Cookies & Privacy

This policy explains how Studio Nicholson collects, uses and protects your personal data when you shop with us online or in store, sign up to hear from us, or contact us.

Studio Nicholson Limited is the controller of your personal data. We are a company registered in England and Wales (company number 07170715), with our registered office at First Floor, 9-15 Helmsley Place, London E8 3SB. We are registered with the Information Commissioner's Office (ICO) under registration number [ICO registration number].

Our data protection lead is responsible for this policy. For any question about it, or to use any of your rights, email service@studionicholson.com or write to us at our registered office.

We collect only what we need to sell to you, deliver your orders and look after you as a customer.

• Identity and contact: your name, email address, phone number, and billing and delivery addresses, which you give us when you order, create an account, sign up or contact us.
• Orders and transactions: what you bought, when, how much you paid, and any returns and refunds, whether online, in store, or through our try-at-home service.
• Payment: confirmation from our payment providers that a payment was made. We never see or store your full card details.
• Account and loyalty: your login details, saved preferences, and loyalty points and tier.
• Marketing preferences: whether you've agreed to hear from us, and how you engage with our emails.
• Customer service: your messages, chats and calls with us.
• Website and device: pages viewed, products browsed, device and browser type, IP address, and how you arrived at our site, collected through cookies and similar technologies, subject to your choices (see Cookies).
• CCTV images: recordings of visitors to two of our stores (see CCTV in our stores).

We don't knowingly collect sensitive information about you, such as your health, religion or ethnicity, and we don't sell your personal data.

The law requires us to have a legal basis for each way we use your data. These are ours:

• To process, deliver and return your orders, including international orders and try-at-home appointments. Legal basis: contract, because we need it to sell to you.
• To run your account and the loyalty programme. Legal basis: contract.
• To answer your questions and handle complaints. Legal basis: contract, or our legitimate interest in looking after customers.
• To prevent fraud and keep our website and systems secure. Legal basis: legitimate interests.
• To send marketing emails and texts. Legal basis: consent, or our legitimate interest for existing customers (see Marketing).
• To tailor our emails to the products you've browsed or bought. Legal basis: legitimate interests, and consent where cookies are involved.
• To measure how our website performs and show you relevant adverts on other sites. Legal basis: consent, through our cookie banner.
• To understand our customers in aggregate to plan our ranges, stores and business. Legal basis: legitimate interests.
• To keep financial records and respond to legal requests. Legal basis: legal obligation.
• To protect our stores, staff and customers with CCTV. Legal basis: legitimate interests.

Where we rely on legitimate interests, we've balanced our interests against yours, and you can object at any time (see Your rights).

We'll only send you marketing emails or texts if you've signed up, or if you've bought from us and didn't opt out when you did. Every email has an unsubscribe link, and you can also email service@studionicholson.com. Unsubscribing won't affect emails about your orders.

Cookies are small files stored on your device when you visit our website. Apart from the ones the site needs to work, we only use cookies if you accept them through our cookie banner. You can change your choice at any time using the [cookie settings link in the website footer].

• Strictly necessary (always on): make the site work, including your basket, checkout, currency, security and fraud prevention. Provided by Shopify, Global-e and Cloudflare.
• Analytics: show us how the site is used, so we can improve it. Provided by Google Analytics, Littledata, Triple Whale and Tagalys.
• Personalisation: tailor emails, sign-up forms and recommendations to what you've browsed. Provided by Klaviyo.
• Advertising: measure our adverts and show you relevant ones on other sites. Provided by Google Ads and Meta.

If you reject non-essential cookies, Google Analytics may still receive basic, cookieless information about a page visit (such as browser type) that doesn't identify you.

When you accept advertising cookies, Meta and Google receive information about your visit. For the Meta pixel, we and Meta are joint controllers of that collection, and Meta's own privacy policy then applies to how it uses the data.

Our service providers
These companies process your data on our behalf, only on our instructions, under contracts that require them to keep it secure.

• Shopify runs our website, checkout and store tills
• Klaviyo sends our marketing and order emails
• Gorgias and TalentPop provide our customer service platform and support agent
• Yotpo runs our loyalty programme
• Harper delivers our try-at-home service
• Tu Pack (Mintsoft) stores, packs and ships orders, and handles returns
• Revoq manages online returns
• Google Analytics, Littledata, Triple Whale and Tagalys provide website analytics and search
• Obsidian Security installs and monitors our store CCTV
• Function and Bravada are agencies that support our website and digital advertising

Some partners make their own decisions about your daWho we share it withta, and their own privacy policies apply:

• Global-e sells to you as the merchant of record when you order from outside the UK.
• Klarna, Adyen and other payment providers process your payment and carry out their own fraud and credit checks.
• Couriers receive your name, address and contact details to deliver your order.
• Marketplaces such as Farfetch handle orders you place through them. Orders placed on Tmall are handled in China by our partner there, and we don't receive your personal details.
• Meta and Google receive website data when you accept advertising cookies.

We may also share data with professional advisers, with the police or regulators where the law requires it, or with a buyer if all or part of our business is sold.

Some of our providers process data outside the UK, mainly in the United States and Canada, and our customer service support agent is based in the Philippines. Where data leaves the UK, we make sure it stays protected, either because the UK government recognises the destination as having adequate protection, or by using the ICO's approved contract terms (the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses).

We keep your data only as long as we need it, then delete or anonymise it.

• Account and order history: six years after your last purchase, as required for tax and accounting.
• Marketing profile: three years after you last opened an email or bought from us.
• Customer service messages: three years after the conversation ends.
• Unsubscribe records: kept, so we don't contact you again by mistake.
• CCTV recordings: 30 days, unless needed to investigate an incident.

Your data is held on established, secure platforms. Access is limited to the people who need it, and our key systems are protected by multi-factor authentication. Card payments are handled entirely by our payment providers, so we never store your card details. If something goes wrong, we have a procedure for responding quickly, including telling you and the ICO where the law requires it.

We use CCTV in two of our stores to protect our customers, staff and premises. Signs at the entrance tell you when cameras are in use. Footage is stored securely by our security provider and viewed only by authorised staff, or by the monitoring centre if an alarm is triggered.

If you're unhappy with how we've handled your data, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

We'll update this policy when the way we use your data changes, and post the new version here. It was last updated in October 2026.