Privacy Policy

1. Data Controller

The data controller for threadshop.co.uk is the owner of Thread Shop, operating in the United Kingdom. For data-related enquiries, please contact us via our Contact page.

2. What Data We Collect

• Name, email address, delivery address, and phone number when you place an order
• Payment information (processed securely via our payment provider — we do not store card details)
• Browsing behaviour on our site via cookies and analytics (see our Cookie Policy)
• Communications you send us, including emails and contact form submissions

3. How We Use Your Data

• To process and fulfil your orders
• To send order confirmations, dispatch notifications, and tracking information
• To respond to your enquiries
• To improve our website and customer experience through anonymous analytics
• To comply with legal and regulatory obligations

We will only contact you for marketing purposes if you have given explicit consent. You can opt out at any time.

4. Legal Basis for Processing

We process your data on the following legal bases: contract performance (to fulfil your order), legitimate interests (to improve our service), legal obligation (where required by law), and consent (for marketing communications).

5. Data Sharing

We do not sell your personal data. We share your data only with trusted third parties where necessary to deliver our service, including:

• Delivery and courier companies (name and address only)
• Payment processors (card details handled entirely by them)
• Website hosting and IT service providers

All third parties are required to handle your data in accordance with applicable data protection law.

6. Data Retention

We retain your order data for up to 7 years to comply with HMRC accounting requirements. Account data and marketing preferences are held until you request deletion.

7. Your Rights

Under UK GDPR, you have the following rights:

To exercise any of these rights, contact us via our Contact page.

8. Security

We use appropriate technical and organisational measures to protect your personal data. Our site uses SSL encryption. However, no internet transmission is 100% secure and we cannot guarantee absolute security.

9. Cookies

We use cookies on our website. For full details, please see our Cookie Policy.

10. Changes to This Policy

We may update this policy periodically. The latest version will always be on this page with a "last updated" date.