Privacy Policy

THE SOHO LINE is operated by The SOHO Agency Limited, an Irish private company limited by shares registered in Ireland under company number 802938, with its registered office at Landscape House, Baldonnell Business Park, Baldonnell, Dublin 22, Ireland. We are the controller of the personal data described in this policy.

Account details: your name, email address and password (stored only in hashed form).

Orders: the pieces you buy, delivery and billing addresses, and order, shipment and return history. Card payments are processed by Stripe; we never receive or store full card details.

Your bag and wishlist, and the briefs you write for the Personal Shopper.

Partner applications: the contact name, email, brand details and catalogue information a fashion house submits through Sell With Us.

Usage information: pages visited and general device information, collected through our analytics provider, Clicky.

When a partner house connects its Shopify store, THE SOHO LINE requests read-only access to that store's products and inventory. We use it solely to show the house's catalogue, prices and stock on THE SOHO LINE.

We do not request or store the store's customer records. The access token Shopify issues is encrypted and kept on our servers only. When the app is removed from a store, syncing stops immediately, and the stored token is deleted when Shopify asks us to erase that store's data.

To provide your account, process and deliver orders, handle returns and send order and account emails.

To review partner applications and run the seller workspace.

To recommend pieces through search and the Personal Shopper.

To keep the service secure, prevent fraud and meet our legal and accounting obligations.

We process personal data to perform our contract with you, to meet legal obligations, for our legitimate interests in running and improving a secure marketplace, and, where required, with your consent.

The partner house that sells and dispatches your order receives the details needed to fulfil it.

Service providers acting on our behalf: Supabase (data hosting), Stripe (payments), Resend (email delivery), Clicky (analytics) and Shopify (for partner catalogue connections).

Authorities, where the law requires it. We do not sell personal data.

Some providers process data outside the European Economic Area. Where they do, transfers are protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses.

We keep account data while your account is open, and order records for as long as tax and accounting law requires. Partner application records are kept for the duration of the relationship, or deleted on request if an application is declined.

You may ask to access, correct, delete or receive a copy of your personal data, object to or restrict its processing, and withdraw consent at any time. To make a request, write to us at our registered office.

You also have the right to complain to the Data Protection Commission in Ireland (dataprotection.ie).

We will post any changes on this page and update the date below.