ThreadNeedlesco

THREAD AND NEEDLES CO PRIVACY POLICY

Last updated: 3 September 2026

This Privacy Policy explains how Thread and Needles Co collects, uses, shares and retains your personal information when you purchase from my Etsy shop, contact me or otherwise use my services through Etsy.

Thread and Needles Co is operated by Emma Baker, who is the data controller responsible for the personal information described in this policy.

1. PERSONAL INFORMATION I COLLECT

To process and fulfil your order, Etsy may provide me with information including:

* Your name
* Email address
* Delivery and billing address
* The product you purchased
* Your personalisation instructions
* Messages you send through Etsy
* Photographs, logos, artwork or other files you provide
* Information required to process a refund or resolve an order problem

Etsy processes your payment. I do not normally receive or store your complete debit or credit card details.

If you order a pet portrait or another custom product, the photographs, names, wording and design instructions you provide will be used to create your order.

2. WHY I USE YOUR INFORMATION

I use your personal information for the following purposes and lawful bases:

Contract – to process, create, personalise, dispatch and manage your order, communicate with you about it and provide customer service.

Legal obligation – to maintain records required for tax, accounting, fraud prevention and other legal purposes.

Legitimate interests – to operate and improve my business, prevent misuse, protect my legal rights and resolve complaints or disputes, where these interests do not override your rights.

Consent – where you have specifically agreed to receive marketing communications. You may withdraw your consent at any time.

Purchasing from my Etsy shop does not automatically subscribe you to marketing emails.

3. SHARING YOUR INFORMATION

I share personal information only where reasonably necessary to operate my business, fulfil orders or comply with the law. Recipients may include:

* Etsy, in accordance with Etsy’s Privacy Policy and Seller Policy
* Postal services and delivery companies used to deliver orders
* Professional advisers, accountants or bookkeeping providers
* Technology, email, storage or order-management providers used to operate my business
* Law enforcement, regulators, courts, tax authorities or other authorities where disclosure is legally required
* A purchaser or successor if the business is sold, transferred or reorganised, where permitted by law

These organisations receive only the information reasonably necessary to provide their services or meet the relevant legal requirement.

I do not sell customers’ personal information.

4. INTERNATIONAL TRANSFERS

Etsy and some service providers may process or store personal information outside the United Kingdom.

Where personal information is transferred internationally, I rely on appropriate legal safeguards where required. These may include UK adequacy regulations, the UK Extension to the EU–US Data Privacy Framework, the International Data Transfer Agreement or other safeguards recognised under UK data-protection law.

Etsy’s own processing and international transfers are governed by Etsy’s Privacy Policy.

5. HOW LONG I KEEP YOUR INFORMATION

I retain personal information only for as long as reasonably necessary to:

* Fulfil and manage your order
* Provide customer service
* Resolve disputes
* Maintain appropriate business records
* Comply with tax, accounting and legal obligations
* Establish, exercise or defend legal claims

Order and transaction records will normally be retained for up to six years where needed for business, tax or legal purposes.

Custom photographs, logos and design files will not be kept longer than reasonably necessary unless they are needed for repeat orders, ongoing customer service, record-keeping or legal purposes. You may ask me to delete these files, subject to any legal reason requiring me to retain them.

6. SECURITY

I take reasonable organisational and technical measures to protect the personal information under my control against loss, misuse, unauthorised access, alteration or disclosure.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

7. YOUR DATA-PROTECTION RIGHTS

Depending on your location and the circumstances, you may have the right to:

* Request access to your personal information
* Ask for inaccurate or incomplete information to be corrected
* Request deletion of your information
* Request that processing be restricted
* Object to certain uses of your information
* Request the transfer of information you provided
* Withdraw consent where processing is based on consent

These rights may be limited where I am legally required to retain information or have another lawful reason to continue processing it.

To exercise your rights, please contact me using the details below. I may need to verify your identity before completing a request.

If you are unhappy with how your information has been handled, please contact me first so I can try to resolve the issue.

You also have the right to complain to the UK Information Commissioner’s Office:

Website: https://ico.org.uk/make-a-complaint/

8. THIRD-PARTY SERVICES

This Privacy Policy applies to information processed by Thread and Needles Co. It does not apply to Etsy or any other third party that I do not own or control.

Please review Etsy’s Privacy Policy for information about how Etsy collects, uses and protects your information.

9. CHANGES TO THIS POLICY

I may update this Privacy Policy when my services, business practices or legal obligations change. The latest version will be displayed in my Etsy shop with the revised date shown at the top.

10. CONTACT DETAILS

Data controller: Emma Baker
Trading name: Thread and Needles Co
Etsy shop: https://www.etsy.com/shop/ThreadNeedlesco
Email: info@threadandneedlesco.com
Postal address: Thread and Needles CO RH175PA