The data controller for any personal data we hold about you is The Outnet IP, LLC a limited liability company incorporated in Delaware with registered office at 800 North State Street, Suite 304, Delaware,19901 (“we”, “us”, or “our”). 

This Privacy Notice applies to our collection and use of personal data collected via our websites and apps that link to it. 

We are responsible for ensuring that your data is held securely, that you are given accurate information about how your data is used, and that your rights regarding your data are respected. The products we sell are not aimed at individuals under the age of 18, we do not promote our products to this market, and our website is not designed to be attractive to this market. We cannot identify individuals under this age on our database. Please refer to our Terms & Conditions for more information. Please also read our Registration & Account Terms and Conditions which apply to you when you register for an account on our website or App.

We collect data from you when you visit our website or while using our associated apps (“website and Apps”). The data we collect includes: 

• name,
• email address,
• telephone number(s) and shipping/billing address,
• country of residence,
• financial details,
• recordings of calls made to the Customer Care team and the contents of communications with the Customer Care team,
• day and month of birth,
• favourite designers, and
• information regarding your browsing and shopping behaviour. 

Data is collected when you place an order, call our Customer Care team, register with us, opt in to our marketing communications, browse our site and use other services offered by our site. You are not required to provide us with any personal data but if you do not provide us with certain personal data we may be unable to provide services to you (e.g., we may be unable to accept an order or deliver goods to you).

In addition to the personal data we collect directly from you, we may also receive personal data about you in connection with the acquisition of assets or a business. Where this occurs, we receive such personal data from the seller as part of the transaction and process it in accordance with this Privacy Notice and applicable law. The categories of personal data we receive, and the purpose for which we use such personal data are the same as those described in this Privacy Notice. 

The data we collect is used to take your order, process payment and deliver your purchase to you. We also use it to deliver marketing communications, give access to services for registered users, personalise your visit to our site and provide assistance via our Customer Care team.

We must have a valid reason for processing your personal data and we may not collect, store or use data about you that is not compatible with that reason. Our processing must also be based on a lawful basis set out in applicable data protection law. 

There are four lawful bases that we rely on for our use of your personal data: 

• Performance of a Contract,
• Our Legitimate Interests as a business,
• A Legal Obligation we are required to follow, and
• Consent which you provide to us (if you have given your consent to our use of your personal data, you are entitled to withdraw this consent at any time).

The data we process, and the legal basis we use to process it is detailed below:

• CONTRACT
• CONSENT
• LEGITIMATE INTERESTS
• LEGAL OBLIGATION

COOKIES

Our websites use cookies and similar technologies such as pixels and beacons to collect information. Such technology is widely used in order to make sites work, or work more efficiently, as well as to provide information to the owners of the site, for example, your language preference, sign in information or usage of the site’s services and applications. Cookies are also used to show the user products and services based on their preferences as well as to allow third-party partners to deliver relevant advertising. Full information on cookies and how you can set your preferences can be found in our Cookie Notice. 

Access to data will be limited to our staff who have been specifically trained and authorised for this processing. 

Your personal data will also be transmitted to third parties that we use to provide certain services; these parties have been rigorously assessed for the way in which they manage personal data and may only use your data for the exact purposes that we specify in the contract with them (acting as Data Processors on our behalf).  

The third parties in question belong to the following categories:

• Companies such as payment service providers that help us to process your order.
• Professional service providers, such as email delivery suppliers, IT software providers, marketing and research agencies, analytics companies and website hosts who help us to run our business.
• Aggregated data that does not identify individuals is shared with internal teams, relevant service providers and brand partners for business planning purposes.

We will also share your personal data with third parties in the following categories that may process it as Data Controllers in their own right 

• Companies that help us to deliver your purchases such as couriers and parcel delivery companies who deliver your goods.
• Credit reference agencies, law enforcement and fraud prevention agencies, so we can help tackle fraud.
• Governmental bodies and regulators (to comply with our legal obligations and voluntarily where we consider in our sole discretion that sharing your personal data is in our business interests).

We may also transfer your personal data to a buyer or potential buyer if our assets are acquired by another organisation. The purchaser will be required by law to use your personal data only as described in this Privacy Notice.

Some of the third parties listed in the previous section 'Who will process your data?' may be located in countries outside the United Kingdom (UK) or European Economic Area (EEA) that nevertheless offer an adequate level of data protection, as established by specific decisions of the European Commission and/or UK Secretary of State (as appropriate).

The lawful transfer mechanism of your personal data to countries that do not belong to the UK or EEA and that have not been assessed as offering adequate levels of protection will be performed only

1. after Standard Contractual Clauses have been put in place alongside any supplementary measures that are deemed necessary on a case-by-case basis;
2. if the transfer is necessary for the purchase of goods offered on our website or for registration on the website or use of services on the website; or
3. for the management of your requests.

For details of the appropriate safeguards in place for a particular transfer (or a copy of the same), please contact our Customer Care team at privacy@theoutnet.com or +44 330 022 5700.

We keep your personal data for a limited period of time in line with our data retention policy. The specific retention period will vary according to the reason for processing your personal data. After this period, your data will be permanently erased or otherwise irreversibly rendered anonymous.

You have the following rights under data protection law:

• The right to request a copy of the personal data that we hold about you.
• The right to ask us to correct any inaccuracies in the personal data we hold about you.
• The right to withdraw your consent to processing (including marketing).
• The right to object to our processing of your personal data on the basis of our legitimate interest.  
• The right to request the deletion of your personal data in certain circumstances.
• The right to data portability (i.e., to transfer certain of your data to another entity in a commonly used machine readable format).
• The right not to be subject to automated decision making including profiling which produces legal or substantially similar effects. We use profiling to make relevant and tailored recommendations to you. Profiling is the automated processing of personal data to evaluate certain things about an individual, for example, people who are interested in particular designers or products. We do not use automated decision-making processes that would have a potentially damaging effect on you. But if we did, you have the right to obtain human intervention, express your point of view, obtain an explanation of the decision and challenge it.

To exercise any of these rights, you can sign in to your account, contact our Customer Care team at privacy@theoutnet.com or +44 330 022 5700 or write to our Data Protection Officer (DPO) by email to DPO@theoutnet.com.

If you believe that we are processing your data in breach of data protection law of this Privacy Notice, you have the right to lodge a complaint with the Supervisory Authority of the jurisdiction in which you are located.  If you are located in an EEA jurisdiction, details of the relevant Supervisory Authority can be found here: https://www.edpb.europa.eu/about-edpb/about-edpb/members_en. If you are located in the UK, the relevant Supervisory Authority is the Information Commissioner’s Office: https://ico.org.uk.

As we are established outside of the European Union and United Kingdom, we are required to appoint representatives in the EU and UK to act as a point of contact for residents of the EEA or UK whose data we process. We have appointed: (i)

The Outnet Operations (IT) S.r.l as our representative in the EU; and (ii) The Outnet Operations (UK) Limited as our representative in the UK. Our EU and UK representatives can be contacted at privacy@theoutnet.com.

We are committed to taking appropriate technical, physical and organisational measures to protect personal information against unauthorised access, unlawful processing, accidental loss or damage, and unauthorised destruction.

In particular, we use security measures that employ pseudonymisation or encryption of your data to ensure the confidentiality, integrity, and availability of your data as well as the resilience of the systems and services that process them. We have the ability to restore the availability and access to personal data in the event of a physical or technical incident. Furthermore, we undertake to test, verify and regularly evaluate the effectiveness of technical and organizational measures in order to ensure continuous improvement in the safety of processing.

We keep our Privacy Notice under regular review in order to reflect changes in our services and in data protection law. This Privacy Notice was last updated on 4th May 2026. We will contact you if we make significant changes in the Privacy Notice.