Privacy Policy

Privacy Policy

Effective Date: 08/06/2025

Last Updated: 08/06/2025

DNA Threads Ltd (“DNA Threads”, “we”, “us”, or “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

DNA Threads Ltd is a company registered in England and Wales.

Company Number: 16461447

Email: privacy@dnathreads.co.uk

We are the data controller for the purposes of the UK GDPR in respect of personal data collected through our website www.dnathreads.co.uk.

2. What Personal Data We Collect

a. Information you provide directly:

1. Name
2. Email address
3. Postal address
4. Phone number
5. Payment details (processed securely via third-party payment providers)
6. Account login information (if you create an account)
7. Preferences and communication opt-ins

b. Information collected automatically:

1. IP address
2. Browser type and version
3. Device type and operating system
4. Pages visited and time spent
5. Referring website
6. This data is collected via cookies, tracking pixels, and similar technologies (see Section 8).

3. How We Use Your Data

We process your data for the following purposes:

1. To process and fulfil your orders
2. To manage your customer account
3. To send order confirmations and shipping updates
4. To communicate with you about promotions, events, or new product launches (only if you opt in)
5. To improve our website and shopping experience
6. To meet legal, accounting, or regulatory obligations
7. To prevent fraud or misuse of our services

4. Legal Bases for Processing

We rely on the following legal bases to process your personal data:

1. Contractual necessity – to fulfil our contract with you (e.g. processing orders)
2. Consent – where you have explicitly given permission (e.g. marketing emails)
3. Legal obligation – to comply with applicable laws (e.g. tax reporting)
4. Legitimate interests – to operate, grow, and improve our business, unless these are overridden by your rights and interests

5. Who We Share Your Data With

We may share your information with:

1. Payment processors (e.g. Stripe, PayPal)
2. Delivery partners (e.g. Royal Mail, DPD)
3. IT and system providers (e.g. website hosting and analytics tools)
4. Marketing platforms (only with your consent, e.g. Mailchimp or Klaviyo)
5. Law enforcement or regulators, if required by law
6. We will never sell your personal data.

6. International Data Transfers

Some of our service providers may be located outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or the UK’s International Data Transfer Agreement (IDTA), to protect your data in accordance with UK data protection law.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including:

1. As long as you hold an account with us
2. For six (6) years for tax and accounting obligations
3. Until you withdraw consent for marketing
4. Once no longer required, your data will be securely deleted or anonymised.

8. Cookies & Tracking Technologies

We use cookies and similar technologies to:

1. Operate our website effectively
2. Remember your preferences
3. Analyse website performance and traffic
4. Support marketing campaigns (only with your consent)
5. You can manage your cookie preferences at any time via the cookie banner or your browser settings. More details can be found in our [Cookie Policy].

9. Your Rights

Under UK data protection law, you have the right to:

1. Access your personal data
2. Correct inaccurate data
3. Request erasure of your data ("right to be forgotten")
4. Restrict or object to certain types of processing
5. Withdraw consent at any time
6. Request data portability in a structured, commonly used format
7. To exercise your rights, contact: privacy@dnathreads.co.uk.
8. If you’re not satisfied with our response, you have the right to contact the UK Information Commissioner’s Office (ICO) at www.ico.org.uk.

10. Security

We take appropriate technical and organisational measures to protect your personal data from unauthorised access, misuse, loss or disclosure. This includes secure servers, encryption, access controls, and regular security assessments.

11. Updates to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page and, where appropriate, notified to you by email. Please check back regularly to stay informed.

Contact Us

If you have any questions or concerns about this Privacy Policy or how we handle your data, please contact us:

Email: privacy@dnathreads.co.uk