Legal
Privacy
The heaviest thing we hold about you is neither an address nor a password — it is the taste profile the curator assembles while you talk to it. The sections below follow that profile and everything that travels with it, from your first message to the day it is deleted.
Last updated:
Who is responsible
The controller for everything described on this page is Trendshops Data LTD, 41 DEVONSHIRE STREET, W1G 7AJ London, United Kingdom. The rest of the company details, the VAT number among them, are on the imprint page, which is linked from the foot of every page.
What we hold
An anonymous visitor id, your language, country and theme choices, whatever you said to the curator and the taste profile it built from that, and the outbound clicks you made. If you created an account, your email address as well. Your IP address is never stored as such — only a one-way hash of it, which proves a consent was given without saying by whom. If you run a shop and asked us not to fetch it, we hold the address you wrote from, your note and a one-way hash of your IP next to the host you named.
Why we are allowed to hold it
The account and the curator run on the contract between us (Art. 6(1)(b) GDPR): without an address there is no login, and without your messages there is no curator. Aggregate counts and abuse defence run on our legitimate interest (Art. 6(1)(f)). Keeping proof of your cookie choice is a legal obligation (Art. 6(1)(c) with Art. 7(1)). Analytics and marketing cookies run on your consent alone (Art. 6(1)(a)), and refusing costs you nothing but the analytics.
For how long
Curator messages 90 days, sessions and taste profiles 180 days after your last visit, outbound click records 90 days, proof of consent 730 days because that is how long we may have to show it. Aggregate daily counts stay indefinitely — they carry no one's identity and deleting them would rewrite last month's revenue. A request not to fetch a shop keeps that address, note and IP hash 365 days; the block itself stays for as long as you want it, because the block is what you asked for.
Who else sees it
Only the processors listed below, each for one job. Your messages to the curator go to the model that answers them; your email address does not, and there is no place in the prompt where it could.
What you can ask for
A copy of everything we hold about you, its correction, or its complete removal — the first and the last are buttons on your account page, and we do not ask why. You may object to processing based on legitimate interest, withdraw a consent at any time without affecting what was lawful before, and complain to your national data protection authority.
Cookie choice
Everything except the strictly necessary is off until you say otherwise, and closing the banner is a refusal, not a silence we read as yes. You can reopen the choice from the footer of any page.
Who processes data for us
| Country | What it does |
|---|---|
| US | Runs the curator. Sees your messages and your taste profile, never your email or your IP. |
| DE | Records outbound clicks and settles commission with the networks. |
| DE | Supplies the shop catalogue and the sale-section addresses we mirror. |
| US | Delivers the sign-in and account emails; sees your email address. |