article

Charles Tyrwhitt Privacy Notice (United States)

This Privacy Notice explains how Charles Tyrwhitt Shirts Limited (“Charles Tyrwhitt,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information when you interact with us online or offline in the United States. This Notice is written to comply with applicable U.S. state privacy laws, including the California Consumer Privacy Act (CCPA/CPRA), Colorado Privacy Act (CPA), Connecticut Data Privacy Act (CTDPA), Virginia Consumer Data Protection Act (VCDPA), Utah Consumer Privacy Act (UCPA), and other similar state laws as they come into effect.

Where state privacy laws differ, we apply the highest standard required for your state of residence.

1. Who we are and how to contact us

Charles Tyrwhitt Shirts Limited is the business responsible for handling your personal information when you interact with our U.S. websites, customer service teams, retail partners, or marketing channels.

If you have questions about this Privacy Notice or would like to exercise your privacy rights, you may contact us at:
Email: dpo@ctshirts.co.uk
Postal address: Charles Tyrwhitt Shirts Inc, 360 Lexington Avenue 24th Floor NY, NY, 10017

You may also use any rights request options described in Section 8.

2. The information we collect

We collect information that identifies, relates to, describes, or can reasonably be linked with you or your household. The types of personal information we may collect include:

Identifiers

  • Name, postal address, email address, phone number, date of birth.
  • Online identifiers such as IP address.
  • Facial images if uploaded into our AI try-on tool

Customer account and commercial information
  • Order history and purchase details.
  • Payment information (processed securely by our payment partners — we do not store full card numbers).

Internet or device activity
  • Browsing history, interactions with our website, device type, cookie data.

Geolocation data
  • Non-precise location derived from IP address.

Inferences and profile information
  • Product preferences, shopping behavior, and marketing segments.

Audio or visual information
  • Customer service call recordings and online chat logs, where permitted by law.

Information we do NOT collect

We do not collect or process sensitive personal information as defined under U.S. state privacy laws (for example, precise geolocation, race or ethnicity, health information or biometrics). We also do not knowingly collect personal information from children under 16, and we do not use children’s data for targeted advertising or sell or share it. If we learn that we have collected information from a child under 16, we will delete it.


How we collect information

We collect information from:

  • You directly when you place an order, create an account, or contact us.
  • Cookies and similar technologies when you browse our websites.
  • Our service providers (e.g., payment processors, delivery partners).
  • Retail partners (in accordance with their privacy policies and your choices).

3. How we use your information

We use personal information for the following business and commercial purposes:

  • Processing and fulfilling your orders, including payment processing, delivery, returns, and customer service.
  • Providing and improving our website, products, and services.
  • Authenticating your account and securing our systems.
  • Personalizing your experience, including product recommendations, and AI image likeness for our Try-on-with-AI service.
  • Marketing and advertising, including email and SMS campaigns (you may opt out at any time).
  • Fraud detection, prevention, and security monitoring.
  • Compliance with legal obligations.
  • Internal business purposes, such as analytics, reporting, and improving customer experience.

We do not use personal information for automated decision-making that produces legal or similarly significant effects.


We partner with Epsilon to provide you with personalised advertising and content. Epsilon may use first- and third-party cookies and other techniques (including cookies and pixels from Epsilon's advertising partners, a current list of which is available here : https://legal.epsilon.com/eu/publisher-partners) to recognize your browser and collect information about your web browsing activity when visiting this website. [You may read more about Epsilon’s use of cookies and other similar technologies by visiting: https://www.epsilon.com/emea/cookie-list] Such cookies and techniques collect personal data (e.g., information about the browser or device you are using, including browser type, browsing activity, cookie ids, IP-addresses and transactions made). [We also provide Epsilon with other information about you, such as name, address and email for the same purpose. Please contact us if you no longer want us to share such information.] Detailed information about Epsilon’s processing can be found in Epsilon’s privacy policy: https://emea.epsilon.com/privacy-policy. You may visit the European Interactive Digital Advertising Alliance at http://youronlinechoices.eu/ to learn more about personalised interest-based advertising, and to opt-out of receiving the same from their respective members. You can also visit Epsilon’s data subject request tool available here: https://legal.epsilon.com/dsr/


4. How we share and disclose personal information

We may disclose personal information to:

Service providers and contractors

Companies that perform services on our behalf, such as:

  • Payment processors
  • Shipping and logistics providers
  • Customer support and call centers
  • IT hosting, analytics, and security vendors
  • Marketing and advertising partners

These parties are obligated to use the information only for the services we request.

Business transfers

If we engage in a merger, acquisition, sale, or transfer of assets, information may be shared as part of that transaction.

Legal and compliance purposes

We may disclose information when required to comply with law, enforce our terms, or protect the rights and safety of our customers and the public.

Retail partners and third parties with your consent

We may share information for data pooling or marketing only where you have provided consent.
Charles Tyrwhitt does not sell personal information for monetary gain. We may engage in activities considered a “sale” or “sharing” under California law (such as targeted advertising). You may opt out of this activity at any time.

5. Cookies, tracking technologies, and targeted advertising

We use cookies, pixels, tags, and similar technologies to:

  • Improve website performance
  • Analyze browsing behavior
  • Measure marketing effectiveness
  • Deliver more relevant advertising

For details, visit our Cookie Policy: https://www.charlestyrwhitt.com/us/cookie-policy/

Where required, we honor Global Privacy Control (GPC) signals.

6. Your privacy rights

Your privacy rights depend on your U.S. state of residence. The table below summarizes the rights available under major U.S. state privacy laws.

Right CA CO CT VA UT OR* TX* MT* TN* DE* IN* NE*
Right to Know / Access YesYesYesYesYes YesYesYesYesYesYesYes
Right to Delete YesYesYesYesLim YesYesYesYesYesYesYes
Right to Correct YesYesYesYesNo YesYesYesYesYesYesYes
Right to Data Portability YesYesYesYesYes YesYesYesYesYesYesYes
Opt Out of Targeted Advertising YesYesYesYesYes YesYesYesYesYesYesYes
Opt Out of Sale YesYesYesYesLim YesYesYesYesYesYesYes
Opt Out of Profiling LimYesYesYesNo YesYesYesYesYesYesYes
Limit Use of Sensitive Data YesYesYesYesNo YesYesYesYesYesYesYes
Right to Appeal YesYesYesYesNo YesYesYesYesYesYesYes
Non-discrimination YesYesYesYesYes YesYesYesYesYesYesYes

*OR, IN, and NE take effect in 2026. “Lim” indicates a limited right under that state’s law.

Explanation of Key Rights

Right to Know / Access: You may request that we disclose the categories and specific pieces of personal information we have collected about you.

Right to Delete: You may request deletion of personal information we hold about you, subject to legal exceptions such as completing transactions or fraud prevention.

Right to Correct: In states that recognize this right, you may request correction of inaccurate personal information.

Right to Data Portability: You may request your personal information in a portable, machine-readable format.

Right to Opt Out of Targeted Advertising: You may direct us not to use your information for cross-context behavioral advertising.

Right to Opt Out of Sale: You may request that we stop activities considered a “sale” under applicable state law.

Right to Opt Out of Profiling: In certain states, you may opt out of automated profiling used to evaluate personal aspects, where such profiling has legal or similarly significant effects.

Right to Limit Use of Sensitive Personal Information: Not applicable, because Charles Tyrwhitt does not collect sensitive data under applicable U.S. state laws.

Right to Appeal: If we deny a request, you may appeal our decision as required by law.


We will not discriminate against you for exercising your privacy rights.

7. State-Specific Addendum

Some U.S. states provide additional privacy rights or require specific information to be made available to residents of those states. We apply these protections based on your state of residence.

California Residents

California law gives you additional rights, including:

  • The right to receive a clear description of what personal information we collect and why (a “Notice at Collection”).
  • The right to opt out of the sale or sharing of your personal information.
  • The right to request limits on how we use sensitive personal information (we do not collect sensitive information).
  • The ability to use a browser-based signal (such as Global Privacy Control) to opt out of sale/sharing.

Colorado Residents

Colorado law provides:

  • The right to opt out of targeted advertising, sale of personal information, and certain types of profiling.
  • Recognition of universal opt‑out signals sent by your browser.
  • Additional protections around the use of sensitive personal information.

Connecticut Residents

If you live in Connecticut:

  • You can opt out of targeted advertising, sale of personal information and certain forms of profiling.
  • We must obtain your consent before using sensitive personal information.
  • Additional protections apply to teens aged 13‑16.

Virginia Residents

Virginia provides rights similar to Colorado and Connecticut, including:

  • Opt‑outs for targeted advertising, sale of personal information and certain profiling.
  • Opt‑in consent for sensitive personal information.

Utah Residents

Utah provides more limited rights, but you still have:

  • The right to access and delete certain information.
  • The right to opt out of targeted advertising or sale of personal information.

Texas Residents

Texas law gives you:

  • The right to access, correct, delete and obtain a copy of your information.
  • The right to opt out of targeted advertising, sale and certain profiling.
  • Additional protections for sensitive information.

Oregon Residents (Effective 2026)

When Oregon’s law begins:

  • You will have rights to access, correct, delete and restrict certain uses of your information.
  • You will be able to opt out of targeted advertising, sale and profiling.
  • Additional protections will apply for teens.

Montana, Tennessee, Delaware, Indiana and Nebraska Residents

If you live in one of these states, your law provides similar protections, including:

  • The right to access, correct, delete and receive a copy of your information.
  • The right to opt out of targeted advertising, sale and profiling.
  • Additional protections for sensitive personal information.

These state laws differ in their exact details, but we will always apply the strongest protections required for your state of residence.

8. How to exercise your rights

How to exercise your rights How to exercise your rights


You may submit a rights request by contacting us at:

Email: dpo@ctshirts.co.uk

Verification: We may need to verify your identity before processing a request.


Authorized agents may submit requests on your behalf in states where permitted.

9. Children’s privacy

Our services are not directed to children under 16, and we do not knowingly collect personal information from them. If we learn that information has been collected in error, we will delete it.

10. Data security

We use appropriate technical and organizational measures to protect personal information, including encryption, access controls, secure systems, and staff training. No system is completely secure, but we work to safeguard your data.

11. Data retention

We keep personal information for 7 years, unless a longer period is required by law or necessary to protect our business, prevent fraud, or resolve disputes. When information is no longer needed, we delete or de-identify it.

12. International data transfers

As a UK-based company, we may transfer your information to the United Kingdom or other countries. When we do, we use legally recognized safeguards, such as:

  • Standard Contractual Clauses (SCCs)
  • Appropriate administrative, technical, and organizational measures

13. Changes to this Privacy Notice

We may update this Privacy Notice from time to time. The “Last updated” date will be shown at the bottom of this page. Material changes will be communicated where appropriate.


Last updated: 18th May 2026


Exercising Access, Deletion and Opt Out Rights

To exercise the access and deletion rights described above, please submit a verifiable consumer request to us by either:

  • Calling us on: 1866 797 2701
  • Emailing us at: dpo@ctshirts.co.uk

To exercise your right to Opt out:

SUBMIT REQUEST TO OPT OUT OF SALE TO MARKETING AND PROMOTIONAL PARTNERS

Opt out of campaigns and programs that require the sale or disclosure of information to our partners

ONE CLICK OPT OUT OF TARGETED ADVERTISING

Turn off online tracking by opting out of cookies and the transfer of data to third parties.