Legal
Privacy Policy
What personal information Dress Code Prom collects, why we hold it, who we share it with, how long we keep it, and the rights you have over it.
Last updated 21 October 2026
1Who we are
Dress Code Prom is a trading name of MASE HOLDINGS LTD, a company registered in England and Wales under company number 13447852, with its registered office at 7 Northfield Road, London, England, E6 2AJ. Our showroom is at 57 Nags Head Lane, Brentwood, Essex, CM14 5NL, United Kingdom.
We are the "data controller" for the personal information described in this policy. That means we decide why and how it is used, and we are responsible to you and to the Information Commissioner's Office for looking after it.
For anything about your personal information — a question, a correction, or a request to exercise one of the rights below — contact us at dresscodeprom@gmail.com, call 07537 999111, or write to us at the showroom address above.
2What we collect and why
We collect only what we need to sell you a dress, run your appointment, and run the business. The table below is the complete list, together with our lawful basis for holding each item under the UK GDPR.
| Information | Why we hold it | Lawful basis |
|---|---|---|
| Name, email address, telephone number | To contact you about your order and your appointment | Performance of a contract |
| Your appointment: when it is and how many of you are coming | To keep the slot for you, have the room ready, remind you the day before, and let you move or cancel it | Performance of a contract |
| Delivery address and country | To deliver your order and to calculate the correct delivery charge | Performance of a contract |
| Your school and the date of your prom | So your dress reaches you before the night, and so the one-dress-per-school register can stop anyone else at your prom buying the same dress. The register shows the dress and the school, never your name | Performance of a contract |
| Body measurements, if you give them to us | To help find your size and to plan any alteration. You give these to us at your appointment or a fitting; we never take them without you knowing | Performance of a contract |
| Order history and order value | To fulfil and account for your order, handle returns and faults, and meet our tax obligations | Performance of a contract; legal obligation |
| Payment confirmation from Stripe (the last four digits, card brand and outcome) | To take the payment and to answer questions about it later. We never see or store your full card number | Performance of a contract |
| Appointment notes, styling preferences and enquiry messages | So whoever you speak to next knows your history and you do not have to repeat yourself | Legitimate interests — running a personal styling service well |
| Saved bags and wishlist boards, including any comments left on a board you shared | To keep the pieces you saved, and to let the people you share a board with respond to them | Performance of a contract; legitimate interests |
| Your account email and sign-in credentials | To give you an account and keep it secure | Performance of a contract |
| Marketing preferences | To send you news about collections only if you have asked us to | Consent |
We do not collect special category data. Body measurements are held to have clothing made, not for any health purpose, and are used for nothing else.
We do not buy personal information from third parties, we do not build advertising profiles, and we do not make any decision about you by automated means alone.
3Who inside Dress Code Prom can see your information
Our staff can see your orders, contact details, measurements, appointment notes and any wishlist board you have created. That access exists so we can prepare properly for your appointment and so the right dress reaches you. Access is limited by role, every change to an order is recorded against the member of staff who made it, and those records cannot be edited afterwards.
4Who we share it with
We do not sell your personal information and we never share it for anyone else's marketing. We use the following service providers, who process information strictly on our instructions:
| Provider | What they do | What they receive |
|---|---|---|
| Stripe Payments Europe, Ltd. | Takes the card payment | Your name, email, delivery address, the amount, and your card details, which you enter directly into Stripe's own form — they never pass through our systems |
| Supabase | Hosts our database, sign-in and product imagery | Everything in the table above, stored securely |
| Vercel Inc. | Hosts and serves this website | Technical request information such as your IP address and approximate country |
| Resend | Sends our order emails | Your name, email address and order details |
| Google (Google Calendar) | Holds a copy of our appointment diary when you book | Your name, phone number, email address, group size, school, prom date and anything you tell us when you book |
| The supplier we order your dress from, if it is not on the rail | Supplies the dress | The style, colour and size. Not your name, contact details or payment information |
| Our delivery carrier | Delivers your order | Your name, delivery address and telephone number |
We will also disclose information where the law requires it — for example to HM Revenue & Customs, or to a court — and to our professional advisers where necessary.
If you message us on WhatsApp, that conversation happens on Meta's platform and is subject to their privacy terms as well as ours.
5Sending information outside the UK
Some of our providers are outside the United Kingdom — including in the European Economic Area and the United States. Where information leaves the UK we rely on the UK's adequacy regulations where they apply, and otherwise on the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with checks on the safeguards that provider has in place.
You can ask us for details of the safeguards used for any particular transfer.
6How long we keep it
| Information | Kept for |
|---|---|
| Order records, invoices and payment records | Six years after the end of the tax year the order falls in, because HMRC requires it |
| Measurements, appointment notes and styling history | 3 years since your last order or enquiry, then deleted |
| Your account, saved bag and wishlist boards | Until you close your account or ask us to delete it |
| Enquiries that did not become an order | 2 years, then deleted |
| Marketing consent records | For as long as you are subscribed, plus a record of your unsubscribe so we do not contact you again by mistake |
When a retention period ends we delete the information or anonymise it so it can no longer be linked to you.
We also take a daily backup of our database so that your order and your details can be recovered if something goes wrong. Backups are held for 30 days and then deleted. A copy is sent to a protected mailbox we control, so that a failure at our hosting provider cannot take your order history with it.
7Your rights
Under the UK GDPR you have the right to:
- Ask for a copy of the personal information we hold about you.
- Have inaccurate information corrected.
- Ask us to delete your information, where we do not have to keep it for legal or accounting reasons.
- Ask us to restrict how we use your information while a question about it is resolved.
- Object to us using your information on the basis of our legitimate interests.
- Receive the information you gave us in a portable, machine-readable format.
- Withdraw your consent to marketing at any time — every marketing email carries an unsubscribe link, and withdrawing does not affect anything sent before.
To exercise any of these, contact dresscodeprom@gmail.com. We will respond within one month. We will not charge you, and we will not ask you to give a reason.
If you are unhappy with how we have handled your information you can complain to the Information Commissioner's Office at ico.org.uk, by calling 0303 123 1113, or by writing to Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. We would rather you came to us first so we can put it right.
8How we protect it
Your information is held in an access-controlled database in which each customer's records are isolated from every other customer's. Connections to this site are encrypted. Card details are entered directly into Stripe and never reach our servers, so we could not disclose your card number even if we were asked to. Staff access is limited by role and every change to an order is logged.
If a breach of your personal information were ever to occur and it presented a risk to you, we would tell you and the Information Commissioner's Office as the law requires.
9Customers under 18
Most of our customers are 15 to 18, so this part is written for you. It adds to everything above — it never takes away a right you have.
- Your information is yours. Whatever your age, you can ask to see it, correct it or have it deleted, just as set out under Your rights. A parent or guardian can ask on your behalf if you are happy for them to.
- We only ask for what we need to sell you a dress and run your appointment — the list at the top of this policy. We never ask your age, we never sell your information, and we never use it to show you adverts.
- No marketing unless you say yes. The box at checkout starts unticked, and every marketing email has an unsubscribe link.
- No tracking unless you say yes. Our analytics only switch on if you accept them in the cookie banner.
- The one-dress-per-school register shows the dress and your school, never your name. When we post that a dress has been claimed, we name the school, not you.
Photos and videos from your appointment are yours — they go on your phone. We only post a photo or video of you, on our social media or our Real Proms page, and only put your name with it, if you have said yes. If you are under 16, we ask a parent or guardian too. Changed your mind? Tell us and we will take it down from everything we run.
Our shop is not designed for children under 13. If you are under 13, please ask a parent or guardian to contact us for you. Questions about any of this, from you or from a parent, go to dresscodeprom@gmail.com.
10Changes to this policy
If we change this policy we will update the date at the top of this page. Where a change materially affects your rights we will tell you directly.