The fashion retailer says names, contact details and partial payment information may have been exposed.