Privacy Policy

Who We Are

Nepal Thread Co. ("we", "us") operates nepalthread.co.uk. This policy explains what personal data we collect, why, and your rights under UK GDPR and the Data Protection Act 2018.

Data We Collect

When you place an order or contact us, we collect:

• Name, email address, and phone number
• Shipping address
• Order history and contents
• Messages you send us via the contact form

We do not collect or store your card details. Payments are processed securely by Stripe, and we never see or store your full card number, expiry date, or CVC.

How We Use Your Data

• To process and deliver your order
• To respond to enquiries or customer service requests
• To send order confirmations and shipping updates
• To send marketing emails, only if you've opted in via our newsletter signup
• To prevent fraud and comply with legal obligations

Legal Basis for Processing

We process order-related data under contract (to fulfil your purchase) and legitimate interest (fraud prevention). We process newsletter sign-ups based on your consent, which you may withdraw at any time.

Third Parties

We share data with trusted service providers solely to operate our store:

• Stripe — for secure payment processing
• Supabase — for secure database hosting
• Delivery couriers — to fulfil shipping

We never sell your personal data to third parties.

Data Retention

We retain order records for as long as necessary to comply with tax and accounting obligations. Contact form messages are retained only as long as needed to resolve your enquiry.

Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data, subject to legal retention requirements
• Withdraw consent to marketing communications at any time
• Lodge a complaint with the Information Commissioner's Office (ICO)

Contact Us

For any privacy-related requests or questions, please reach out via our Contact page.