Privacy policy

This is Custom Suit Co.'s privacy policy. It covers our website, ordering a suit, claiming a gift and applying to be a partner tailor. It is written to be read, not to be got past: if anything here is unclear, email us and we'll explain it.

1. What we collect

Before you order, nothing about your suit leaves your own device unless you ask it to. Your design and your measurements are kept in your browser while you work on them. If you press “Email me a link to pick up later”, we keep a copy for 30 days and use your email address for that one email. No account is made.

If you order your own suit without signing in, we first email a 6-digit code to the address you give, to check it's yours. While you enter it, we hold what you typed into the order form for up to an hour: your email address, your suit choices, any event date you gave, and any measurements you took on this device. No order and no account is made from it unless the code is entered. We delete it as soon as the code is used or its tries run out. If you never come back, it is deleted automatically within an hour after that hour ends. The email carries the code, how long it lasts, and a line saying you can ignore it if you didn't ask for it.

If you create an account, the same thing happens: we email a 6-digit code, and while you enter it we hold your name, your email address and a scrambled (hashed) version of the password you chose, for up to an hour. No account is made unless the code is entered, and what we hold is deleted in the same way.

If a partner tailor measures you in their shop before you have ordered, the tailor enters your name and email address, your phone number if you give it, whether you are 18 or older, your body shape and posture, and your measurements, and records that you agreed to get an email from us. If you are under 18, the tailor measures you only with a parent or guardian present, and records that they agreed. No account is made. We use the address only to email you the link to choose your suit, and one reminder, until you order.

When you order, we collect:

• Who you are: your name, email address, phone number if you give it, and a scrambled (hashed) version of your password. We never store the password itself.
• Your order: your cloth and style choices, delivery address, order history, what you paid and the state of the order.
• Your measurements and fit answers — sensitive information, and we treat it that way: the measurements you take or a partner tailor takes, your height and weight (used only to estimate sizes), the sizes you usually buy, posture and body-shape answers, fit preferences, measurements of clothes you already own, and your answers after delivery.
• Fit photos — also sensitive: photos from the neck down, only with your agreement, cropped on your own device before they are uploaded, plus a record of what you agreed to and when. We don't collect photos of anyone under 18. Their own policy is Fit photos and body data.
• Appointments: if you pick a partner tailor, your ZIP code, the times that suit you and any notes.
• Gifts: the recipient's name, their email address if you ask us to send it, and your message.
• Support: what you write to us, and our replies. We keep a copy of every email we send you.
• Payment: Stripe takes the payment and works out any sales tax. We are told that it succeeded, for how much and how much of it was tax. We never see or store your card number.
• Partner tailor applications: business and contact details, shop address, service areas, experience and availability.
• Which ad or link brought you here: if you arrive from an advertisement or a partner's link, we keep what that link carries: where the link was shown, the kind of link, the campaign name, which ad it was, the search words an ad was shown for, the click ID that Facebook adds to its links ("fbclid"), a partner tailor's referral code, the first page you landed on, and the date and time.
• The ordinary technical record: our hosting provider logs the requests your browser makes — your IP address, the page, the time and the browser — to keep the site running and to stop abuse.

2. Why we collect it

• To make your suit to your design and your measurements, and to deliver it.
• To take payment and keep the business records the law requires.
• To create your account and keep it secure.
• To match you with a partner tailor near you where there is one, and arrange the appointment.
• To have a person check every order before it is cut, and contact you if something looks wrong.
• To handle your fit check after delivery, and any adjustment or remake we agree to.
• To send order updates, gift codes, password resets and replies. These are about your order, not marketing.
• To pay partner tailors and suit makers.
• To see which advertising brings customers to us — see section 7.

3. What we never do

• We never sell your personal information, and we have never done so.
• Your measurements, your photos and your body data are never sold, never rented, and never used for advertising — not by us, and not by anyone we work with.
• We don't use face recognition, body scanning or health scoring, and we don't send photos to outside services for analysis.
• We don't send you marketing email you didn't ask for.

4. Who else sees it

Each one gets only the part it needs:

• Stripe (payments) receives your email address, a reference to your order, what you are buying and the amount. When you pay for your own suit at the finalize step, Stripe also receives the delivery name, address and phone number on your order, so it can work out the sales tax for that address. A gift buyer's payment, and a payment for an order from a partner tailor's link, carries no delivery address. You type your card details on Stripe's own page, under its privacy policy; they never pass through our site.
• Our email provider receives the address we are writing to and the contents of the message. That is Gmail, or Resend when it's connected, or a test mailbox while the site is still being set up.
• Netlify hosts the site and stores our database, so everything above is stored on Netlify's systems, together with the request logs in section 1.
• Meta (Facebook and Instagram) is told that a browser visited one of our marketing pages, and receives what any website visit reveals — the IP address and the page address. It is told nothing about your order, your measurements or your photos, and nothing at all unless you allow it on Your privacy choices.
• Partner tailors are independent businesses. If one measures you, they see your name, contact details, the appointment, your design and order, and the measurements and photos they take themselves. They never see photos you took.
• Suit makers see your design, cloth, measurements, posture grades and fit notes so they can make the suit, and the delivery name and address when they ship it. Suit makers never see your photos.
• When the law requires it: we may share information to answer a lawful request, to protect someone's safety, or as part of a sale of the business — in which case this policy follows it.

5. Gift buyers and recipients

• When you buy a gift you give us the recipient's name and, if you choose email delivery, their address. We use them to deliver the gift and help them claim it, and for nothing else.
• The buyer can see the gift code and follow its progress — claimed, made, shipped.
• The buyer never sees the recipient's measurements or photos. Those belong to the person wearing the suit.

6. The check before your suit is cut

A person on our team checks every order before it goes to the suit maker. They see what they need to check the fit: your name and contact details, your design, your measurements, the answers you gave while measuring, your photos, and any notes from you or your partner tailor. They never change a number you or your partner tailor gave us: they may ask you to measure again, adjust one of our own estimates (and we email you what changed), or get in touch. Every change is recorded, with the reason.

7. Cookies and what's on your device

This is everything we keep on your device. Only the last one is a choice:

• Your design and measurements in progress. Kept in your browser so you don't lose your work. They stay until you clear them — there's a button for that on Your privacy choices.
• Your answer about advertising. Once you say yes or no to the advertising question below, your browser keeps the answer so we don't ask again. The same button clears it.
• The sign-in cookie. Keeps you signed in for 7 days, or 30 if you tick “Stay signed in on this device”. Accounts can't work without it, so we don't ask: signing in is you asking. Sign out and it's gone.
• The emailed-code cookies. When you order your own suit without signing in, or create an account, a cookie marks which held details are yours while you enter the code we emailed (section 1). There is one for checkout and one for sign-up. Each is sent only to that page, lasts up to an hour, and is removed when the code is used.
• The payment cookie. When you pay at checkout without signing in (a gift, or an order from a partner tailor's link), a cookie lets us recognise the browser that paid, so we can sign you in to your new account afterwards. It is sent only to the payment pages, lasts up to 6 hours, and is removed once it has been used.
• The gift-code cookie. When you enter a gift code, or open a gift link, a cookie holds the code while you claim the gift, so that it is not kept in the page's address. It is sent only to the gift-claim page and lasts up to an hour.
• The order-saved cookie. When you save or place an order at checkout, a cookie notes which order this browser has just saved, with a short check code for the design and measurements kept in your browser at that moment. The page you land on uses it to clear that design and those measurements, which are on the order by then, and to leave alone anything you have changed since. It lasts up to 24 hours and is removed as soon as that page has used it.
• The “where you were going” cookie. If a sign-in fails, we remember the page you were heading to for up to an hour, so that resetting your password in this browser takes you back there. It is removed when it is used.
• The ad-source cookie. If you arrive from an advertisement or a partner's link, we remember what that link carried (listed in section 1) for up to 90 days so we can tell which advertising works. It is our own record: it is never sent to Meta or anyone else, and your browser can't read it. We treat it as part of running the site rather than something to ask permission for, but you can clear it any time on Your privacy choices.
• The Meta advertising pixel — your choice. If you allow it, Meta is told that you visited one of our marketing pages, so we can measure our ads and show them to people who have been here before. It does not load at all until you say yes, it never loads on sign-in, checkout, gift-claim or any account page, and you can change your mind at any time on Your privacy choices. If your browser sends a Global Privacy Control or Do Not Track signal we treat that as a no, and we don't ask.

Sharing with Meta for advertising is what California calls “sharing” for cross-context behavioural advertising. Because it is off unless you turn it on, opting out is the site's starting point rather than something you have to go and find.

8. How long we keep it

• Design and measurements in your browser: until you clear them, or your browser does.
• A “pick up later” link: 30 days, then the saved copy is deleted automatically. The link stops working at the same moment.
• What we hold while you enter an emailed code (ordering without signing in, or creating an account): up to an hour, deleted at once when the code is used or its tries run out, and otherwise automatically within an hour after that.
• The sign-in cookie: 7 days, or 30 with “Stay signed in on this device”. The ad-source cookie: up to 90 days. The emailed-code cookies, the gift-code cookie and the “where you were going” cookie: up to an hour. The payment cookie: up to 6 hours. The order-saved cookie: up to 24 hours.
• Fit photos: deleted automatically 90 days after your suit is delivered, or when any fit case closes, whichever is later; 30 days after an order is cancelled; and 180 days after the last activity on an order that never goes into production — or sooner if you ask.
• Our copies of emails we sent you: one year, then deleted automatically. We keep them that long so we can answer a question about an order you placed months ago.
• Your account, orders, measurements and support messages: we keep these while your account is open, because your measurements are what make a second suit easy. They are not deleted on a timer — ask us and we'll delete them (section 9).
• A walk-in record (a partner tailor measured you before you ordered): if you never order, it is deleted automatically 12 months after the last activity on it, within a day of that date. The last activity is the last time the tailor saved your details or measurements, or we emailed you your link. You don't have to wait: ask us and we'll delete it sooner (section 9). If you order, it is kept with your order, in the same way as the rest of your order.
• An order you've saved but not paid for: kept like any other order until you pay for it, you cancel it or we close it. After it is cancelled or closed it stays in your order history, kept the same way as your other orders.
• Payment and order records: after a deletion request we keep the minimum the tax and accounting rules require — what was sold, for how much, and when — and nothing about your body.
• Our hosting provider's request logs: kept on Netlify's own schedule, which we don't control.

9. Your rights, and how to use them

Wherever you live in the United States, we will do all of these for you. We don't ask which state you're in first.

• See what we hold. Ask, and we'll send you a copy. If you have an account, you can also download it yourself, any time, from your profile page.
• Correct it. You can change your details and your measurements in your account until you finalize an order; after that, ask us.
• Delete it. Ask, and we'll delete your account, your measurements, your photos and your fit answers, keeping only the payment and order records described above. If a suit that has been paid for has not reached you yet, we finish or cancel that order first.
• Delete your photos on their own, or withdraw your agreement to them, without closing your account. Our team will check your fit another way.
• Opt out of sharing for advertising. That's the switch on Your privacy choices, and your browser's Global Privacy Control signal does it for you.
• Be treated the same either way. Nothing here changes the price you pay or the service you get.

How to ask: open a support request from your account, or email hello@customsuitco.com with what you want us to do. We'll reply within 1 business day and finish the job within 45 days. We may have to check that the request is really yours before we delete anything — usually by writing to the address on the account. Someone may make a request for you; we'll ask you to confirm it first.

10. People under 18

• Our site isn't meant for children, and we don't knowingly collect anything from a child under 13.
• Someone under 18 doesn't hold the account: a parent or guardian creates it, orders, and claims a gift on their behalf.
• We never collect photos of anyone under 18. They are measured by a partner tailor where there is one, or at home with a parent or guardian helping, and the numbers alone are enough.
• If we learn we hold something we shouldn't, we delete it. Tell us and we'll deal with it that day.

11. Keeping it safe

• The site is served only over an encrypted connection (HTTPS).
• Passwords are stored scrambled (hashed), and an account locks itself after repeated failed sign-ins.
• People see only what their role needs: a partner tailor sees the customers they measure, and no one else.
• Photos sit in private storage with no public address, open only through links that expire in minutes, and every view by our team is logged.
• No system is perfect. If something goes wrong that affects you, we will tell you.

12. Changes and contact

If we change this policy, the date at the top changes with it, and we'll tell account holders about anything that matters. Questions, requests and complaints all go to the same place: a support request from your account, Help & support, or hello@customsuitco.com.

See also our terms of service, our Fit photos and body data policy and Your privacy choices.