Legal
Privacy Policy
Last updated: 10 June 2026
1. Who we are
This website is operated by Esther DCS, trading as The Chic Noir. We are the data controller for the personal information collected through this website.
You can contact us at estherdcs@thechicnoir.com. This is the address to use for any privacy-related enquiry or rights request.
2. What information we collect and why
We only collect information you give us directly or that is necessary to complete a transaction. We do not sell your data. We use analytics cookies (including Google Analytics) only if you consent to them — see our Cookie Policy below.
Contact enquiries
When you use our contact form, we collect your name, email address, and message. We use this to respond to your enquiry. The legal basis is our legitimate interest in handling business correspondence. We retain contact messages for up to two years, or until the matter is resolved.
Testimonials
If you submit a testimonial, we collect your name, an optional role or description, and your text. Approved testimonials may be displayed publicly on this website. The legal basis is your consent, given at the point of submission. You may request removal at any time by contacting us.
Orders and payments
When you place an order, we collect your name, email address, and shipping address. Payment is processed by Stripe, Inc. — we do not store or handle your card details. We retain order records for seven years in line with UK financial record-keeping requirements. The legal basis is performance of a contract.
Cookies and technical data
We use a small number of strictly necessary cookies to operate the website — primarily to maintain your shopping session. See our Cookie Policy for full details. Analytics cookies are set only if you consent to them and can be withdrawn at any time via the Cookie preferences link in the footer.
3. Who we share your information with
We share data with a small number of third-party processors necessary to operate the site. They act on our instructions and are contractually required to protect your data.
- Stripe, Inc. — payment processing. Stripe is PCI DSS Level 1 certified. Stripe's privacy policy is available at stripe.com/gb/privacy.
- Bunny.net — content delivery network used to serve images and media on this site.
- Google Fonts — web fonts loaded from Google's servers. Your IP address is transferred to Google as part of this request. Google's privacy policy is available at policies.google.com/privacy.
- Google (Analytics & Tag Manager) — used, only with your consent, to measure how the site is used. Google's privacy policy is available at policies.google.com/privacy.
We do not share your personal data with any other third parties unless required by law.
4. International transfers
Some of our processors (including Stripe and Google) may process your data outside the UK. Where this occurs, we rely on standard contractual clauses or adequacy decisions to ensure your data receives the same level of protection as it would under UK law.
5. Your rights
Under UK GDPR, you have the following rights regarding your personal data:
- Access — you can request a copy of the personal data we hold about you.
- Rectification — you can ask us to correct inaccurate data.
- Erasure — you can ask us to delete your data, subject to any legal retention obligations.
- Restriction — you can ask us to pause processing while a complaint is investigated.
- Portability — where processing is based on consent or contract, you can request your data in a portable format.
- Objection — you can object to processing based on legitimate interests.
- Withdraw consent — where we rely on consent, you can withdraw it at any time without affecting prior processing.
To exercise any of these rights, email us at estherdcs@thechicnoir.com. We will respond within one month.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk, or by calling 0303 123 1113.
6. Changes to this policy
We may update this policy from time to time. The date at the top of this page will always reflect when it was last revised. Continued use of the site after changes are posted constitutes acceptance of the updated policy.
