Effective Date: October 2025
At Thistle & Ink we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and protect your information when you use our online stationery service.
1. Who We Are
Thistle & Ink (“we”, “our”, “us”) is the data controller responsible for your personal information.
Contact email: jaine @ thistle-and-ink.com
Business address: Somerset House, Strand, London, WC2R 1LA
2. Information We Collect
We may collect and process the following information:
- Personal details: name, email address, phone number, billing and delivery addresses.
- Payment information: processed securely through third-party payment providers (we do not store full card details).
- Account information: if you create an account, we collect your login details.
- Usage data: including IP address, browser type, and interactions with our website.
- Cookies: small files stored on your device to enhance your browsing experience.
3. How We Use Your Information
We use your personal data to:
- Process and deliver your orders.
- Communicate with you about your purchases, updates, or offers (with your consent).
- Improve our website, products, and customer experience.
- Comply with legal and tax obligations.
Legal bases for processing:
We process your data on the basis of contract (to fulfil your orders), legitimate interest (to improve our services), and consent (for marketing communications).
4. Sharing Your Information
We only share your data when necessary, and with trusted third parties, such as:
- Payment processors (e.g., Stripe, PayPal)
- Delivery and courier services
- IT and website hosting providers
All third parties are required to keep your data secure and use it only for the purposes we specify.
We will never sell your data to any other organisation.
5. Data Retention
We retain your personal information only as long as necessary to fulfil the purposes outlined in this policy or to comply with legal obligations (for example, accounting or tax requirements).
6. Your Rights (Under UK GDPR)
You have the right to:
- Access the personal data we hold about you.
- Request correction or deletion of your data.
- Object to or restrict processing in certain circumstances.
- Withdraw consent for marketing communications at any time.
- Lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your rights have been violated.
For any requests, please contact us at jaine @ thistle-and-ink.com.
7. Security
We use appropriate technical and organisational measures to protect your personal data against loss, misuse, or unauthorised access.
8. Updates to This Policy
We may update this Privacy Policy occasionally. Any changes will be posted on this page with a revised effective date.
Last updated: 12th October 2025