1. Who we are
Fabric Republic Ltd ("Fabric Republic", "we", "us") is the data controller for personal data collected through https://www.thefabricrepublic.com and related booking, enquiry, and review services.
Fabric Republic Ltd
Company number 10546860
Registered office:
Profile West, 950 Great West Road
Suite E, Ground Floor
Brentford, TW8 9ES
United Kingdom
Andrew Alexander is our main point of contact for commercial and privacy matters.
Email: admin@thefabricrepublic.com
2. Scope of this policy
This policy explains how we collect, use, store, and share personal data when you:
• Browse our website and change locale or currency preferences
• Submit a contact or study enrolment enquiry
• Book an experience or maker class
• Leave a customer review
• Interact with our cookie consent banner
• Receive transactional emails from us after a booking or enquiry
It does not cover third-party websites linked from our platform (for example Instagram, Facebook, LinkedIn, or TikTok), which have their own privacy policies.
3. Personal data we collect
Website usage and preferences
• Cookie consent decision (accepted or declined) and an anonymous consent identifier
• Locale preference cookie (country/language path)
• Currency display preference cookie
• Optional accessibility settings stored in your browser (text scale and high-contrast mode)
• Server and security logs processed by our hosting provider (including IP address, user agent, and request metadata)
Contact and study enquiries
• First name, last name, email address
• Country, location, programme interest, goals, and message content where provided
• Confirmation that you consent to us contacting you about your enquiry
Bookings and reservations
• Name, email address, phone number (optional), country, and language preference
• Experience or maker class selected, session date and time, guest count, and special requests
• Booking reference, payment status, amounts paid, currency, and Stripe checkout session identifier
• Optional marketing opt-in at checkout
• Partner business associated with the offering, where applicable
Customer reviews
• Reviewer name, email address, optional location
• Rating, review text, product category, and offering title/slug where provided
• Review moderation status before publication
Payment data
• We do not store full card numbers on our servers. Payments are processed by Stripe. Stripe collects and processes payment card and billing data according to its own privacy policy.
4. How we use personal data
We use personal data to:
• Operate the website and remember your language, locale, and accessibility preferences
• Record and honour your cookie consent choice
• Process bookings, hold session capacity, and send booking confirmations and related service emails
• Respond to contact and study enrolment enquiries
• Moderate, publish, and display customer reviews
• Calculate and collect Fabric Republic's platform reservation fee and coordinate partner payouts through Stripe Connect where enabled
• Maintain business, accounting, and fraud-prevention records
• Improve our services and, only if you accept analytics cookies, understand aggregated website usage through Google Analytics / Google Tag Manager
5. Legal bases (UK GDPR / EU GDPR)
We rely on the following legal bases:
Contract (Article 6(1)(b))
Processing necessary to provide bookings, confirmations, and services you request.
Consent (Article 6(1)(a))
Analytics cookies (Google Analytics / GTM), optional marketing opt-in at checkout, and contact-form consent to respond to your enquiry.
Legitimate interests (Article 6(1)(f))
Operating and securing the website, preventing abuse, moderating reviews, improving services, and keeping limited business records, where your rights do not override those interests.
Legal obligation (Article 6(1)(c))
Compliance with applicable tax, accounting, and regulatory requirements in the United Kingdom, Poland, and the EU.
6. Who we share data with
We do not sell personal data. We share data only as needed with:
• Stripe — payment processing, checkout, refunds, and Stripe Connect payouts to partner businesses
• Resend — transactional email delivery (booking confirmations, enquiry notifications, review-related messages)
• Supabase — database hosting for bookings, enquiries, reviews, CMS content, and cookie consent records
• Vercel — website hosting, edge delivery, and platform logs
• Google — analytics and tag management only if you accept analytics cookies (G-6DSJN1MYX6, GTM-KKZ5Q7B2)
• Partner businesses — booking details required to deliver the experience or maker class you booked
• Partner schools — only for graduate programme enquiries where you ask us to support an application and you have agreed to that sharing
Each provider processes data under contractual terms appropriate to their role (processor or independent controller).
7. International transfers
Your data is primarily processed within the United Kingdom and European Economic Area through our core service providers.
Some subprocessors (for example Stripe, Resend, Google, or Vercel) may process data in the United States or other countries. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses, adequacy regulations, or equivalent mechanisms provided by those vendors.
8. Data retention
We keep personal data only as long as necessary:
• Booking records — up to 7 years for tax and accounting purposes
• Contact enquiries — up to 3 years after last meaningful contact unless a longer period is required by law
• Customer reviews — while published and for a reasonable period afterwards for audit and moderation
• Cookie consent records — up to 2 years from the decision, or until you make a new choice
• Analytics data — according to Google’s configured retention settings when analytics cookies are accepted
• Server logs — typically up to 90 days unless needed for security investigations
When retention periods end, we delete or anonymise data.
9. Your rights
Depending on your location, you may have the right to:
• Access a copy of your personal data
• Rectify inaccurate data
• Erase data in certain circumstances
• Restrict or object to processing
• Data portability where processing is based on consent or contract
• Withdraw consent at any time (without affecting prior lawful processing)
• Lodge a complaint with a supervisory authority
In the UK, the supervisory authority is the Information Commissioner's Office (ICO). In Poland, it is the President of the Personal Data Protection Office (UODO).
To exercise your rights, contact Andrew Alexander at admin@thefabricrepublic.com. We aim to respond within one month.
10. Cookies and similar technologies
We use cookies and browser storage as described in our Cookie Policy (https://www.thefabricrepublic.com/cookies).
Essential cookies and storage are used for locale, currency, cookie consent, booking flow continuity, and accessibility settings.
Analytics cookies are used only if you click "Accept all" on our cookie banner. You can decline analytics cookies and still use the site.
You can change your browser settings to block cookies, but essential features may not work correctly if you do.
11. Security
We use administrative, technical, and organisational measures appropriate to the data we process, including encrypted connections (HTTPS), access controls on administrative systems, and service-role-only database access for sensitive records.
No online service can be guaranteed 100% secure. Please use a strong password for any administrative account you operate on our behalf and notify us promptly if you suspect unauthorised access.
12. Children
Our services are not directed at children under 13 and we do not knowingly collect their data.
Bookings for experiences and maker classes may be made by adults on behalf of participants aged 12–17. In those cases we collect only the information needed to deliver the service and require appropriate adult contact details.
13. Changes to this policy
We may update this policy from time to time. Material changes will be posted on this page with a revised "Last updated" date.
Last updated: 10 June 2026.
14. Contact
Questions about this policy or your personal data:
Fabric Republic Ltd
Company number 10546860
Registered office:
Profile West, 950 Great West Road
Suite E, Ground Floor
Brentford, TW8 9ES
United Kingdom
Andrew Alexander is our main point of contact for commercial, contractual, and privacy matters.
Email: admin@thefabricrepublic.com