Privacy Policy

Last updated: 8th August 2026

This Privacy Policy explains how OUTCÆST® (the "Controller," "we," "us," or "our") processes the personal data of users ("you" or "your") who visit our website, use our services, contact us, submit a review, or make a purchase from https://www.outcaest.com/ (the "Site").

OUTCÆST® is operated by Jazz Dharma, a sole trader trading as OUTCÆST®. We are the Data Controller responsible for your personal data.

1. The Data We Collect and Our Lawful Basis

We only collect and process personal data when we have a valid Lawful Basis for doing so under the UK GDPR.

Category of Data	What We Collect	Purpose for Processing	Lawful Basis (GDPR)
Contact Data	Name, Email Address, Phone Number and any other contact information you provide.	To respond to enquiries, provide customer service and send important communications relating to your order.	Contract, where the communication relates to an order, or Legitimate Interests in operating our business and providing customer service.
Order Data	Name, Billing Address, Shipping Address, Items Purchased, Order History, Delivery Information, Returns and Refunds.	To process and fulfil your order, arrange delivery, manage returns and refunds, prevent fraud, resolve disputes and maintain appropriate business records.	Contract, to fulfil your purchase; Legal Obligation, to maintain tax and accounting records; or Legitimate Interests, to prevent fraud and resolve disputes.
Marketing Data	Your Email Address, Marketing Preferences, Consent Records, Sign-Up Date and Unsubscribe Date.	To send promotional emails, product updates, special offers and other marketing communications.	Consent, where you have asked to receive marketing, or Legitimate Interests where applicable electronic-marketing rules allow us to contact existing customers about our own similar products and they were given a clear opportunity to opt out.
Usage Data	IP Address, Browser Type, Device Information, Pages Viewed, Site Interactions, Referral Information and Time Spent on the Site.	To operate, secure and improve the Site, diagnose technical problems, prevent fraud and understand how visitors use our services.	Legitimate Interests, where necessary to operate, secure and improve the Site, or Consent for non-essential analytics, advertising and behavioural-tracking technologies.
Transaction Data	Payment Status, Amount Paid, Payment Method and Transaction Reference.	To process payments, issue refunds, prevent fraud and maintain transaction records.	Contract, to facilitate the transaction, or Legal Obligation, to maintain appropriate financial records.
Correspondence Data	Emails, Contact Form Submissions and other communications you send to us.	To respond to enquiries, provide customer support and maintain appropriate records of complaints or disputes.	Contract, where the communication relates to an order, or Legitimate Interests in operating our business and providing customer service.
Review Data	Your Name or Chosen Display Name, Rating, Review Text and any Photograph or Video you choose to submit.	To collect, verify and display genuine customer feedback and improve our products and services.	Legitimate Interests in obtaining and displaying customer feedback. We will seek additional permission before using identifiable review photographs, videos or sensitive personal information in separate advertising where required.

Full payment-card details are collected and processed directly by our payment providers, such as Stripe or PayPal. OUTCÆST® does not store your full payment-card details.

We do not intentionally ask you to provide medical, diagnostic or other sensitive personal information. Please do not include this information in a review or general enquiry unless it is necessary for us to assist you. If you voluntarily provide sensitive information, we will handle it only as reasonably necessary to respond to your enquiry and in accordance with applicable data protection law. We will not publish or use this information for marketing without your explicit permission.

Where we ask for information that is necessary to process an order, providing that information is required so that we can enter into and perform our contract with you. If you do not provide it, we may be unable to accept or fulfil your order.

Note on Cookies: We use Cookies to power and improve our Site. For specific details on the types of cookies we use and how to manage them, please refer to our dedicated Cookie Declaration.

2. How We Share Your Personal Data

We will share your personal data only with trusted third parties necessary to run our business or when required by law.

Service Providers: We share data with vendors who perform essential functions on our behalf, such as:
Big Cartel (E-commerce platform).
Stripe and PayPal (Payment processing—we never store your full payment card details ourselves).
Shipping and Fulfilment Partners (to deliver your order).
Mailchimp (for email marketing communications).
Fera (for displaying reviews).
Cookiebot (for managing your cookie consent).
Analytics and Advertising Providers (where you have consented to the use of the relevant non-essential Cookies or tracking technologies).
Professional Advisers, such as accountants, insurers or legal advisers, where reasonably necessary.

Some service providers may process personal data outside the United Kingdom. Where this involves a restricted international transfer, we take reasonable steps to ensure that an appropriate legal transfer mechanism is in place. This may include UK adequacy regulations or appropriate contractual safeguards, such as the UK International Data Transfer Agreement or the UK Addendum to the European Commission's Standard Contractual Clauses. You may contact us for further information about the safeguards relevant to your personal data.

Legal Requirements: We may disclose your information to comply with any applicable legal obligation, including responding to requests from competent law enforcement agencies, regulators, or courts.

3. Your UK GDPR Rights

Under the UK GDPR, you may have the right to request certain actions regarding your personal data. These rights are not absolute, may depend on the Lawful Basis on which we process your information and may be subject to legal exceptions.

Right of Access (SAR): You have the right to ask for a copy of the personal data we hold about you.
Right to Rectification: You can ask us to correct inaccurate or incomplete data we hold about you.
Right to Erasure ('Right to be Forgotten'): You can ask us to delete your personal data where there is no good reason for us to continue processing it.
Right to Restriction of Processing: You can ask us to limit the way we use your personal data in certain circumstances.
Right to Data Portability: You can request that we provide certain personal data to you or another service provider in a structured, commonly used and machine-readable format where this right applies.
Right to Object: You have the right to object to the processing of your data in certain circumstances, particularly where we rely on Legitimate Interests.
Right to Withdraw Consent: Where we rely on your Consent, you may withdraw it at any time. Withdrawing Consent will not affect the lawfulness of processing carried out before it was withdrawn.
Right to Object to Direct Marketing: You have an absolute right to object to the use of your personal data for direct marketing. You may unsubscribe by using the link included in a marketing email or by contacting us. If you unsubscribe or object, we will stop using your information for direct marketing, although we may retain limited information on a suppression list to ensure that we respect your request.

Automated Decision-Making: OUTCÆST® does not make decisions about you based solely on automated processing that produce legal or similarly significant effects.

4. How to Exercise Your Rights and Complaints

To exercise any of your rights listed above, please contact us at [email protected]. We may need to verify your identity before processing your request. You will not normally have to pay a fee to exercise your rights. We will respond without undue delay and normally within one month, although data protection law allows additional time in certain complex circumstances.

Right to Lodge a Complaint: If you are unhappy with how we have used your data, you have the right to complain to the supervisory authority for data protection in the UK: the Information Commissioner's Office (ICO). You can find their contact details on the ICO website (ico.org.uk).

5. Data Security and Retention

We take reasonable technical and organisational measures designed to protect your personal data against accidental loss, unauthorised access, misuse, alteration or disclosure. We retain your personal data only for as long as reasonably necessary for the purposes for which it was collected, including to satisfy legal, tax, accounting, reporting and dispute-resolution requirements.

Order, Transaction and Accounting Data: We retain these records for the period required by applicable tax and accounting law. Where we operate as a UK sole trader, relevant business records will generally need to be retained for at least five years after the 31 January submission deadline for the relevant tax year.
Customer Service and Correspondence Data: We retain this information for as long as reasonably necessary to respond to the enquiry, resolve a complaint, manage a dispute or establish, exercise or defend a legal claim.
Marketing Data: We retain this information until you unsubscribe, withdraw your Consent or object to receiving direct marketing. We may retain limited information on a suppression list so that we can continue to respect your request.
Review Data: Review content may remain published while it continues to be relevant and accurate, unless you ask us to remove personal information and we have no overriding lawful reason to retain it.
Usage Data and Cookie Information: Applicable retention periods are described in our Cookie Declaration and may also depend on the settings of the relevant service provider.

When personal data is no longer required, we will delete or anonymise it unless we are legally required or otherwise permitted to retain it for longer.

6. Children's Data and Third-Party Links

Children: Our Services are not intended for use by children, and we do not knowingly collect personal information about children.
Third-Party Links: Our Site may contain links to third-party websites. If you follow these links, you should review their privacy policies, as we are not responsible for the privacy practices of external sites.

Changes to This Privacy Policy: We may update this Privacy Policy from time to time to reflect changes to our business practices, service providers or legal obligations. We will publish the updated version on this page and amend the "Last updated" date above. Where a change materially affects how we use your personal data, we will take reasonable steps to bring it to the attention of affected individuals.

Contact Information

OUTCÆST® is operated by Jazz Dharma, a sole trader trading as OUTCÆST®.

For any questions about this Privacy Policy or how we use your personal data, please contact us by e-mail at [email protected].