Privacy policy

Privacy Policy

1. About Us
This Privacy Policy explains how Whimsy Thread Ltd shop (“we”, “us”, “our”) collects, uses, and protects your personal information when you visit our website or purchase from us.
We are committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect
We may collect:

Your name, billing address, shipping address, and contact details

Order details and personalisation information (e.g., names or dates for embroidery)

Payment details (processed securely via third-party payment providers)

Website usage data via cookies and analytics tools

3. How We Use Your Information
We use your data to:

Process and fulfil your orders

Provide order updates and customer support

Improve our products and services

Send marketing communications (only with your consent)

Comply with legal obligations

4. Legal Basis for Processing
Under UK GDPR, our lawful bases include:

Contract: to fulfil your order

Consent: for marketing emails

Legal obligation: for tax and accounting purposes

Legitimate interest: to improve our website and customer experience

5. Sharing Your Information
We only share your information with trusted third parties, such as:

Payment processors (e.g., Shopify Payments, PayPal)

Delivery providers (e.g., Royal Mail, courier services)

IT and website hosting providers

We do not sell your personal data.

6. Data Retention
We keep your data only as long as necessary for order fulfilment, accounting, and legal purposes.

7. Your Rights
Under UK GDPR, you have the right to:

Access, correct, or delete your data

Withdraw consent for marketing at any time

Request a copy of the information we hold about you

Complain to the Information Commissioner’s Office (ICO) if you believe your rights have been breached

8. Contact Us
For privacy-related queries, contact us at: info@whimsythread.com