Privacy policy

Introduction

This Privacy Policy explains how threadheadsa.shop collects, uses, stores, shares and otherwise processes personal information when customers and visitors access our website, place orders, communicate with us or otherwise interact with our services.

For privacy enquiries:

Email: info@threadheadsa.shop

UK data-protection law currently includes the UK GDPR, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations, as amended by the Data (Use and Access) Act 2025. The ICO confirms that the 2025 Act amends rather than replaces these existing frameworks.

1. Personal Information We May Collect

Depending on how you interact with threadheadsa.shop, we may collect personal information including:

Identity and Contact Information

This may include:

• Name;
• Email address;
• Telephone number;
• Billing information; and
• Delivery information.

Order and Transaction Information

This may include:

• Products purchased;
• Order number;
• Purchase date;
• Order value;
• Delivery status;
• Returns;
• Refunds; and
• Customer-service history.

Payment Information

Payments may be processed by Shopify-supported payment providers or other payment processors.

We may receive transaction information necessary to confirm whether a payment has been authorised, completed, reversed or refunded.

We do not ask customers to send complete card numbers or card-security credentials through ordinary email.

Technical Information

When you use our website, information may be collected about:

• IP address;
• Browser;
• Device type;
• Operating system;
• Website activity;
• Pages visited;
• Referring pages; and
• Date and time of interaction.

Communications

Where you contact us, we may retain relevant correspondence and information necessary to respond to your enquiry.

2. Why We Use Personal Information

We may process personal information to:

• Operate our online store;
• Process orders;
• Verify transactions;
• Arrange delivery;
• Communicate order updates;
• Provide customer support;
• Process cancellations;
• Handle returns;
• Issue refunds;
• Prevent fraud;
• Protect website security;
• Maintain business records;
• Comply with legal requirements;
• Resolve disputes;
• Establish or defend legal claims;
• Improve website performance; and
• Carry out marketing where legally permitted.

3. Lawful Bases

Depending on the circumstances, processing may be based on:

Contract: where information is required to take steps requested by the customer or fulfil an order.

Legal obligation: where processing is required to comply with applicable law.

Legitimate interests: where processing is reasonably necessary for legitimate business interests and applicable legal conditions are satisfied.

Consent: where consent is required and has been obtained.

Where processing depends on consent, withdrawal of consent does not affect processing lawfully undertaken before withdrawal.

4. Shopify

threadheadsa.shop operates using Shopify ecommerce technology.

Shopify may process information in connection with providing ecommerce, hosting, checkout, fraud-prevention, security and related technology.

Shopify also provides automated privacy settings and policy functionality for merchants, while merchants remain responsible for reviewing the policies they publish.

5. Service Providers

We may share relevant personal information with service providers where reasonably necessary, including:

• Ecommerce-platform providers;
• Payment processors;
• Shipping carriers;
• Fulfilment providers;
• Fraud-prevention providers;
• Customer-service systems;
• IT and hosting providers;
• Analytics providers;
• Marketing providers where lawful; and
• Professional advisers.

6. Legal Disclosures

Information may be disclosed where reasonably necessary to comply with legal obligations, respond to lawful authorities, protect legal rights, investigate fraud or security incidents, or establish, exercise or defend legal claims.

7. International Transfers

Some service providers may process personal information outside the United Kingdom.

Where applicable transfer restrictions apply, we will use an appropriate lawful transfer mechanism or safeguard.

8. Cookies and Similar Technologies

Our website may use cookies and similar storage or access technologies for:

• Essential website functionality;
• Shopping-cart operation;
• Authentication;
• Security;
• Fraud prevention;
• Preferences;
• Analytics; and
• Marketing where legally permitted.

The Data (Use and Access) Act 2025 changed certain UK rules relating to storage and access technologies, including circumstances in which specified types of cookies or similar technologies may be used without consent.

Where consent is legally required, appropriate privacy controls should be provided.

9. Marketing Communications

Where legally permitted, customers may receive information about products, services or promotions.

Marketing recipients may unsubscribe through an unsubscribe facility provided in the relevant communication or by contacting:

info@threadheadsa.shop

Opting out of marketing will not prevent necessary communications about existing orders, transactions, returns, refunds or security.

10. Data Retention

We retain personal information only for as long as reasonably necessary for legitimate legal, contractual, operational, accounting, fraud-prevention and dispute-resolution purposes.

Retention periods may vary depending on the type of information and applicable requirements.

Information no longer required will be deleted, anonymised or otherwise appropriately disposed of where reasonably practicable.

11. Security

We use reasonable organisational, technical and administrative measures intended to reduce the risk of:

• Unauthorised access;
• Accidental loss;
• Unauthorised disclosure;
• Misuse;
• Destruction; or
• Alteration.

No internet-based system can be guaranteed to be completely secure.

12. Your Privacy Rights

Depending on applicable circumstances, individuals may have rights relating to:

• Access to personal information;
• Correction of inaccurate information;
• Erasure;
• Restriction;
• Objection;
• Data portability;
• Withdrawal of consent; and
• Certain automated decision-making.

These rights may be subject to legal conditions and exceptions.

13. Privacy Requests

To submit a privacy request:

Email: info@threadheadsa.shop

Please provide sufficient information for us to understand the request.

We may request reasonable evidence of identity before disclosing personal information.

14. Data-Protection Complaints

Privacy complaints may be submitted to:

info@threadheadsa.shop

The Data (Use and Access) Act 2025 introduced specific obligations relating to data-protection complaints. ICO guidance states that organisations must facilitate complaints, acknowledge them within 30 days and respond without undue delay.

Individuals may also have the right to complain to the UK Information Commissioner's Office.

15. Children's Information

We do not intentionally seek unnecessary personal information from children.

Where an online service is likely to be accessed by children, applicable data-protection obligations concerning children's needs must be taken into account.

16. Business Transfers

If our business or relevant assets undergo a merger, restructuring, acquisition or transfer, relevant personal information may be transferred where legally permitted and subject to applicable safeguards.

17. Third-Party Websites

Our website may contain links to third-party websites.

Independent third parties operate according to their own privacy practices, and customers should review those policies before submitting personal information.

18. Changes to This Privacy Policy

This Privacy Policy may be updated where necessary to reflect changes in law, regulatory guidance, technology, Shopify functionality or our processing practices.

The current version will be published on threadheadsa.shop.

19. Contact Us

For privacy enquiries, rights requests or complaints:

threadheadsa.shop
Email: info@threadheadsa.shop