Privacy Policy
At Tiny Threads, we care about the trust you place in us when you shop with our brand. We believe that privacy should be straightforward, transparent and easy to understand.
This Privacy Policy explains how Tiny Threads collects, uses, stores and protects personal information when you visit our website, browse our products, place an order, contact us, subscribe to our communications or otherwise interact with us.
We only collect and use personal information where we have a legitimate reason to do so, such as fulfilling an order, providing customer support, improving our website, complying with legal obligations or, where required, obtaining your consent.
This policy is intended to explain your privacy rights and how you can exercise them.
1. Who We Are
Tiny Threads is the business responsible for the personal information collected through this website.
Business name: Tiny Threads
Website: tinythreadsstore.co.uk
Email: scotty05111981@gmail.com
Business address: 15 Chestnut Drive, Great Wyrley
For the purposes of applicable UK data protection legislation, including the UK General Data Protection Regulation and the Data Protection Act 2018, Tiny Threads is the data controller for the personal information described in this Privacy Policy.
If you have any questions about how we use your personal information, you can contact us using the details above.
2. What Personal Information We Collect
The information we collect depends on how you interact with Tiny Threads.
Information you provide when placing an order
When you purchase something from our website, we may collect information such as:
• Your name
• Billing address
• Delivery address
• Email address
• Telephone number
• Details of the products you purchase
• Order number and transaction details
• Any information you provide to us about your order
We need this information to process and fulfil your order and to provide you with appropriate customer service.
Information you provide when contacting us
If you contact us by email, contact form or another available method, we may collect:
• Your name
• Contact details
• The contents of your message
• Order information you choose to provide
• Any other information you voluntarily provide
We use this information to respond to your enquiry and provide customer support.
Information you provide when subscribing to marketing
If you choose to sign up to our newsletter or other marketing communications, we may collect your name and email address.
We use this information to send newsletters, product updates, brand news, special offers and other communications you have agreed to receive.
You can unsubscribe from marketing communications at any time.
Information collected automatically
When you visit our website, certain technical information may be collected automatically. This can include:
• IP address
• Browser type
• Device type
• Operating system
• Approximate location based on technical information
• Pages visited
• Products viewed
• Referring website
• Date and time of visits
• Website interactions
• Information about how you use our website
This information helps us understand how visitors use our website, maintain website security and improve the shopping experience.
3. Information About Children
Tiny Threads sells products intended for children, but our website and online purchasing process are directed primarily towards parents, guardians and other adults purchasing products for children.
We do not intentionally ask children to provide personal information that is unnecessary for purchasing or using our products.
If you are a parent or guardian and believe that a child has provided personal information to us unnecessarily, please contact us so that we can review the situation and take appropriate action where necessary.
Where information relating to a child is provided to us by a parent, guardian or another adult, we will handle that information in accordance with applicable data protection law.
We encourage parents and guardians to supervise children's use of online services.
4. How We Use Your Information
We may use personal information for the following purposes:
Processing and fulfilling orders
We use your information to:
• Process purchases
• Take payment through our payment providers
• Confirm your order
• Prepare and dispatch products
• Provide delivery information
• Deal with returns and exchanges
• Communicate with you about your order
• Provide after-sales support
Providing customer service
We may use your information to respond to questions, resolve problems, investigate complaints and provide assistance relating to your orders.
Improving our website
We may analyse information about how visitors use our website to understand which pages, products and features are useful and where improvements may be needed.
Website security
We may process technical information to help identify suspicious activity, prevent fraud, protect our website and keep our customers and business safe.
Marketing
Where permitted by law and, where necessary, with your consent, we may use your contact information to send you marketing communications.
These may include information about new products, collections, promotions, stories, updates and other Tiny Threads news.
You can unsubscribe at any time.
Legal and regulatory requirements
We may use and retain information where necessary to comply with applicable laws, regulations, court orders, tax requirements, accounting obligations or other legitimate legal requirements.
5. Our Lawful Bases for Processing
Under UK data protection law, we need a lawful basis for processing personal information.
Depending on the circumstances, we may rely on one or more of the following lawful bases:
Contract
We may process information because it is necessary to enter into or perform a contract with you.
For example, when you place an order, we need certain information to process payment, arrange delivery and fulfil the contract.
Legal obligation
We may process information when we are legally required to do so.
For example, certain transaction and accounting information may need to be retained for tax or financial reporting purposes.
Legitimate interests
We may process information where it is necessary for our legitimate business interests and those interests are not overridden by your privacy rights.
This may include improving our website, preventing fraud, maintaining website security, responding to customer enquiries and understanding how customers interact with our business.
Where we rely on legitimate interests, we consider the potential impact on your privacy before processing your information.
Consent
Where consent is required, we will ask for it before processing your information for that purpose.
For example, we may rely on consent for certain marketing communications or non-essential cookies.
Where we rely on consent, you can withdraw it at any time.
Withdrawing consent does not affect the lawfulness of processing that took place before you withdrew it.
6. Payments
Payments made through our website are processed using third-party payment providers.
Tiny Threads does not normally receive or store your full payment card number.
Payment providers may collect and process payment information according to their own privacy policies and security practices.
Depending on the payment method you choose, your payment information may be processed by the relevant payment provider.
We recommend reviewing the privacy information provided by your chosen payment provider if you would like to understand how it handles your information.
7. Shopify and Service Providers
Our website may be operated using Shopify and may rely on third-party services to operate our online store.
These providers may process personal information on our behalf for purposes such as:
• Website hosting and operation
• Order processing
• Payment processing
• Delivery and fulfilment
• Email communication
• Customer support
• Website analytics
• Fraud prevention
• Website security
• Marketing
We only use service providers where there is an appropriate reason for them to process information on our behalf.
Where required, appropriate contractual and security arrangements are used.
8. Who We May Share Your Information With
We do not sell your personal information.
We may share information with trusted third parties where this is necessary to operate our business or provide services to you.
These may include:
Delivery and fulfilment providers
We may share your name, delivery address, contact information and order details with delivery or fulfilment providers so your order can reach you.
Payment providers
Payment information may be shared with the payment provider necessary to process your transaction securely.
Technology providers
We may share certain information with providers that help us operate our website, ecommerce systems, customer service tools, email systems, analytics and security services.
Professional advisers
Where necessary, we may share information with professional advisers such as accountants, legal advisers or other professional service providers.
Legal and regulatory authorities
We may disclose personal information where we are legally required to do so or where disclosure is necessary to protect our rights, customers, business or property.
9. International Transfers
Some of the service providers we use may process personal information outside the United Kingdom.
Where personal information is transferred internationally, we will take appropriate steps to ensure that the transfer is carried out in accordance with applicable data protection law.
Depending on the circumstances, this may include relying on an adequacy decision, appropriate contractual safeguards or another lawful transfer mechanism.
10. How Long We Keep Your Information
We do not keep personal information indefinitely.
We retain information only for as long as reasonably necessary for the purposes for which it was collected, including fulfilling orders, providing customer service, meeting legal obligations, resolving disputes and maintaining appropriate business records.
Different categories of information may be retained for different periods.
For example:
• Order and transaction information may be retained for as long as necessary to fulfil the order, provide customer support and satisfy legal, accounting and tax requirements.
• Customer service communications may be retained for as long as reasonably necessary to resolve the enquiry and maintain appropriate records.
• Marketing information may be retained until you unsubscribe or where there is another reason why we should no longer retain it.
• Certain technical and security information may be retained for a shorter period where it is only required for security or operational purposes.
When information is no longer required, we will take reasonable steps to securely delete it or anonymise it.
11. Cookies and Similar Technologies
Our website uses cookies and similar technologies.
Cookies are small files stored on your device that can help websites remember information about your visit.
We may use cookies for purposes such as:
• Keeping the website functioning correctly
• Remembering items in your shopping basket
• Maintaining your shopping session
• Understanding website usage
• Improving website performance
• Measuring marketing activity
• Providing relevant website functionality
Some cookies are necessary for the operation of the website and cannot be disabled through certain cookie controls.
Where required by law, we will ask for your consent before placing non-essential cookies on your device.
You can manage cookies through your browser settings and, where available, through our website's cookie preferences.
The Information Commissioner's Office explains that visitors should be informed about cookies and that non-essential cookies generally require consent.
12. Analytics
We may use analytics services to understand how visitors interact with our website.
Analytics may provide information such as:
• Number of visitors
• Pages viewed
• Time spent on pages
• Devices used
• General geographic information
• How visitors arrived at our website
• Website interactions
Analytics information helps us understand what is working well and where we can improve the customer experience.
Where required, we will obtain appropriate consent before using non-essential analytics technologies.
13. Marketing Communications
If you choose to receive marketing communications from Tiny Threads, we may send you information about:
• New collections
• New products
• Special offers
• Brand updates
• Seasonal campaigns
• Stories and content from Tiny Threads
You can unsubscribe at any time by using the unsubscribe link included in our marketing emails or by contacting us.
If you unsubscribe from marketing communications, you may still receive essential service messages relating to an order or account.
14. Your Data Protection Rights
Depending on the circumstances, you may have several rights under applicable data protection law.
These may include:
Right of access
You can ask us for a copy of the personal information we hold about you.
Right to rectification
You can ask us to correct inaccurate or incomplete information.
Right to erasure
In certain circumstances, you can ask us to delete your personal information.
This is sometimes known as the right to be forgotten.
There may be circumstances where we are legally required or otherwise entitled to retain certain information.
Right to restrict processing
In certain circumstances, you can ask us to restrict how we use your personal information.
Right to object
You may have the right to object to certain types of processing, particularly where we rely on legitimate interests.
You have an absolute right to object to direct marketing.
Right to data portability
In certain circumstances, you may have the right to receive personal information you have provided to us in a structured, commonly used and machine-readable format.
Right to withdraw consent
Where we process your information based on consent, you can withdraw that consent at any time.
These rights are subject to certain legal conditions and exceptions.
The ICO confirms that individuals may have rights including access, rectification, erasure, restriction, objection and data portability, depending on the circumstances.
15. How to Exercise Your Rights
If you would like to exercise any of your data protection rights, please contact us using:
Email: [insert privacy/customer service email]
Please provide enough information for us to understand your request.
We may need to verify your identity before completing certain requests. This is an important security measure designed to prevent personal information from being disclosed to the wrong person.
We will normally respond to valid requests within the timeframe required by applicable data protection law.
We will not normally charge you for exercising your rights. However, applicable law allows limited exceptions in certain circumstances, such as where a request is manifestly unfounded or excessive.
16. Keeping Your Information Secure
We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
These measures may include:
• Secure ecommerce infrastructure
• Access controls
• Appropriate authentication measures
• Secure payment processing through payment providers
• Limited access to personal information
• Appropriate service provider safeguards
• Monitoring for suspicious activity where appropriate
However, no online system can be guaranteed to be completely secure.
For this reason, while we take reasonable steps to protect your information, we cannot guarantee absolute security of information transmitted over the internet.
17. Third Party Websites
Our website may contain links to websites, social media platforms or other third-party services.
If you follow a link to another website, that website will have its own privacy practices and policies.
Tiny Threads is not responsible for the privacy practices, security or content of third-party websites.
We recommend reviewing the privacy policy of any third-party website before providing personal information.
18. Social Media
We may maintain social media accounts and may provide links to social media platforms through our website.
If you interact with us through social media, the relevant platform may collect and process information about you according to its own privacy policy.
Your interactions with those platforms are governed by their terms and privacy practices rather than this Privacy Policy.
19. Fraud Prevention and Website Security
We may process technical and transaction information to help detect and prevent fraudulent activity, abuse, suspicious transactions and other security risks.
This may include information about orders, devices, IP addresses, website activity and transaction patterns.
We may share relevant information with service providers or authorities where necessary to prevent or investigate suspected fraud or other unlawful activity.
20. Changes to This Privacy Policy
We may update this Privacy Policy from time to time.
Changes may be necessary because of:
• Changes to our business
• Changes to our website or services
• Changes to the technologies we use
• Changes to the way we process personal information
• Changes to applicable laws or regulatory guidance
When we update this policy, we will change the “Last updated” date at the top of the page.
Where changes are significant, we will take appropriate steps to bring them to your attention.
The ICO recommends regularly reviewing privacy information and updating it when processing activities change.
21. Complaints
We hope that we can resolve any concerns you have about how we use your personal information.
If you have a privacy concern, please contact us first using the details provided above.
You also have the right to complain to the UK's data protection regulator.
The regulator is:
Information Commissioner's Office (ICO)
You can find information about making a complaint and your data protection rights through the ICO's official website.
If you are unhappy with how we have handled your personal information, you do not have to contact us before contacting the ICO.