• Free UK Shipping

    On all orders over £30

  • Same Day Dispatch

    On orders placed before 3pm

  • Easy Returns

    14 day money back guarantee

  • Loyalty Points

    Earn points on every order

Privacy policy

Last updated: 17 September 2026

This privacy policy explains how Fancy Dress Club collects, uses, shares and protects your personal information when you visit fancydressclub.co.uk, buy from us, join our rewards programme, leave a review, sign up for marketing or contact us. It also explains your rights under UK data protection law (the UK GDPR, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations).

1. Who we are

Fancy Dress Club is a trading name of Arrow Headz Ltd (company number 15448560, registered office 27 Castle Quarter, Norwich, NR1 3DD). Arrow Headz Ltd is the controller of your personal information.

Contact us about privacy at support@fancydressclub.co.uk or by post to Arrow Headz Ltd, 29 Eliburn Industrial Estate, Livingston, West Lothian, EH54 6GQ, Scotland.

2. Information we collect

Information you give us

  • Contact and account details: name, email address, phone number, and billing and delivery addresses.
  • Order details: products bought, prices, discounts used, returns and refunds. Payments are handled by our payment providers, and we don't see or store your full card number.
  • Customer service: messages, emails, photos you send us (for example of a damaged item) and return requests.
  • Reviews: your review, rating, display name and any photos you choose to upload.
  • Marketing preferences: whether you have signed up to emails or texts, and any preferences you share with us.

Information collected automatically

  • Device and usage data: IP address, browser and device type, pages viewed, products viewed or added to basket, and how you arrived at our site. This is collected using cookies and similar technologies (see section 7).
  • Email engagement: whether our emails are opened and which links are clicked.

Information from others

  • Payment providers (such as Shopify Payments, PayPal and Klarna) tell us whether a payment was successful and share fraud-check results.
  • Couriers provide delivery status updates.
  • Advertising and social media platforms may share aggregated or pseudonymised information about how people interact with our ads.

3. How we use your information and our lawful bases

What we do Lawful basis
Process, deliver and support your orders, returns and refunds, and send order and delivery emails Contract
Run your customer account and rewards account Contract
Keep tax and accounting records Legal obligation
Prevent fraud and keep our website secure Legitimate interests (protecting our business and customers)
Send marketing emails and texts Consent. For existing customers, we may instead email you about similar products under the "soft opt-in" (lawful basis: legitimate interests). You can opt out at checkout and in every email.
Send abandoned basket and browse reminders Consent, where you have subscribed to marketing
Invite you to review a purchase and publish your review Legitimate interests (helping other customers choose)
Use analytics and advertising cookies, and measure and personalise ads Consent (via our cookie banner)
Improve our website, products and service Legitimate interests
Respond to your questions and complaints Contract or legitimate interests
Establish, exercise or defend legal claims Legitimate interests

We need your name, contact details, delivery address and payment information to process your order. Without them we can't accept your order.

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects. Our payment providers use automated fraud screening, and if an order is flagged, a person reviews it.

4. Who we share your information with

We share personal information only where needed with service providers who act on our instructions, and with other organisations that use it for their own purposes (such as PayPal, Klarna, Meta and TikTok, whose own privacy policies also apply). These include:

  • Shopify: our e-commerce platform, which hosts our website, checkout and customer accounts. Where Shopify uses your information for its own purposes (for example Shop Pay), Shopify's own privacy policy applies.
  • Payment providers: Shopify Payments, PayPal, Klarna, Apple Pay and Google Pay, to take payments and prevent fraud.
  • Klaviyo: to send order-related and marketing emails and texts, and to manage customer service messages.
  • Smile.io: to run our loyalty and rewards programme.
  • Judge.me: to collect, verify and display product reviews.
  • Delivery companies: to deliver your orders and returns.
  • Advertising and analytics partners: such as Google, Meta (Facebook and Instagram) and TikTok, only where you have given consent through our cookie banner. They help us measure and improve our advertising.
  • Accounting and business software: such as Xero and Link My Books, to keep our financial records.
  • Professional advisers: such as accountants and lawyers, and authorities such as HMRC, the police or regulators where the law requires it.
  • Any buyer of our business, if Arrow Headz Ltd or the Fancy Dress Club business is sold or restructured.

We never sell your personal information.

5. International transfers

Some of our service providers (including Shopify, Klaviyo, Smile.io, Judge.me, Google, Meta and TikTok) may process personal information outside the UK, for example in the European Economic Area, Canada or the United States. Where this happens, we make sure appropriate safeguards are in place, such as UK adequacy regulations (including the UK Extension to the EU–US Data Privacy Framework), the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses.

6. How long we keep your information

  • Order and transaction records: 6 years after the end of the financial year they relate to, for tax and accounting purposes.
  • Customer and rewards accounts: while your account is active. We review accounts with no activity for 3 years and delete or anonymise them.
  • Marketing data: until you unsubscribe. After that, we keep a suppression record so we don't contact you again.
  • Customer service messages and return requests: up to 2 years after the matter is closed, unless needed for a longer period (for example a legal claim).
  • Published reviews: for as long as they are displayed, unless you ask us to remove them.
  • Cookies: for the periods shown in our cookie banner.

7. Cookies

We use cookies and similar technologies. Some are strictly necessary for the website and checkout to work (for example to remember your basket), and these don't need consent. We only use analytics, personalisation and advertising cookies (including those from Google, Meta, TikTok, Klaviyo, Smile.io and Judge.me) if you accept them in our cookie banner. You can change your choice at any time using the cookie preferences link on our website, or by changing your browser settings.

8. Marketing

You can unsubscribe from marketing emails using the link in any email, reply STOP to texts, or contact us. Unsubscribing won't stop service messages about your orders.

9. Children

We sell costumes for children, but our website and services are intended for adults. You must be 18 or over to place an order. We don't knowingly collect personal information from children under 13. If you believe a child has given us their information, please contact us and we will delete it.

10. Keeping your information secure

We use appropriate technical and organisational measures to protect your information, including encrypted connections, access controls and reputable service providers. No method of transmission over the internet is completely secure, but we work hard to protect your data.

11. Your rights

Under UK data protection law you have the right to:

  • access a copy of your personal information;
  • have inaccurate information corrected;
  • have your information deleted;
  • restrict how we use your information;
  • object to our use of your information, including for direct marketing (this right is absolute);
  • receive your information in a portable format; and
  • withdraw your consent at any time, where we rely on consent.

To exercise any of these rights, email support@fancydressclub.co.uk. We may need to verify your identity. We will respond within one month, which may be extended in certain circumstances. There is normally no charge.

12. Complaints

If you are unhappy with how we have handled your personal information, please contact us first at support@fancydressclub.co.uk. We will acknowledge your complaint within 30 days, investigate it, keep you updated and tell you the outcome without undue delay.

You also have the right to complain to the Information Commission (formerly the Information Commissioner's Office, ICO), the UK data protection regulator: ico.org.uk/make-a-complaint, telephone 0303 123 1113.

13. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated. If we make significant changes, we'll let you know by email or on our website.

Back to top