BARBARC / LEGAL

Privacy policy

Last updated 16 September 2026

Information we collect

We collect the information needed to create and fulfil custom clothing orders: your name, email address, delivery address, garment choices, personalisation, uploaded artwork, approval decisions, order history and messages you send us. We also receive payment status and transaction references from Stripe. BARBARC does not receive or store your full card details.

How we use it

We use this information to prepare artwork, provide quotes, take payment, manufacture and deliver orders, answer support requests, prevent fraud and keep the service secure. Our lawful bases are performing our contract with you, taking steps at your request before a contract, complying with legal duties and our legitimate interests in operating and protecting the service.

Who processes it

We use service providers including Vercel for hosting, Supabase for customer authentication, database and private file storage, Stripe for payments, Resend for account-confirmation and password-reset emails, and Google Workspace for business email. They process information to provide those services. Some providers may process data outside the UK using their contractual and legal safeguards.

How long we keep it

We keep order, payment and accounting records for the periods required for tax, legal and dispute purposes. Artwork and production files are kept while needed to fulfil the order and handle reasonable follow-up requests, then deleted or anonymised when no longer required. Security records may be retained for a shorter period appropriate to investigating abuse.

Your choices and rights

You can ask for access to, correction of, or deletion of your personal information, or object to or restrict some processing. Where processing relies on consent, you can withdraw it. Email sales@barbarc.com. You may also complain to the UK Information Commissioner’s Office at ico.org.uk.

Customer accounts and social sign-in

If you create an account, we use your email address and a secure account identifier to save your orders across devices. If you choose an available social sign-in provider, it shares the identity information you authorise, such as your email and name. We do not receive your Google or Facebook password. Essential session cookies keep you signed in. You can sign out, reset your password, disconnect authorised apps in your account, or contact us to request account deletion.

Local storage and security

The website stores a private order reference in your browser so you can return to an order. We use technical and organisational safeguards appropriate to the information we process. Do not share private order links.

ChatGPT plugin

If you connect BARBARC in ChatGPT, BARBARC receives only the information needed for the tools you choose to use. Artwork is transferred only after your approval. We do not use customer artwork or order information to train our own AI models.