely on a recognised legal mechanism. In practice that means one of:

• An adequacy decision by the European Commission (the UK has one).
• The EU-US Data Privacy Framework, where the US recipient is certified.
• Standard Contractual Clauses approved by the European Commission.

We will carry out a transfer impact assessment where required, and apply additional safeguards where these are needed.

 

HOW LONG WE KEEP IT

 

We do not keep data longer than we need to. Specifically:

• Order and transaction records: 7 years from the date of the order, to meet Irish tax and accounting requirements.
• Account information: while your account is active, plus 2 years after you last log in, after which we delete or anonymise it.
• Marketing list (email and SMS): until you unsubscribe, or until 3 years of inactivity, whichever is sooner.
• Customer service correspondence: 3 years from the date of last contact.
• Website analytics data: typically 14 months, depending on the platform settings.
• Cookie data: as set out in the Cookies Policy.

Some data may be kept longer where we have a legal obligation, are dealing with an ongoing complaint or claim, or are required to do so by a regulator.

 

YOUR RIGHTS

 

Under GDPR you have a number of rights over the data we hold about you. These are:

• Access. You can ask for a copy of the data we hold about you.
• Correction. You can ask us to correct inaccurate or incomplete data.
• Deletion. You can ask us to delete your data, in some circumstances.
• Restriction. You can ask us to limit how we process your data, in some circumstances.
• Portability. You can ask us to provide your data in a portable format, or send it to another controller.
• Objection. You can object to processing based on our legitimate interests, including for direct marketing.
• Withdraw consent. Where we rely on your consent, you can withdraw it at any time. This does not affect the lawfulness of any processing before withdrawal.

To exercise any of these rights, email privacy@unsuited.com. We will reply within one month, in line with GDPR. We may need to verify your identity before we act.

You will not be charged for exercising your rights, except in the limited circumstances permitted by GDPR (for example, manifestly unfounded or excessive requests).

 

COMPLAINTS

 

If you are unhappy with how we handle your data, please contact us first at privacy@unsuited.com so we can try to put it right.

You also have the right to complain directly to the Irish Data Protection Commission (DPC), which is the supervisory authority for Ireland:

Data Protection Commission, 6 Pembroke Row, Dublin 2, D02 X963, Ireland. Website: dataprotection.ie. Phone: +353 (0)761 104 800.

If you live elsewhere in the EU, you may also be able to complain to your local data protection authority.

 

COOKIES AND SIMILAR TECHNOLOGIES

 

We use cookies and similar technologies on unsuited.com. Some are strictly necessary to run the site (for example, keeping items in your basket). Others, including analytics and advertising cookies, only run with your consent.

You can manage your cookie choices through the consent banner on the site, and change your settings at any time. Full detail is in our Cookies Policy.

 

CHILDREN

 

unsuited is for adults. Our products are not aimed at children, and we do not knowingly collect personal data from anyone under 16, the age of digital consent in Ireland.

If you believe a child has given us their data, contact privacy@unsuited.com and we will delete it.

 

SECURITY

 

We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls, and vendor due diligence. No system is perfect, so we encourage you to use a strong, unique password for your account and to tell us straight away if you spot anything that looks wrong.

 

AUTOMATED PROFILING

 

We do not make decisions about you based solely on automated processing that have a significant effect on you. Some of our marketing platforms use automated profiling to decide which messages to send (for example, sending a message to someone who has not bought in a while), but you can opt out of marketing at any time.

 

DO YOU HAVE TO GIVE US YOUR DATA?

 

To buy from us, yes: we need your contact, shipping and payment details to fulfil your order. If you do not provide them, we cannot complete the sale.

To browse the site, no: you can browse without giving us anything beyond what is collected automatically through essential cookies.

To sign up for marketing, no: that is always your choice and you can unsubscribe at any time.

 

CHANGES TO THIS POLICY

 

We may update this policy from time to time, to reflect how we operate or to keep up with the law. The current version is always on this page with the date it was last updated. If we make a material change, we will let you know by email or through a notice on the site.

 

CONTACT US

 

Email: privacy@unsuited.com

Post: Tomorrow Begins Tonight Limited, Venture Hub, 136 Capel Street, Dublin, D01 T2C9, Ireland.