Data Protection and Privacy

Information we or others collect

Browsing our site

By simply browsing our site, we do not collect any personally-identifiable information about you unless you log in. We use PostHog to see things like how many people visit our site and how they use it. Data collected includes your ISP and approximate location, browser, device, screen resolution, pages visited and how you interact with our site. You can read their privacy policy here.

Apart from this, we store some cookies on your computer which allow the functionality of the site to work. A session cookie allows you to use the shopping basket and remain logged in, a CSRF token which allows us to protect and verify your session and the start and end dates of your hire. None of these cookies contains personal information.

Creating an account or logging in

If you create an account or log in to our site, you will share some personal data with us. This includes your name, email address and profile picture. If you log in via Google or Facebook, they will be aware each time you log in to our site. We use Auth0 to manage our authentication so this information is shared with them. Auth0 do not know your passwords or have access to your booking or financial details. You can find out more here.

Contacting us

We use Freshdesk to help us provide excellent customer support. If you email, phone, WhatsApp or use the contact forms, you will share with us and Freshdesk certain information. This could include your name, contact details and any other details you tell us within the message. We use the details you provide to enable us to fulfill your request (for example, giving you details about suitable costumes) and monitor how we respond to customers. You can read more here.

Subscribing to our Newsletter

If you subscribe to our Newsletter, you will share with us certain information. This will include your email address and your name. We will only use these details to send you our newsletters, which you can unsubscribe from at any time. We use Octopus Email and Amazon AWS to send our newsletters and keep track of our mailing list. You can see how they use your details here.

Hiring Costumes from us

If you hire costumes from us, we will collect personal information about you. This will include your name, your address and your email address. You may also tell us other details as part of the ordering process. With these details we will also store a record of correspondence we have had with you, invoices we issue (including when and how they were paid) and any items you order from us. We store this information securely within the EU and only key members of staff have access to it. We use the information to provide our services to you, keep you informed, and help us tailor our services better to the needs of our customers. We use PostHog for data warehousing and will store metrics about your booking with them. We might also match this data to browsing data to give us a better picture of how you use our service. Your name, address, email and phone number will be shared with our couriers to allow them to deliver our costumes to you. We do not disclose any of your details to our couriers unless you place a booking with us.

Making a Card Payment

We use Stripe to take credit and debit card payments and prevent fraud. Stripe will collect certain personal details about you. This can include your name, address, payment details and what you are buying. Stripe will share some of these details with other financial, government and law-enforcement organisations -for example your bank- to enable the transaction to go through. You can find out more here.

Making a Bank Payment

We use Crezco to take bank payments using Open Banking. Crezco will collect certain personal details about you. This can include your name, address, payment details and what you are buying. Crezco will share some of these details with other financial, government and law-enforcement organisations. We don't disclose any of your details to Crezco unless you initiate a bank payment. You can find out more here.

Disclosing your details to others

If we sell the business, any of the details we hold will be transferred to the new owner.

We might exchange details with others to prevent fraud, protect our interests or to comply with legal requirements. This could include risk score information or details of late returns, damages or losses.

Questions, requests, updates and deletion

If you have any questions about how your data is used, need to update any of it, would like it deleted or would like a copy of the data we hold on you, please contact us.

If you log in via Facebook, you can delete your data and login by going to Facebook, clicking Settings → Security → Apps and Websites. Find the Costume Source application, click the Remove button and then follow the instructions.