This policy is written in plain language. We only collect data we genuinely need, we tell you exactly why, and we give you full control. We do not sell your data. We do not run advertising cookies.
01Who We Are
MODESWIPE ("we", "us", "our") operates the website at modeswipe.com — a curated luxury fashion editorial and affiliate platform.
For the purposes of the UK General Data Protection Regulation (UK GDPR) and the EU General Data Protection Regulation (EU GDPR), MODESWIPE is the data controller responsible for your personal data.
If you have any questions about how we handle your data, please contact us via our social channels listed on this page.
02What Data We Collect and Why
Newsletter email address: If you subscribe to our newsletter, we collect your email address. We use this solely to send you curated fashion content and editorial updates.
Server logs: Our hosting provider may collect standard server log data including IP addresses, browser type, operating system, referring URLs, and pages visited. This data is used for security, performance monitoring, and fraud prevention.
Affiliate click data: When you click an affiliate product link, we record the click event (including an anonymised version of your IP address, user agent, and referrer) to measure the performance of our editorial content. This is done under our legitimate interest in understanding how our content performs.
We do not use your data for automated decision-making, profiling, or any purpose other than those stated above.
03Lawful Basis for Processing (Article 6 UK/EU GDPR)
Newsletter subscription — Consent (Article 6(1)(a)): We process your email address only after you have provided a clear, affirmative, and unambiguous opt-in via our subscription form. You may withdraw this consent at any time.
Server logs — Legitimate interest (Article 6(1)(f)): We have a legitimate interest in maintaining the security, stability, and performance of our platform. This interest does not override your fundamental rights.
Affiliate click analytics — Legitimate interest (Article 6(1)(f)): We have a legitimate interest in understanding how users interact with our content in order to improve our editorial service. Click data is anonymised at the point of collection.
04Cookies
MODESWIPE itself sets only one first-party cookie: a consent preference cookie, stored in your browser's localStorage, which records whether you have accepted or declined non-essential cookies. This is an essential operational element and does not require consent.
When you click an affiliate product link, you are navigated to Amazon's website. Amazon may set its own tracking cookies on their platform. These cookies are governed by Amazon's Privacy Notice, not this policy. We recommend you review Amazon's cookie practices independently.
We do not load Google Analytics, Meta Pixel, or any other third-party analytics scripts on this site. We do not use advertising cookies.
You may manage or delete cookies through your browser settings at any time. Removing the consent preference cookie will cause our consent banner to reappear on your next visit.
05How Long We Keep Your Data
Newsletter email addresses are retained for as long as your subscription is active. If you unsubscribe, we will delete or anonymise your email address within 30 days.
Server log data is retained for a maximum of 90 days, after which it is automatically purged.
Affiliate click records are retained in aggregate anonymised form for up to 24 months for editorial performance analysis. Any personally identifiable elements (IP addresses) are anonymised at the point of collection.
06Third-Party Recipients
We do not sell, rent, or trade your personal data with any third party for marketing purposes.
Our website is hosted on infrastructure that processes data in accordance with applicable data protection law. Our database provider (MongoDB Atlas) and hosting provider may process data on our behalf as data processors under appropriate contractual safeguards.
Amazon acts as an independent data controller when you visit their site via our affiliate links. We are not responsible for Amazon's data practices.
07International Transfers
Some of our service providers (including cloud infrastructure) may process data outside the UK or EU. Where this occurs, we ensure appropriate safeguards are in place — such as the UK International Data Transfer Agreement (IDTA) or EU Standard Contractual Clauses (SCCs) — to protect your data to the same standard as required by UK/EU law.
08Your Rights Under UK/EU GDPR
You have the following rights in relation to your personal data, which you may exercise at any time by contacting us:
Right of access (Article 15): You can request a copy of the personal data we hold about you.
Right to rectification (Article 16): You can ask us to correct inaccurate data or complete incomplete data.
Right to erasure — "Right to be Forgotten" (Article 17): You can ask us to delete your personal data where there is no compelling reason for us to continue processing it.
Right to restriction of processing (Article 18): You can ask us to restrict how we use your data in certain circumstances.
Right to data portability (Article 20): Where processing is based on consent, you can ask us to provide your data in a commonly used, machine-readable format.
Right to object (Article 21): You can object to processing based on legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds.
Right to withdraw consent: Where processing is based on consent (e.g. newsletter), you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.
To exercise any of these rights, please contact us via our social channels. We will respond within one calendar month.
09Right to Lodge a Complaint
If you are based in the United Kingdom and believe we have not handled your data correctly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office — ico.org.uk — Helpline: 0303 123 1113
If you are based in the European Union, you may lodge a complaint with your national supervisory authority. A full list is available at edpb.europa.eu.
10Age of Consent
MODESWIPE is not directed to individuals under the age of 16. Under the UK GDPR, children under 16 may not provide consent for the processing of their personal data without parental authorisation.
If you are under 16 years of age, please do not submit any personal information to us, including subscribing to our newsletter. If we become aware that we have collected personal data from anyone under 16 without appropriate consent, we will delete it immediately.
11Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. When we do, we will revise the "Last updated" date at the top of this page.
Where changes are material, we will take reasonable steps to notify active newsletter subscribers. Your continued use of MODESWIPE after any changes constitutes acceptance of the updated policy.
If you have an active newsletter subscription and we make a material change to how we process your data, we will request fresh consent where required by law.