Privacy Policy

Last Updated:

Introduction

thalfyroiz ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data Controller

For the purposes of UK GDPR, the data controller is thalfyroiz, located at Unit 1, Aragon Park, Foster Ave, Houghton Regis, Dunstable LU5 5GN, United Kingdom.

Information We Collect

We collect information that you provide directly to us, including:

  • Name and contact information (email address, phone number, postal address)
  • Messages and inquiries submitted through our contact form
  • Information about your embroidery and appliqué project requirements
  • Payment information (processed securely through third-party payment processors)
  • Website usage data through cookies (see our Cookies Policy)

Legal Basis for Processing

We process your personal data under the following legal bases:

  • Consent: When you provide explicit consent for specific processing activities
  • Contract: To perform our contract with you or take steps at your request before entering into a contract
  • Legitimate Interests: For our legitimate business interests, such as improving our services and website functionality
  • Legal Obligation: To comply with legal obligations, such as tax and accounting requirements

How We Use Your Information

We use the information we collect to:

  • Respond to your inquiries and provide customer support
  • Process and fulfil your orders for embroidery and appliqué services
  • Communicate with you about your projects and our services
  • Send you marketing communications (only with your consent)
  • Improve our website and services
  • Comply with legal obligations
  • Prevent fraud and ensure security

Data Sharing

We do not sell your personal data. We may share your information with:

  • Service providers who assist us in operating our website and conducting our business
  • Payment processors for transaction processing
  • Legal authorities when required by law or to protect our rights

All third parties are required to maintain the confidentiality of your information and use it only for specified purposes.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required or permitted by law. Typically:

  • Contact form submissions: 2 years
  • Customer orders: 7 years (for tax and accounting purposes)
  • Marketing consents: Until withdrawn

Data Protection

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, secure servers, and restricted access to personal data.

Your Rights Under UK GDPR

Under UK GDPR, you have the following rights:

  • Right of Access: Request a copy of your personal data
  • Right to Rectification: Request correction of inaccurate or incomplete data
  • Right to Erasure: Request deletion of your personal data in certain circumstances
  • Right to Restrict Processing: Request limitation of how we use your data
  • Right to Data Portability: Receive your data in a structured, commonly used format
  • Right to Object: Object to processing based on legitimate interests
  • Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us using the details below. We will respond within one month.

International Transfers

Your personal data is stored and processed within the United Kingdom and European Economic Area (EEA). If we transfer data outside the UK/EEA, we ensure appropriate safeguards are in place.

Complaints

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: ico.org.uk
Phone: 0303 123 1113

Contact Us

If you have questions about this Privacy Policy, please contact us at:

Email: chat@thalfyroiz.world
Phone: +44 1582 475801
Address: Unit 1, Aragon Park, Foster Ave, Houghton Regis, Dunstable LU5 5GN, United Kingdom