Privacy Policy

This privacy policy sets out how Wizard Fancy Dress uses and protects any information that you give Wizard Fancy Dress when you use this website.

Wizard Fancy Dress is committed to ensuring that your privacy is protected. Should we ask you to provide certain information by which you can be identified when using this website, then you can be assured that it will only be used in accordance with this privacy statement.

Wizard Fancy Dress may change this policy from time to time by updating this page. You should check this page from time to time to ensure that you are happy with any changes.

What we collect

We may collect the following information:

What we do with the information we gather

We require this information to understand your needs and provide you with a better service, and in particular for the following reasons:


We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online.

How we use cookies

A cookie is a small file which asks permission to be placed on your computer's hard drive. Once you agree, the file is added and the cookie helps analyse web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.

We use traffic log cookies to identify which pages are being used. This helps us analyse data about web page traffic and improve our website in order to tailor it to customer needs. We only use this information for statistical analysis purposes and then the data is removed from the system.

Overall, cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us.

You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of the website.

Links to other websites

Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.

Data aggregation, analytics and profile creation

We may analyse your browsing behaviour to draw inferences and create profiles about your personal preferences and behaviours. We may then use such information for the purposes described below;

Behavioural advertising and cross platform targeting

(a) Served by us

We may use your information (including profile data) to serve you with advertising, which is relevant to you, on our websites and the websites of third parties.

(b) Served by third parties on our websites

Advertisers or other third parties using our website may also engage in behavioural advertising and use cookies and web beacons in the manner described above. We do not control these advertisers or other parties' use of cookies or web beacons or what they do with the information they collect.

(c) Served by third parties on third party websites

We may provide your personal information (including profile data) to third parties who may then use it in combination with personal information that they have collected from you to serve you with relevant advertising on third party websites.

Controlling your personal information

We do not hold any payment information except the type of payment used. We do not pass information on to any other organisation.

Full Privacy Policy

Costume Crazy at Wizard Fancy Dress (Privacy Policy)

Here at Costume Crazy at Wizard Fancy Dress we know how important it is to keep your personal data safe. We are committed to making sure that you receive the service you’d expect and that your privacy is protected.

Here, we explain the ins and outs of the data we collect from you and how we use it. It might not be something you’re interested in, but it is important you have a read and, of course, let us know if you have any questions.

Who are we?

Costume Crazy at Wizard Fancy Dress (‘we’ and ‘us’) is the trading name of  Wizard Fancy Dress   

Explaining the legal bases we rely on

The law on data protection sets out a number of different reasons for which a company may collect and process your personal data, including:


Sometimes we collect and process your data with your consent. An example is when you sign up to receive our emails from the home page of our website.

Contractual obligations

If you buy from us, in legal terms, there is a contract. We would then need your personal data in order to comply with our contractual obligations, for example, we would need your address in order to deliver your order and these details would be passed on to our couriers.

Legal compliance

If the law requires us to, we may need to collect and process your data for example in the case of fraudulent activity on your credit card (if it was stolen) we may be required by law to pass your information on to the authorities if requested.

Legitimate interest

We may require your data to pursue our legitimate interests in a way which might reasonably be expected as part of running our business and which does not materially impact your rights, freedom or interests. An example might be when we combine data to identify trends, purchase history of a product or send you marketing emails if you have applied for an account or placed any orders with us.

When do we collect your data?

In most cases you will know when we are collecting data as you will be freely giving it to us, for example, when placing an order online or signing up for an account.

We collect your data:

What do we collect and why?

When you apply for an account or buy a product or service through us either by phone or online, we’ll collect some of your personal details, to make sure we have everything we need to ensure you receive your products as efficiently and safely as possible. We’ll only use this data for processing and delivery of your orders, and for keeping in touch. We don’t ask for anything we don’t need (Marital status, employment status, etc). You are allowing us to use this data for this and for the purposes listed below.

Most of the information listed below is usually collected when you purchase online with Wizard Fancy Dress. Some is collected during other communication with us. Much of the information is collected for contractual obligations. Some is on the basis of the legitimate interests of our business. Some is used for both.

What we collect

Why do we collect it? How do we use it?

First and last name

So that your order goes to the right person. So that we can address you nicely in any communication.


So that your order can be delivered to where you want it delivered to.

Telephone number (Landline and or mobile)

So that we, or the delivery partners we work with, are able to get in touch with you regarding your order. We also may need to call you regarding something on your account or to take payment or follow up on an enquiry. Mobile numbers are also used for the delivery tracking by our delivery partners if you choose to receive notifications by text. We may also call you to let you know of new products or to sort out any operation problems (eg: courier delay).

Email address

Your email is used as your login to the site. We use your email so that we can contact you. This is to send you confirmation of your order or send you delivery status updates though our delivery partners. We also use your emails for the “Email me when available” facility on our website if items are out of stock and to send you communications required by law or which are necessary to inform you about our changes to the services we provide you. For example, updates to this Privacy Notice, product recall notices, and required information relating to your orders. These service messages will not include any promotional content. We also use your email to keep in touch and inform you of new products, offers etc. This is done on the basis of legitimate business interests. If you have requested to receive our emails on our home page your email address will be used for this also. You can unsubscribe from our marketing emails at any time – you just need to click on the unsubscribe link in the email. You may still receive emails for other things such as product recalls. We will also still send you order confirmation emails. It may be used to show you products through third party platforms such as Facebook and Instagram – this will only be possible if you have agreed on the specific platform to receive marketing from advertisers. If you have not agreed, you should not see anything from us. You can stop who you see ads from in the settings on whatever platform you are using.

Payment card details

These may be taken to take payment for your orders. If ordering online it is done through our secure payment provider, We use Paypal. We are unable to see the full card details at any time.  If you want to pay from home we take your email address, phone number and address and name so we can send an invoice via izettle which you pay via card from home. We do not have any access to your card details. Your details are also used to issue refunds.

Trading name

Wizard Fancy Dress is a shop and online retailer

VAT Number

This is only required if you are a European customer outside of the UK. If you are in the UK, you do not need to provide this information. The reason we ask for it is because you do not need to pay VAT as a European customer due to the cross-border VAT rules.

Website, Facebook page, Instagram Account etc

We use these platforms to advertise our shop and products. If you like our posts we can see your page.


This is currently not activated on our site but if we activate it - This is so that only you can access your account from the login screen. We do not know your password and if you forget your password you will need to click on the link saying you forgot your password (happens to us all!). We are able to log in to your basket through our website back-end and help you with your basket or take your order through the checkout stage however we do not have access to your password at any point. We do have the facility to change your password for you but always suggest you change it again as soon as you have logged in. We do not have the facility to enter your payment as ‘you’. We take your card details separately and process the payment manually and securely as outlined above.

Notes on any interactions

If you call or email and we have an interaction with you, some or all of the details of the conversation may be saved to help deliver the service to you.

Order details and order history

Details of your order and your order history is automatically stored on our database for you to access at any time. This allows you to use the re-order facility. It also allows us access combined data on customer order total value, number of orders placed etc.


Information gathered by the use of cookies in EKM powershop These are an important part of an online business and help us offer a better service.

Reviews of products or Cosstume Crazy at Wizard Fancy Dress

If you leave a review on our site for a product you have purchased or about your experience with Costume Crazy at Wizard Fancy Dress on social media platforms, it is visible to the public and is carried out with your consent as you are the only one that would be able to do this. We do not review ourselves.

Technical information

To deliver the best possible web experience, we collect technical information about your internet connection, browser, hardware, country, ip address, session ID, the web pages viewed during your visit, and any search terms you entered. This helps us track, develop, test and improve the systems, services and products we provide to you. We do this on the basis of our legitimate business interests.


We use CCTV to protect our premises, team, customers, and assets from crime. We operate CCTV systems inside and outside our premises. We do this on the basis of our legitimate business interests. This data in only accessible by the most senior people in the company and is not used for ‘observation’ of team members or customers on a day to day basis unless any suspicion is raised. Footage is kept for 6 months after which time it is automatically deleted. This time period varies dependent on the amount of activity that is recorded on the camera as activity is only recorded when there is movement. If we discover any criminal activity or alleged criminal activity through our use of CCTV, fraud monitoring and suspicious transaction monitoring, we will process this data for the purposes of preventing or detecting unlawful acts and share it with the relevant parties involved. We aim is to protect the individuals we interact with from criminal activities.

Using information provided by third parties

We don’t buy any email lists or business listings. We only collect data from our customers,  and people that are enquiring about our services.

Keeping and storing your data

If you’re a current or past customer or someone that has been approved for an account but never purchased, we’ll keep a copy of your personal details for no longer than 6 years, from the time your active relationship with us ends. By ends, we mean you have told us explicitly you no longer wish to buy from us or no longer want to log in access to our website (and therefore, prices). As a wholesaler we recognise you may use us occasionally, sometimes purchasing from us years apart. We therefore need you to tell us if you want your account closed. If we do not receive this, we will keep data up to a maximum of 7 years to be able to build a statistical picture of customer buying patterns and gain a better understanding of what lines we should continue to offer and what areas we should grow our range. Holding on to data allows us to keep accurate records for tax purposes and to handle any future complaints. All other personal data used for enquiring and quotation requests is kept for a maximum of 3 years should it not result in a relationship (purchase). Enquiry data that is written down is destroyed in a timely manner.

Sharing your data with third parties:

Occasionally we may need to share your data for fraud management. This would be information about fraudulent or potentially fraudulent activity on our website. This may include sharing data about individuals with law enforcement or government bodies in the UK or worldwide should a valid request be received. This would be assessed on a case by case basis and your privacy would always be taken into consideration first.

We may pass your details onto a limited number of third parties we use for the processing of your order, communication with you and to provide information to us that allows us to improve the customer experience. The reasons we pass your information to the third parties is outlined in the table below.

We respect your privacy and that’s why we don’t give your data to any third parties for their own marketing purposes.

To ensure your privacy and the security of your data:

We currently use the following types of companies/organisations who will process your personal data as part of their contracts with us.



Shipping / Delivery partners

Our delivery partners need to have your information to make sure they know where to go to deliver your parcel. They also use your email / mobile number to communicate the status of your delivery (Delivery timeslot, delivered time etc). Our partners sometimes use contracted delivery companies to fulfil their delivery commitments. If you are based outside the UK and place an order with us, your data will be shared with delivery companies employed by our delivery partners in your country or countries that your order is transported through.

Postcode lookup companies

To automatically find your address when your postcode is entered. This uses Royal Mail Databases.

Social media platforms

We use social platforms to communicate with customers and the wider world. By following us or interacting with us on a particular platform you are giving that platform the knowledge that you have done so. You will already have a contract with the platform if you have an account with them. We use the power of social platforms to help communicate with you. This may be done by using your email address or facts you have posted on your accounts’ profile that allow targeting. This means, you may see ads from us. You can change your settings in each platform you use regarding seeing ads from any advertiser.

Website management / IT companies

We use our web developers to host our databases. This is essential to the operation of the website. They have access to anything you enter on the website. We also use our IT company for security of our on-site IT systems. They have remote access to our network but only access on our request and are only on out network for as long as it take to fix any problem. We also use automatically updating anti-virus and security software on all our computers.

Communication software (email, live chat etc)

We use various software companies in order to be able to communicate with you. This software sometimes includes other business functions such as documentation creation software. Most of the software we use is stored securely in a cloud-based environment. We rarely send out bulk communication and marketing emails. We occasionally send emails about holiday opening times, issues with our front-line services, offers etc. You can unsubscribe from these emails at any time just by clicking the link in the received email. This is an automatic process once you click unsubscribe.

Security company

Our security and CCTV company maintain our on-site security systems. They have access to our CCTV feed but only access this if instructed by us.

Web intelligence software

We use various technology that allows us to observe website visitors on the page as well as collect data on that usage. It allows us to build a more user-focused web experience. Data is anonymous so we do not know which session relates to which user.

Payment platform

We use a secure online payment platform to process your payments securely on the website. This also allows us to securely re-charge your card without seeing your card details. This is essential to make payment in our shop or via invoice.It is also used to help us investigate suspected fraudulent transactions.


We use Paypal for payment on our online site. You can pay as a guest if you don’t have a Paypal account. We are unable to process payments on your behalf through Paypal.

Accounting software companies

Our accountant has access to our accounts software in order to carry out their legal duties on our account as well as aid us with our accounts where necessary. If you have received a manually prepared invoice from us, your details are stored on this software. If you have only placed orders on the website, your data is not stored on our account software but is stored on the website platform as above.

Suppliers / Manufacturers

We may, on occasion, send your order direct from one of our suppliers or manufacturers. If this is the case, your data is given to them in order to be able to send the order through their delivery partners. Only the information that is essential to send the orders is provided to them. They would share this with their delivery partners in order to deliver to you.

Stock management / order management / scanning technology.

We use various integrated systems in order to be able to process your orders, order from suppliers and book in your delivery with our delivery partners. These allow us provide an efficient and accurate service.

Protecting your data outside the EEA

The EEA includes all EU Member countries as well as Iceland, Liechtenstein and Norway. We may transfer personal data that we collect from you to third-party data processors in countries that are outside the EEA. This is usually for delivery purposes only.

What are my rights?

The personal data we hold on you is only ever data you have provided to us or that is in the public domain (192 entry, facebook page etc). If you’d like to see the personal information that we hold about you, you can request it. If this information is incorrect you can ask for it to be updated (or you can do this in your own account when logged in). Or you can request that it’s deleted from our systems.

If we choose not to action your request, we will explain to you the reasons for our refusal.

You also have other rights:

To action these, simply contact us via or you can post a request to us at:

Wizard Fancy Dress

6 The Green

Newport Pagnell


MK16 0JW

To protect the confidentiality of your information, we will ask you to verify your identity before proceeding with any request you make under this Privacy Notice. If you have authorised a third party to submit a request on your behalf, we will ask them to prove they have your permission to act. Once we’ve seen and are happy with this proof being genuine, we’ll send you a copy of the personal data we hold / confirm action has been taken within 28 days.

Where we rely on our legitimate interest

In cases where we are processing your personal data on the basis of our legitimate business interest, you can ask us to stop for reasons connected to your individual situation. We must then do so unless we believe we have a legitimate overriding reason to continue processing your personal data.

How we protect your data

We know how much data security matters to all our customers. With this in mind we treat your data with care and take all appropriate steps to protect it.

We secure our website and all online apps with ‘https’ technology.

All computers are turned off at night or are locked and password protected.

Access to your personal data is password-protected on our network.

Payment card information is secured on the payment provider’s secure server. It is never stored locally by us.

Any sensitive information written down is shredded immediately if it is no longer required.

All paper with any personal data that is no longer required is shredded.

Contact the regulator

If you feel that your data has not been handled correctly, or you are unhappy with our response to any requests you have made to us regarding the use of your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office.

You can contact them by calling 0303 123 1113. Or go online to (opens in a new window; please note we can't be responsible for the content of external websites)

If you are based outside the UK, you have the right to lodge your complaint with the relevant data protection regulator in your country of residence.

Got any worries?

If, at any time, you feel that we haven’t processed your data fairly or you’re not satisfied with how we’ve handled your personal information, you can contact the Information Commissioners Office, who will look into this for you. For full details about how to share any concerns you may have, visit

Links to other Websites

Any links to other websites that we provide on our websites or emails or other forms of communication are provided to help further understand the product or topic you are looking at. Please remember that when you use a link to go from our website to another website, this privacy notice no longer applies. Your browsing and interaction on any other website, including those which have a link on our website, are subject to that site's own rules and policies so please make sure you are happy with that before using the site before giving any personal information.


This notice will be updated from time to time and we recommend that you check back regularly but we will notify you of any changes through our website where this policy is posted. The version number and date released will always be listed below:

Release Date: 24 May 2018