Privacy policy

Clydesdale is a clothing brand based in Yerevan, Armenia. We decide how the personal data described here is processed. Write to info@clydesdale.am or call +374 44 772 554 about anything in this policy.

We process personal data under the Law of the Republic of Armenia “On Protection of Personal Data”. Under its Article 8, we process data only with your consent or where the law directly provides a basis for it. Data you give us to place an order is used for that order, as Article 9(4)(2) allows for data received under a contract with you.

To deliver your order and contact you about it we keep:

• your name, phone number and, if you give it, your email;
• the delivery city and address and any delivery note;
• what you ordered (items, sizes, quantities), prices, any promo code, delivery fee and totals;
• the currency you chose and, for currencies other than the dram, the Central Bank of Armenia rate used, its date and the converted amounts;
• the date of the order and its status.

We call the phone number to confirm delivery. With the order number and that phone number or email, anyone can look up the order's status on the order tracking page, so keep your order number to yourself. If you're signed in, the order is also linked to your account.

An account is optional. If you open one we keep:

• your first and last name, email, phone number and preferred language;
• your password, stored only as a one-way scrypt hash that nobody, including us, can turn back into the password;
• whether and when your email was confirmed;
• the addresses you save (label, recipient's name, phone, city, address, note);
• your bag and favourites, so they follow you to other devices;
• the date you joined and when you last signed in.

When you're signed in, a session is kept on our server for up to 30 days; we store only a hash of its key, never the key itself. For your security we record each sign-in, failed password attempt and password change with its time, the sign-in method, your IP address and your browser's user agent. You can see recent sign-ins under Security in your account.

The support chat keeps your messages, the photos or PDF files you attach, our replies, when they were sent and read, and, if you give them, your name and email. If you're signed in, the conversation is linked to your account. If not, a random key in a cookie lets your browser find the conversation again; we store only a hash of it. Attachments can be opened only by you and our team.

When a new conversation starts, our team gets a notification in its Telegram group with your name and email (if given), the first 500 characters of your first message and how many files you attached. Your files are not sent to Telegram. Telegram is a third-party service and processes this under its own privacy policy.

The newsletter is optional and needs your consent: you tick a box when you subscribe. We keep your email address, the language you subscribed in, the date, and the exact wording you agreed to, as a record of that consent. We use the address only to send you Clydesdale news and never share it with advertisers.

You can withdraw your consent at any time with the unsubscribe link in every newsletter, on the unsubscribe page linked at the bottom of every page, or by writing to info@clydesdale.am. After you unsubscribe we keep a note that the address unsubscribed, so it isn't mailed again by mistake; ask us and we'll delete it entirely.

On your first visit we suggest a shopping destination, language and currency from the country you're visiting from, and you can change all three. To find it, our server sends your IP address to country.is, a free geolocation service, which returns only a country code. We keep the result in the server's memory for up to 24 hours and don't store it. Once you confirm your choices they're saved in cookies and no lookup is made.

Exchange rates are downloaded from the Central Bank of Armenia. No personal data is sent to it.

Strictly necessary cookies and storage are always on, because the shop needs them to work. Optional ones (functional, analytics and marketing) are used only after you allow them in the welcome window or under Cookie settings at the bottom of every page, where you can also withdraw your consent at any time. There are no analytics, advertising or social media trackers on the site at the moment.

Strictly necessary:

• cl_region, cl_lang, cl_currency, cl_gender: your shopping destination, language, currency and collection (1 year);
• cl_consent: your cookie choice (6 months, then we ask again);
• cl_session: keeps you signed in (30 days);
• cl_chat: finds a guest's support conversation (180 days);
• cl_oauth: protects a Google or Apple sign-in while it's in progress (10 minutes); cl_welcome: shows the welcome message once after signing up (2 minutes);
• in your browser's local storage: your bag, favourites and light or night theme, and two technical entries that keep your bag in sync with your account.

Functional, only with your consent: the measurements you enter in the size finder, kept in your browser's local storage and deleted when you withdraw consent.

You can delete these in your browser settings. The shop still works, but it will forget your choices and sign you out.

We don't sell your data or share it with advertisers. It's seen by the Clydesdale team, through a password-protected admin, to handle orders, deliveries, returns and your questions. When a team member opens or changes a customer account, it's written to an internal audit log. It's also received by:

• our hosting provider, which runs the server where the site and its database are stored;
• the courier or team member who delivers your order: your name, phone, address and the amount to pay;
• country.is: your IP address only, as described above.

Telegram receives the new-chat notification described above.

We'll also disclose data where Armenian law obliges us to, for example at the lawful request of a state body.

As Article 9(2) of the law requires, we keep data only as long as it's objectively needed for its purpose:

• orders: as long as needed to deliver them, handle returns, exchanges and warranty claims, and meet our accounting and tax obligations;
• your account, saved addresses, bag and favourites: until you delete them or ask us to close the account;
• sessions and email confirmation or password links: deleted 30 days after they end or expire;
• sign-in and security records: 12 months;
• the admin audit log: 2 years;
• chat conversations and attachments: as long as needed to answer you and deal with the orders they concern; ask us and we'll delete them.

Passwords are stored only as scrypt hashes, sessions and email links only as hashes of their keys, and the session and chat cookies can't be read by scripts on the page. Repeated sign-in and order attempts are limited. The admin is password-protected and only our team has access. No system is perfectly secure; if a breach affects your data, we'll tell you.

Under Article 15 of the law you can, free of charge:

• find out whether we hold data about you, what it is, why we process it, who processes it and where, and who receives it;
• get access to it;
• have data that's incomplete, inaccurate, outdated, unlawfully obtained or no longer needed corrected, blocked or destroyed.

Under Article 9(3) you can withdraw your consent at any time. That doesn't undo processing already done, and we may still keep order records we're required to keep.

Many details you can change yourself in your account. For anything else, including a copy of your data or deleting your account, write to info@clydesdale.am. We may ask you to confirm it's you before we act.

If you think we've broken the law, you can complain to the authorised body for personal data protection or go to court, and claim compensation, as Article 17 provides. We'd appreciate the chance to fix it first.

Under Article 9(9) of the law, a person under 16 needs a parent's or legal guardian's consent for their data to be processed. If you're under 16, please ask a parent or guardian to order or open an account for you.

When what we collect or how we use it changes, we'll update this page and the date at the top. Significant changes will also be announced on the site.