1. Who we are
DRESSED to Glow is a trading name of Romancia Bridal Ltd, an independent boutique based at 50 Gerrard Street, Ashton-in-Makerfield, WN4 9AE. We take your privacy seriously and handle your data in accordance with UK GDPR and the Data Protection Act 2018.
If you have any questions about this policy or how we handle your data, contact us at info@romancia.co.uk or 01744 894443.
2. What data we collect
We collect the following types of personal information, depending on how you interact with us:
When you book an appointment
- Your name and the name of the person attending the appointment
- Email address and phone number
- Event details (prom date, occasion, school or venue)
- Dress size and preferences (optional)
- Any accessibility or support requirements you choose to share with us
When you make a purchase
- Billing and delivery addresses
- Payment information (processed securely by our payment provider — we never see or store your full card details)
- Order history
When you browse our site
- Your IP address, browser type, and device information
- Pages viewed and how you navigate the site
- Items saved to your wishlist or bag (stored locally on your device)
- Cookie data (see our Cookie Policy)
When you sign up to our newsletter
- Your name and email address
- Any preferences you share about the occasions or styles you're interested in
3. How we use your data
We use your personal data for the following purposes:
- To manage your appointment — confirming times, sending reminders, preparing the boutique for your visit
- To fulfil your order — processing payments, arranging delivery, handling returns
- To provide you with a supportive styling experience — if you've shared accessibility or support needs, we use that information only to make your visit comfortable and safe
- To improve our service — analysing how the site is used so we can make it better
- To send you marketing — only if you've opted in (newsletter, offers, new collections)
- To comply with legal obligations — including tax records and consumer rights legislation
4. Our legal basis for processing
Under UK GDPR, we rely on the following legal bases:
- Contract — to fulfil your booking, order, or purchase
- Legitimate interests — to run our business, improve the site, and keep it secure
- Consent — for marketing emails, optional analytics cookies, and any sensitive data you choose to share with us (such as accessibility needs)
- Legal obligation — to meet our accounting, tax, and consumer protection duties
5. Sensitive information
Occasionally customers share information with us about disabilities, neurodivergence, or mental health conditions so we can provide an appropriate styling experience. This is classed as "special category data" under GDPR.
We only use this information with your explicit consent, and only to support your appointment. It is never shared with third parties, never used for marketing, and is securely deleted once it's no longer needed.
6. How we share your data
We do not sell your personal data to anyone. We share it only with trusted third parties who help us run the business:
- Payment providers — to process your purchase securely
- Delivery couriers — to get your order to you
- Email marketing platforms — only if you've opted in to marketing
- Website hosting and analytics providers — to keep the site running
- Legal or regulatory authorities — only where we are required by law
7. How long we keep your data
We keep your data only for as long as we need it, and in line with UK legal requirements:
- Appointment records: 2 years after your last visit
- Order and transaction records: 6 years (required for UK tax purposes)
- Marketing data: until you unsubscribe, then promptly deleted
- Website analytics: up to 26 months
- Special category data (accessibility needs): deleted shortly after your appointment unless you ask us to keep it for future visits
8. Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Correct any data that's inaccurate or incomplete
- Delete your data ("right to be forgotten")
- Restrict how we process your data
- Port your data to another service
- Object to processing based on legitimate interests
- Withdraw consent at any time (for marketing or optional cookies)
To exercise any of these rights, email info@romancia.co.uk. We'll respond within one month.
9. Cookies and tracking
We use cookies and similar technologies to run the site and understand how it's used. You can manage your preferences through our cookie banner, or read the full details in our Cookie Policy.
10. Security
We take appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS), secure hosting, and restricted staff access. However, no method of transmission over the internet is 100% secure. If we become aware of a data breach that affects you, we will notify you and the Information Commissioner's Office (ICO) within 72 hours where required by law.
11. Children
Our services are not aimed at children under 13. We don't knowingly collect data from children. For styling appointments involving under-16s, a parent or guardian should make the booking on their behalf.
12. Changes to this policy
We may update this policy from time to time. Changes will be posted on this page with an updated "last updated" date. Significant changes will be notified by email if you've given us one.
13. How to complain
If you're not happy with how we handle your data, you can contact us directly at info@romancia.co.uk, and we'll do our best to resolve it.
You also have the right to complain to the UK's data protection regulator:
Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113
Website: ico.org.uk