Privacy Policy

Last updated: September 13, 2026

This Privacy Policy explains how The Clothing Bureau ("we", "us") collects, uses, discloses and protects personal information when you visit theclothingbureau.com, use our live chat, book an appointment, create a Bureau account, buy from us, or otherwise communicate with us (together, the "Services"). We are the data controller of your personal information under the EU and UK GDPR. If this Policy conflicts with our Terms of Service, this Policy controls for personal information.

Contact. The Clothing Bureau, New York, United States · concierge@theclothingbureau.com. Our Privacy Officer is the person in charge of the protection of personal information and can be reached at the same address.

1. Personal information we collect

Depending on how you interact with us, we collect the following categories.

• Identifiers and contact details — name, email address, phone number, billing and shipping address, account credentials and a customer ID.
• Measurements and fit information — body and garment measurements, fit preferences and notes you give us for made-to-measure or bespoke orders, or that we save to your Bureau Passport at your request.
• Commercial information — products you view, favourite, save in the suit builder, add to your cart, purchase, return or exchange; order history; gift cards; appointment bookings.
• Payment information — payment method, amount and confirmation. Card details are collected and processed by our payment processors; we do not store full card numbers.
• Communications — the content of emails, texts, messages and live-chat conversations you have with us, including any files you attach.
• Device and usage information — IP address, approximate location derived from your IP address (country, region, city — never a street address), browser and device type, operating system, language, referring page, pages viewed, clicks and scrolling, and recordings of how you move through our pages (see our Cookie Policy).
• Marketing preferences — your email and text subscription status and your cookie choices.
• Inferences — preferences we infer from the above, such as interest in a fabric or category, to recommend products.

2. Where we get it

• From you — when you create an account, order, book an appointment, fill in a form, subscribe or message us.
• Automatically — from your device through cookies, pixels, local storage and similar technologies when you use the Services.
• From service providers — Shopify, payment processors, shipping carriers, and analytics and advertising providers, when they collect or process information on our behalf.

3. How and why we use it

Where the EU or UK GDPR applies, the legal basis for each purpose is shown in brackets.

• Providing the Services — processing payments, making and shipping garments, keeping your measurements on file, managing your account, appointments, returns, exchanges and gift cards. [Performance of a contract; legitimate interests in running our business]
• Customer service — answering you by email, phone, text or live chat. [Performance of a contract; legitimate interests]
• Marketing — emails and texts about new pieces, limited issuance and events, and showing you our advertising on other websites and apps based on your activity here. [Consent for email, text and advertising cookies; legitimate interests for emails to existing customers about similar products where the law allows]
• Analytics and improvement — understanding how the site is used, including heatmaps and session recordings, and testing new features. [Consent for analytics cookies; legitimate interests for aggregated statistics]
• Security and fraud prevention — authenticating accounts and preventing abuse of the chat, checkout and site. [Legitimate interests; legal obligation]
• Legal compliance — tax and accounting records, responding to lawful requests, enforcing our terms. [Legal obligation; legitimate interests]

4. Cookies and similar technologies

We use cookies, pixels and local storage for strictly necessary functions (cart, checkout, login, security, your cookie choice), analytics, advertising and preferences. Where the law requires it — including the EU/EEA, UK, Switzerland and Canada — non-essential technologies stay off until you switch them on in our cookie banner, and you can change your choice at any time through Cookie Settings. Our Cookie Policy lists each technology, who sets it and for how long.

We honour the Global Privacy Control browser signal as an opt-out of targeted advertising and of the "sale" or "sharing" of personal information for the browser sending it. We do not respond to other "Do Not Track" signals.

5. Analytics and advertising partners

We use Google Analytics and Google Ads, the Meta Pixel (Facebook and Instagram) and Klaviyo to measure our site and advertising and, with your consent where required, to show you relevant advertising on their platforms; each uses cookies or pixels as described in our Cookie Policy and processes data under its own privacy policy. We also partner with Microsoft Clarity to capture how you use and interact with our website through behavioural metrics, heatmaps and session replay, using first- and third-party cookies, to improve and market our products and services and for site optimisation, fraud and security purposes; see the Microsoft Privacy Statement. You can opt out of all of these through Cookie Settings or Your Privacy Choices.

Shopify hosts our store and provides checkout, payments and analytics. Shopify also uses information about your interactions with our store together with other merchants to improve its services and support personalised advertising; for that processing Shopify is the controller. See the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.

6. Live chat

Our website offers a live chat built and operated by The Clothing Bureau. Nothing is collected by the chat until you open it and start a conversation. When you do, we collect and keep:

• What you tell us — the messages you send, any name, email address or phone number you enter, and any files you attach. If you are signed in to your Bureau account, the chat is linked to that account so our team can see your order history and continue earlier conversations.
• Technical information — your IP address and, derived from it, an approximate location (country, region and city; never a street address or postal code), used to prevent abuse and to give our team context. It is removed from inactive conversations after 90 days.
• A chat identifier stored in your browser (local storage, not a tracking cookie) so your conversation can be continued if you return. It is only created once you start a chat and is cleared when you clear your browser's site data.

Conversations are answered by members of our team and are visible only to them. Chat data is stored on our own chat platform, hosted with a cloud provider in the United States, and is not shared with any other party. Conversations are kept so we can provide ongoing service and meet our legal obligations; you can ask us to delete your chat history at any time at concierge@theclothingbureau.com. Please do not share card numbers or other sensitive details in the chat.

7. Marketing emails and texts

We send marketing emails and texts only with your consent, or — for email — where you are an existing customer and the law allows us to write to you about similar products. Every email has an unsubscribe link; reply STOP to any text to opt out and HELP for help. Message frequency varies; message and data rates may apply; consent to texts is not a condition of purchase. We keep a record of when and how you consented. Opting out of marketing does not stop service messages about your orders, appointments or account.

8. How we disclose personal information

• Service providers acting on our instructions — hosting and store platform, payment processors, shipping carriers, email and text delivery, analytics, and our IT, accounting and customer-service providers.
• Advertising partners — the analytics and advertising partners in Section 5 receive device and browsing information through cookies and pixels to measure and personalise our advertising. Section 10 explains how to opt out.
• At your direction — for example when you ask us to ship to someone else.
• Affiliates within our corporate group, if any.
• Legal and business reasons — to comply with law or lawful requests, enforce our terms, protect rights, safety and property, or in a merger, financing, sale or bankruptcy.

We do not sell personal information for money.

9. International transfers

We are based in the United States and our providers process information in the United States and other countries. For information from the EEA, UK or Switzerland we rely on the EU–US Data Privacy Framework (and its UK and Swiss extensions) where the recipient is certified, or on the European Commission's Standard Contractual Clauses (with the UK Addendum) and appropriate safeguards. If you are in Canada, your information may be stored and processed outside Canada, including in the United States, where it may be accessible to authorities under local law. Contact us for details of the safeguards we use.

10. Your privacy rights

Depending on where you live you may have the right to: know what personal information we hold and receive a copy; correct it; delete it; receive it in a portable format; opt out of targeted advertising and of the sale or sharing of personal information; object to or restrict certain processing; withdraw consent at any time (without affecting earlier processing); and not be discriminated against for exercising your rights.

How to exercise them. Email concierge@theclothingbureau.com, or use Your Privacy Choices for advertising opt-outs. We may need to verify your identity, usually by matching your email or order details. We respond within the time the law requires (one month under the GDPR, 30 days under Canadian law). If we refuse a request you may complain to your regulator.

United States

California residents and residents of other US states with privacy laws may opt out of the sharing of their information for targeted advertising through Your Privacy Choices or by enabling Global Privacy Control in their browser. We do not sell personal information for money.

EEA, UK and Switzerland

Our legal bases are in Section 3. Where we rely on legitimate interests you may object; where we rely on consent you may withdraw it. You may lodge a complaint with your supervisory authority — a list of EEA authorities is at edpb.europa.eu; in the UK, the ICO; in Switzerland, the FDPIC.

Canada

We comply with PIPEDA and applicable provincial laws, including Quebec's Act respecting the protection of personal information in the private sector. You may access and correct your personal information, withdraw consent (subject to legal or contractual restrictions), ask us to stop disseminating or de-index it where the law provides, and receive computerised personal information you provided in a structured, commonly used format. Technologies that identify, locate or profile you are off by default for visitors in Canada until you turn them on in our cookie banner. Complaints may be directed to our Privacy Officer (above), the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d'accès à l'information.

11. Children

The Services are for adults. We do not knowingly collect personal information from children. If you believe a child has given us information, contact us and we will delete it.

12. How long we keep information

• Account, measurements (Bureau Passport), order and appointment records — for as long as you have an account, then up to 7 years for tax, warranty and legal purposes.
• Payment records — 7 years (accounting law).
• Marketing consent and unsubscribe lists — until you unsubscribe, plus a record of the opt-out so we do not contact you again.
• Live chat — IP address and approximate location removed from inactive conversations after 90 days; conversation content kept for as long as needed to serve you and deleted on request.
• Cookie consent record — 12 months, then we ask again.
• Analytics and session recordings — per provider defaults (Google Analytics up to 14 months; session recordings 30 days); cookie lifetimes are listed in our Cookie Policy.

13. Security

We protect personal information with appropriate technical and organisational measures, including encryption in transit and access controls. Please do not send card numbers or other sensitive details by email or chat.

14. Changes to this policy

We will post any changes here with a new "Last updated" date and, for material changes, notify account holders and subscribers by email or a notice on the site before they take effect.

15. Contact

The Clothing Bureau, New York, United States · concierge@theclothingbureau.com