Legal

Privacy Policy

Last updated: [date to be confirmed on publish] — UK version

Data controller: Thread510 [registered company name — to be inserted], [registered address — to be inserted]. Contact: info@thread510.co.uk.

What we collect

Contact details you provide (name, email, phone, address) when ordering, applying for a trade account, or contacting us.
Order and payment information (processed via our payment provider — Thread510 does not store full card details).
Basic technical data (browser type, pages visited) for site functionality and analytics, where enabled — see our Cookie Policy.

Why we collect it

To fulfil orders and provide customer support.
To manage trade/wholesale accounts.
To send marketing communications only where you've opted in (e.g. newsletter sign-up).

Legal basis

Contract (order fulfilment), legitimate interest (basic site analytics, fraud prevention), and consent (marketing emails, non-essential cookies).

Retention

Assumption — for review: Standard UK practice: order/transaction records retained for 6 years to meet HMRC/tax obligations; marketing consent retained until withdrawn.

Your rights

Under UK GDPR you have the right to access, correct, delete, or restrict use of your personal data, and to withdraw marketing consent at any time. Contact info@thread510.co.uk to exercise these rights.

Third parties

We share data only with parties needed to fulfil your order or request (e.g. payment processor, courier), and never sell personal data to third parties.