Privacy Policy

Last updated: 18 July 2026

Rogue Fashion is a personal, non-commercial style community run by Felix Bonsu. This policy explains how your personal information is handled when you use roguefashion.uk. For anything at all about your data, email [email protected].

For the information described here, Felix Bonsu is the data controller, the person responsible for it under UK data protection law (the UK GDPR and the Data Protection Act 2018).

What we collect, why, and our lawful basis

1. Your account

If you create an account, we collect your email address and name, and a password which we store only as a secure one-way hash, we never see or keep the password itself. We use these to sign you in, to keep you signed in with a session, and to save what you choose to keep: the looks you save, the members you follow, the looks you like and your Fashion Giant votes, so they follow you across your devices. Our lawful basis is your consent and our legitimate interest in providing the account features you asked for. You can delete your account and everything in it at any time by emailing us. Your account and its data live in our database, run for us by Cloudflare (see "Who we share data with").

2. Newsletter sign-up

If you join The Rogue Edit, we collect your email address. We use it only to send you the newsletter. Our lawful basis is your consent: we use double opt-in, so you're not added until you click the confirmation link we email you, and you can withdraw consent at any time by clicking "unsubscribe" in any email. The list is run for us by EmailOctopus (see "Who we share data with").

3. Submitting your story

If you use the "Share your story" form, we collect the name, email address and story (and any links) you choose to give. We use these to read your submission and consider featuring you. Our lawful basis is your consent. Your submission is sent to our email inbox at [email protected].

4. Emails you send us

If you email us, we keep your message and contact details so we can reply and follow up. Our lawful basis is our legitimate interest in responding to you.

5. Technical and security data

When you visit, our hosting provider (Cloudflare) automatically processes your IP address and basic request information to deliver the pages and protect the site from attacks. Our lawful basis is our legitimate interest in running a secure, working website. We don't use this to identify or track you.

6. Analytics

We use Cloudflare Web Analytics to understand, in aggregate, how the site is used, such as which pages are popular and where visitors arrive from. It is cookieless: it sets no cookies, uses no local storage, doesn't fingerprint your device, and doesn't track you across other websites. It cannot identify you. Because it stores nothing on your device, it needs no consent banner. Our lawful basis is our legitimate interest in seeing how the site performs.

Things that stay on your device

Some choices are stored only in your own browser, using a technology called local storage, and never leave your device. This always covers your Style DNA quiz result and any wall messages you write (the wall isn't connected to accounts yet, so for now only you can see them). It also covers your saved looks, follows, likes and votes while you're signed out. Once you sign in, those four are saved to your account instead (see "Your account") so they work across your devices. You can clear anything held on your device at any time by clearing your browser's site data for roguefashion.uk.

Who we share your data with

We do not sell your data, and we don't share it for anyone else's marketing. We rely on a small number of trusted providers who process data on our behalf, under contract:

• Cloudflare hosts the website, runs the database that stores accounts and their data, provides our cookieless analytics, and routes email sent to our address. Their privacy policy.
• EmailOctopus (a UK company) runs our newsletter list and sends those emails. Their privacy policy.
• Brevo (a French company) sends our account emails, the "confirm your email" and "reset your password" messages. Their privacy policy.
• Google: our inbox is a Gmail account, so a message to [email protected] is delivered there for us to read. Their privacy policy.

We'll also disclose information if the law requires it (for example, a valid legal request).

Links to shops and other sites

When you click a "shop" link to a retailer such as Zara, ASOS or Nike, you leave our site and that retailer's own privacy policy takes over. We add a simple label to those links so we can see which are useful. It doesn't tell us who you are.

Sending data outside the UK

EmailOctopus is UK-based and Brevo is in the EU (France). Cloudflare and Google are US companies, so some data may be processed outside the UK. Where that happens, it's protected by the safeguards UK law requires, such as the UK International Data Transfer Agreement (or Addendum), or the UK extension to the EU–US Data Privacy Framework.

How long we keep it

• Account: kept while your account is open. Delete your account (email us) and its data, your saved looks, follows, likes and votes, is removed.
• Newsletter: until you unsubscribe (one click in any email), after which your address is removed or suppressed so we don't email you again.
• Story submissions and emails: for as long as we need them to deal with your message, then deleted. You can ask us to delete them sooner.
• Technical, security & analytics data: held only briefly by Cloudflare, per their retention policy; analytics is aggregate and not tied to you.
• On-device data: stays until you clear it.

Your rights

Under UK data protection law you have the right to: access the personal data we hold about you; correct it; have it deleted; restrict or object to how we use it; and receive it in a portable form. Where we rely on consent, you can withdraw it at any time. To exercise any of these, email [email protected]. It's free, and we'll respond within one month.

Complaints

If you're unhappy with how we've handled your data, please tell us first so we can put it right. You also have the right to complain to the UK regulator, the Information Commissioner's Office (ICO): ico.org.uk, or their helpline on 0303 123 1113.

Children

Rogue Fashion isn't directed at children, and we don't knowingly collect data from anyone under 16. If you believe a child has given us their information, email us and we'll delete it.

Cookies and local storage

We don't use tracking or advertising cookies. If you sign in, we set one essential session cookie so you stay logged in, it isn't used to track you. Our host may also set a single essential security cookie. Our analytics is cookieless. We use your browser's local storage for the on-device features described above. There's nothing to consent to for tracking, because we don't do any. See our Cookies & Storage page for the detail.

Changes to this policy

If we change how we handle your data, we'll update this page and the "last updated" date at the top. For significant changes affecting newsletter subscribers, we'll say so in an email.

Questions about any of this? Email [email protected]. A real person (Felix) reads it.