Privacy Policy

Introduction

At Thames & Red, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or make a purchase from us.

Information We Collect

We collect information that you provide directly to us, including:

• Name, email address, phone number, and shipping address when you create an account or place an order
• Payment information processed securely through our payment providers
• Order history and preferences
• Communications when you contact us
• Newsletter subscription preferences

We also automatically collect certain information about your device and how you interact with our website, including IP address, browser type, pages visited, and time spent on pages.

How We Use Your Information

We use the information we collect to:

• Process and fulfill your orders
• Communicate with you about your orders and account
• Send marketing communications (with your consent)
• Improve our website and customer service
• Prevent fraud and enhance security
• Comply with legal obligations

Information Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information with trusted service providers who assist us in operating our website, conducting our business, or servicing you, including: Supabase (website hosting, accounts and order records), Stripe (payments), Resend (order and account emails), Google Analytics (website statistics, only if you accept analytics cookies) and Royal Mail (delivery). These parties are obligated to keep your information confidential and use it only for the purposes we specify.

Cookies and Tracking Technologies

We use essential cookies to keep your basket and sign-in working. Analytics cookies (Google Analytics) are only set if you choose "Accept all" in our cookie banner or turn analytics on in your account privacy settings. You can control cookies through your browser settings, though disabling cookies may affect your ability to use certain features of our website.

Sign-in Security Checks

When you sign in, we create a technical identifier from your browser and device settings (sometimes called a device fingerprint) and record your IP address. We use this only to spot unusual sign-ins and protect your account from misuse, which is in our legitimate interest in keeping accounts secure. It is not used for advertising.

Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Your Rights

Under GDPR and UK data protection laws, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information
• Object to processing of your information
• Request restriction of processing
• Data portability
• Withdraw consent at any time

To exercise these rights, please contact us at privacy@thamesandred.com.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Order and payment records are kept for 6 years to meet HMRC requirements; if you delete your account, those records are kept with your personal details removed where possible.

Children's Privacy

Our website is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at: