Naked Apparel Data Protection Policy

Our Commitment to Your Privacy

Naked Apparel is committed to protecting your privacy and handling your personal data in a transparent and secure manner. We adhere strictly to the principles and requirements of the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018 (UK DPA 2018).

This policy outlines the high-level commitments we make when processing your personal data. Full details on how your data is collected, used, and protected are contained in our Privacy Notice.

The Principles We Follow

We ensure that all personal data is processed according to the following fundamental data protection principles:

1. Lawfulness, Fairness, and Transparency: We process your data lawfully, fairly, and in a transparent manner. We will always clearly explain what data we collect and why.

2. Purpose Limitation: We collect data only for specified, explicit, and legitimate purposes (e.g., fulfilling your orders and improving our services) and do not process it in a manner that is incompatible with those purposes.

3. Data Minimisation: We only collect and process the personal data that is strictly necessary for the purposes we have identified. We will never ask for more data than we need.

4. Accuracy: We take reasonable steps to ensure the personal data we hold is accurate and, where necessary, kept up to date.

5. Storage Limitation: We keep personal data in an identifiable format for no longer than is necessary for the purposes for which it is processed. Once data is no longer needed, it is securely deleted or anonymised.

6. Integrity and Confidentiality (Security): We process personal data in a manner that ensures appropriate security, including protection against unauthorised or unlawful processing and against accidental loss, destruction, or damage, using appropriate technical and organisational measures.

7. Accountability: We take responsibility for demonstrating compliance with all the principles listed above.

Our Lawful Basis for Processing

We will always have a lawful basis for processing your personal data. This basis will typically be one of the following:

• Performance of a Contract: Processing your data to fulfil your order and provide the products you purchased.

• Legitimate Interests: Processing data to manage our business efficiently, prevent fraud, and improve our website and services, provided these interests do not override your rights.

• Consent: Processing data for specific activities, such as sending you direct marketing emails, where we have obtained your clear permission.

• Legal Obligation: Processing data to comply with a legal requirement (e.g., tax reporting).

Exercising Your Data Rights

Under UK data protection law, you have specific rights over your personal data, including the right to access, rectify, erase, restrict, and object to the processing of your data.

For full details on these rights and how to exercise them, please refer to Section 10 of our Privacy Notice.

More Information

For a comprehensive explanation of how Naked Apparel Ltd. processes your data, including the types of data collected, how long we retain it, and who we share it with, please read our full Privacy Notice, which is available on our website.

Contact Us

If you have any questions about this Data Protection Policy or our data protection practices, please contact our compliance team:

• Email: customerservice@nakedapparel.co.uk

• Address: Unit 7 Sandbrook Park, Sandbrook Way, Rochdale, England, OL11 1RY