Privacy Policy

At Legend Jackets, we are committed to protecting your personal data and respecting your privacy. This policy explains how we collect, use, store, and protect your information when you shop with us, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller

The data controller responsible for your personal data is:

Hassantech Ltd (trading as Legend Jackets)
Companies House Number: 14384815
Registered Office: 85 Great Portland Street, First Floor, London, W1W 7LT, United Kingdom
Email: care@legendjackets.com
Hours: Monday – Friday, 9:00 AM – 5:00 PM (GMT)

2. What Data We Collect

  • Identity & Contact data: Name, email address, delivery address, billing address (when you place an order)
  • Order data: Items purchased, quantity, custom measurements for bespoke orders
  • Payment data: Processed securely via Stripe — we never see or store your full card details
  • Technical data: IP address, browser type, device information
  • Usage data: How you interact with our website (via cookies / analytics)
  • Communications: Emails or contact form messages you send us

3. Why We Collect It (Purpose)

  • To process and deliver your order
  • To communicate with you about your order (dispatch, tracking, returns, issues)
  • To respond to your enquiries
  • To improve our website (anonymised analytics only)
  • To comply with legal obligations (tax records, fraud prevention)
  • To detect and prevent fraudulent transactions

4. Legal Basis for Processing (UK GDPR)

We process your personal data under the following lawful bases:

  • Performance of a contract — to fulfil your order
  • Legitimate interests — to communicate about your purchase and improve our service
  • Legal obligation — to maintain financial records under UK tax law
  • Consent — for optional marketing or analytics cookies (you may withdraw consent at any time)

5. Data Sharing

We share your personal data only with essential service providers:

  • Shipping carriers (DHL, FedEx, SkyNet) — name and delivery address only, used to deliver your order
  • Payment processor (Stripe) — for secure transaction processing
  • IT and hosting providers — for website operation

We do not sell, rent, or share your personal data with any third party for marketing purposes.

6. Data Retention

  • Order records: Retained for up to 7 years to comply with UK HMRC tax law
  • Contact enquiries: Retained for up to 2 years
  • Marketing data: Retained until you withdraw consent

You may request deletion of your personal data at any time, subject to our legal retention obligations.

7. Your Rights Under UK GDPR

You have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate or incomplete data
  • Erase your data (“right to be forgotten”) where it is no longer needed
  • Restrict processing of your data
  • Object to processing based on legitimate interests
  • Data portability — receive your data in a structured, machine-readable format
  • Withdraw consent at any time where consent is the legal basis

To exercise any of these rights, email care@legendjackets.com. We will respond within 30 days.

8. Right to Lodge a Complaint

If you have a concern about how we handle your personal data, please contact us first. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO):

9. Cookies

We use the following types of cookies:

  • Essential cookies: Required for checkout, cart, and login functionality (cannot be disabled)
  • Analytics cookies: Help us understand how visitors use our site (Google Analytics)
  • Functional cookies: Remember your preferences (e.g., language, currency)

You can control cookies via your browser settings. Declining analytics cookies will not affect your ability to shop with us.

10. International Data Transfers

Some of our service providers (e.g., Stripe, Google Analytics) may process data outside the UK / EEA. Where this occurs, we ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses).

11. Children’s Privacy

Our website and products are intended for adults aged 18 or older. We do not knowingly collect personal data from individuals under 18. If you believe we have collected information from a minor, please contact us immediately.

12. Security

Our website uses SSL encryption (HTTPS) across all pages. Payments are processed via Stripe, a PCI-DSS compliant gateway. We never store your full card details on our servers. We have appropriate technical and organisational measures in place to protect your data.

13. Changes to This Policy

We may update this policy from time to time. The “last updated” date below indicates when changes were last made.

14. Contact Us

For any questions about this privacy policy or how we handle your data, email care@legendjackets.com — we respond within 1–2 business days, Monday – Friday, 9:00 AM – 5:00 PM (GMT).

Last updated: May 2026. This policy applies to legendjackets.com and is issued by Hassantech Ltd (Company No. 14384815).

Phone: +44 7458 935470 — Monday – Friday, 9:00 AM – 5:00 PM (GMT).