Who We Are
Nine Baskets is a trading name of Nine Baskets Ltd, a company registered in England and Wales. We are responsible for deciding how your personal information is used when you visit our website at ninebaskets.com and the services we provide.
This policy explains what personal information we collect, why we collect it, how we use it, and the choices you have. By creating an account or using our services, you acknowledge this policy. If you do not agree, please do not use our services.
Information We Collect
Information you provide directly
- Account details: name, email address, password, and profile information
- Style profile: body measurements, size information, colour preferences, style goals, lifestyle notes, and wardrobe photographs
- Payment information: billing address and payment method details — card numbers are processed and stored securely by our payment provider, Stripe, and are never held on our servers
- Communications: messages you send to your stylist, our support team, or through the community forum
- Wardrobe catalogue data: photographs and descriptions of items in your wardrobe that we catalogue as part of our styling service
Information collected automatically
- Device information: browser type, operating system, screen resolution, and device identifiers
- Usage data: pages visited, features used, actions taken, and time spent on the platform
- Location data: approximate location derived from your IP address (we do not collect precise GPS location)
- Cookies and similar technologies: see our Cookie Policy for full details
Why We Use Your Information
Under UK data protection law, we need a valid reason to use your personal information. Here are the reasons we rely on:
- To provide our services: we need to process your data to deliver what you signed up for — managing your account, processing payments, and preparing your styling sessions
- Our business interests: we use data to improve our platform, prevent fraud, and keep things secure — but only where doing so does not override your rights
- Your consent: for things you actively opt in to — such as marketing emails or analytics cookies
- Legal requirements: sometimes the law requires us to keep certain records — for example, financial records for tax purposes
How We Use Your Information
We use your information for the following purposes:
- Providing our services: delivering personal styling sessions, wardrobe cataloguing, recommendation emails, concierge support, and managing your membership
- Personalisation: tailoring styling recommendations, product suggestions, and wardrobe analytics to your preferences and history
- Payments: processing membership fees, one-off session purchases, and issuing refunds
- Communication: sending transactional messages about your account, styling sessions, and membership — and, with your consent, marketing emails about new features, events, and offers
- Improvement: analysing usage patterns to develop new features, fix issues, and improve the overall experience
- Safety and security: detecting and preventing fraud, abuse, and technical problems
- Legal compliance: meeting our obligations under applicable law
How Long We Keep Your Data
We keep your personal information only for as long as we need it. Specific retention periods:
- Account and style profile: for as long as your account is active, plus 30 days after deletion to allow recovery
- Wardrobe photographs: deleted within 30 days of account closure or upon your request
- Styling history: retained while your account is active to improve future recommendations, then deleted with your account
- Payment records: retained for six years after the transaction as required by UK tax and accounting regulations
- Communication logs: retained for two years for customer service quality and dispute resolution
- Analytics data: aggregated and anonymised data may be retained indefinitely; identifiable analytics data is deleted within 26 months
You may request deletion of your data at any time through your account settings or by contacting us at privacy@ninebaskets.com. We will respond within 30 days.
Your Rights
Under UK data protection law, you have the following rights over your personal information:
- Access: request a copy of the personal information we hold about you
- Correction: ask us to correct inaccurate or incomplete information
- Deletion: ask us to delete your personal data (we may need to keep some records for legal reasons)
- Restriction: ask us to limit how we process your data in certain circumstances
- Portability: receive your data in a format you can easily take to another service
- Object: object to processing based on our legitimate interests
- Withdraw consent: where processing is based on consent, you may withdraw it at any time — for example, unsubscribing from marketing emails
To exercise any of these rights, contact us at privacy@ninebaskets.com. We will respond within 30 days. There is no fee for most requests, though we may charge a reasonable fee if a request is clearly unreasonable or repetitive.
If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
Data Security
We take appropriate technical and organisational measures to protect your personal information, including:
- Encryption of data in transit (TLS) and at rest
- Secure sign-in via Firebase Authentication
- Access controls so only the right people can see your data internally
- Regular security reviews and monitoring
- Payment data handled entirely by Stripe, which meets the highest payment security standards — we never store your card numbers
No system is completely secure. If we become aware of a data breach that could affect you, we will let you know and notify the Information Commissioner\'s Office as soon as possible.
International Data Transfers
Some of our service providers (for example, Google Cloud Platform and Stripe) process data outside the United Kingdom. Where this happens, we ensure that appropriate safeguards are in place, such as:
- Approved legal agreements between us and the provider
- Transfers to countries the UK considers to have strong enough data protection
- Additional technical measures such as encryption
You may request details of the safeguards in place by contacting us at privacy@ninebaskets.com.
Children
Our services are intended for people aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe we have collected data from a child, please contact us at privacy@ninebaskets.com and we will delete it promptly.
Marketing Communications
We will only send you marketing emails if you have opted in. Every marketing email includes an unsubscribe link so you can opt out at any time. You can also manage your email preferences in your account settings.
Opting out of marketing does not affect transactional emails about your account, membership, or styling sessions — we will continue to send those as they are necessary to provide our services.
Changes to This Policy
We may update this Privacy Policy from time to time. If we make changes that materially affect how we handle your personal information, we will:
- Email you at least 14 days before the changes take effect (if you have an account)
- Post a notice on our website
- Update the "Last Updated" date at the top of this page
Your continued use of our services after the updated policy takes effect means you acknowledge the changes. If you do not agree, you may close your account before they come into force.
Contact Us
If you have questions about this Privacy Policy or how we handle your data, please contact us:
- Privacy enquiries: privacy@ninebaskets.com
- General enquiries: hello@ninebaskets.com
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection, at ico.org.uk.