Privacy policy

1. Who I am

The X Suit is the trading name of Jordan James, a freelance personal stylist and image consultant. I am the controller of your personal information, which means I decide how and why it is used. In this policy, "I" and "me" mean Jordan James, and "you" means anyone who contacts me, books with me or visits this website.

Email: jordan.james@thexsuit.co.uk
Address: available on request by email

2. The information I collect

• Enquiries: your name, email address, the service and location you are interested in, and anything you tell me in your message.
• Bookings: your name, email address, the service, date and time you choose, your answers to any booking questions and, for an in person session, the address where we will meet.
• Payments: confirmation that you have paid and the amount. Card payments are processed by Stripe, and I never see or store your full card details.
• Your styling service: the information you choose to share so that I can style you, such as your sizes and measurements, body type, colouring, lifestyle, style preferences and clothing budget, your questionnaire answers, and photos of you and your wardrobe.
• Messages: emails and messages you send me, including through Instagram, TikTok or LinkedIn.
• Website visits: when you visit this website, my hosting provider records basic technical information, such as your IP address and browser type, to keep the site secure and working properly.

Please share only what you are comfortable with. If you choose to tell me about a health condition, disability or anything similar because it affects what you wear, I will use it only to tailor your service and only with your explicit consent, which you may withdraw at any time.

3. How and why I use it

Data protection law requires me to have a lawful basis for each way I use your information. These are the purposes and the bases I rely on:

• To reply to your enquiry and arrange your style call: because you have asked me to take these steps before booking, or my legitimate interest in responding to people who contact me.
• To manage your booking, take payment and provide your service: to perform my contract with you.
• To keep financial records and meet my tax obligations: to comply with the law.
• To keep a record of our work together and deal with any questions or complaints: my legitimate interest in running my business properly.
• To share photos of you, or details of our work together, on my website or social media: only with your consent.
• To use any health information you choose to share: your explicit consent.

I will send you marketing emails only if you have agreed to receive them, and every such email will include a simple way to unsubscribe. I do not use your information for automated decision making or profiling.

4. Who I share it with

I never sell your information. I share it only with trusted providers who help me run my business, and only as far as they need it. They act on my instructions and must keep your information secure:

• Webflow, which hosts this website and receives enquiry form submissions;
• Calendly, which manages bookings;
• Zoom, which hosts online sessions;
• Stripe, which processes card payments; and
• Microsoft 365, which provides my business email.

I may also share information where the law requires it, for example with HM Revenue & Customs, or with professional advisers such as an accountant. I will not share your details with retailers or brands unless you ask me to.

5. Information sent outside the UK

Some of these providers are based in, or store information in, the United States or other countries outside the UK. Where this happens, your information is protected by safeguards recognised under UK law, such as the UK and US data bridge or contract terms approved by the Information Commissioner's Office.

6. How long I keep it

• Enquiries that do not lead to a booking: up to 12 months after our last contact.
• Client records, including your questionnaire, notes and lookbook: six years after your last session, in case of any questions or claims.
• Financial records: for as long as HM Revenue & Customs requires, which is at least five years after the 31 January submission deadline for the relevant tax year.
• Photos of you: deleted within 12 months of your final session, unless you have agreed that I may keep them for longer.
• Health information you choose to share: deleted at the end of your service.

After these periods, I securely delete your information or anonymise it so that it no longer identifies you.

7. Keeping it secure

I store your information with reputable providers, in accounts protected by strong passwords and two factor authentication, and I limit what I keep to what I need. If a security incident ever put your information at risk, I would let you know and report it to the Information Commissioner's Office where the law requires.

8. Cookies

This website does not use advertising, tracking or analytics cookies. Any cookies it uses are strictly necessary for the site to work. When you book through Calendly, pay through Stripe or join a Zoom call, those services may use their own cookies, as explained in their privacy policies.

9. Your rights

Under UK data protection law, you have the right to:

• ask for a copy of the information I hold about you;
• ask me to correct anything that is inaccurate or incomplete;
• ask me to delete your information;
• ask me to restrict how I use it;
• object to my using it where I rely on legitimate interests;
• ask for information you have given me to be sent to you or to another organisation; and
• withdraw your consent at any time, where I rely on consent.

To use any of these rights, please email me at jordan.james@thexsuit.co.uk. There is no charge, and I will reply within one month. I may need to confirm your identity first. Some rights do not apply in every situation, for example where the law requires me to keep financial records; if so, I will explain why.

10. Raising a concern

If you have any concern about how I use your information, please contact me first and I will do my best to put it right. You also have the right to complain to the Information Commissioner's Office, the UK's data protection regulator, at ico.org.uk or on 0303 123 1113.

11. Do you have to give me your information?

No, but I need your name and email address to reply to your enquiry, and the details requested when you book in order to provide your service.

12. Children

My services are intended for adults aged 18 and over, and I do not knowingly collect information about children.

13. Changes to this policy

I may update this policy from time to time. The latest version will always be published on this page, together with the date it was last updated. Please also read my terms and cancellation policy.