Privacy Policy

This policy explains how personal information is handled in connection with the Royal Thread online store, purchases and customer enquiries.

Royal Thread is the store name used in this policy. References to “we”, “us” and “our” mean the business operating Royal Thread. Our store uses Shopify as its e-commerce platform.

Personal information involved

Depending on how you interact with us, the information involved may include:

• Your name, billing address, delivery address, email address and telephone number.

• Order details, purchased items, payment status, delivery information and return history.

• Messages and information you provide when contacting customer support.

• Account details, where you create a customer account.

• Technical information, such as IP address, browser type, device information and store interactions.

• Marketing preferences and records of consent, where applicable.

Payment providers process the payment information needed to complete transactions. The information available to us depends on the payment method and provider. Please do not send full payment card details by email.

Sources of information

Information may be received directly from you, through your use of the store, and from service providers involved in payments, order fulfilment, delivery or fraud prevention.

Purposes and legal bases

Under UK data protection law, processing requires an appropriate legal basis.

Orders and customer service: information needed to accept payment, supply goods, arrange delivery and handle contractual enquiries is processed to perform our contract with you or take steps at your request before a contract.

Legal obligations: information may be processed to meet accounting, tax, consumer protection and other applicable legal requirements.

Legitimate interests: proportionate processing may be necessary to secure the store, prevent fraud, resolve disputes and maintain business records. This basis applies only where those interests are not overridden by your rights and interests.

Consent: where required, consent is used for marketing or technologies that require it. You may withdraw consent without affecting the lawfulness of processing undertaken before withdrawal.

Where information is necessary to fulfil an order or meet a legal requirement, failing to provide it may prevent us from completing the transaction.

Sharing information

Information necessary for the relevant service may be shared with:

• Shopify, to provide and support the online store.

• Payment providers, to process payments and refunds.

• Delivery and fulfilment providers, to deliver orders and manage returns.

• Technology providers supporting the services you use.

• Professional advisers, where necessary for accounting, legal advice or dispute resolution.

• Authorities, where disclosure is legally required.

If a business transfer takes place, relevant records may be disclosed where lawful and subject to appropriate safeguards.

Service providers may act as processors on our behalf or as independent controllers, depending on their role. Shopify’s handling of personal information is explained in its Privacy Policy.

International processing

Shopify and other providers may process information outside the United Kingdom.

Where a restricted international transfer occurs, an appropriate lawful transfer mechanism must apply, such as UK adequacy regulations or approved contractual safeguards, together with any additional measures required.

You can contact us to request information about the safeguards applicable to your information and how to obtain a copy where available.

Retention

Retention depends on the purpose of the information:

• Order and financial records are retained for applicable accounting, tax and legal requirements.

• Customer support records are retained as necessary to resolve the enquiry and address related disputes.

• Account information is retained as necessary to provide the account and meet related obligations.

• Marketing preference records are retained as necessary to honour your choices and avoid contacting people who have opted out.

• Technical records are retained according to their security or operational purpose.

Information should be deleted or anonymised when no longer needed, unless continued retention is required or justified by law.

Cookies and similar technologies

The store may use cookies and similar technologies for functions such as maintaining a shopping basket, processing checkout, remembering preferences and protecting the service.

Any analytics, advertising or other optional technologies must be assessed under applicable law. Where consent is required, they must not be activated before you give consent.

Cookie information and available choices should be provided through the store’s cookie controls. Continuing to browse does not, by itself, constitute consent.

Changing browser settings may affect store functionality. You can also use any consent controls provided on the store to change your choices.

Marketing

Where promotional messages are offered, they will be sent only where permitted by applicable law.

You may unsubscribe using the link in a promotional email or by contacting Contact@Royalthread.com. Opting out of marketing does not stop essential communications about your purchases.

Your rights

Depending on the circumstances, you may have the right to:

• Access your personal information.

• Correct inaccurate or incomplete information.

• Request deletion.

• Restrict processing.

• Object to processing, including direct marketing.

• Receive certain information in a portable format.

• Withdraw consent.

• Receive applicable protections concerning significant automated decisions.

These rights are subject to legal conditions and exceptions.

To make a request, email Contact@Royalthread.com. We may request proportionate information to verify your identity. We normally respond within one month, with extensions only where legally permitted.

Security

Appropriate technical and organisational measures are required to protect personal information. No online service can guarantee absolute security.

Protect your account credentials and contact us if you believe your account or information has been compromised.

Complaints

You may contact us about any privacy concern. You also have the right to complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint. You do not need our permission to do so.

Changes

This policy may be updated to reflect changes in the store or applicable requirements. Material changes will be communicated where required. A policy update does not, by itself, authorise a new use of your information.

Contact

For privacy enquiries or requests concerning your personal information, email Contact@Royalthread.com.