Privacy policy

This policy explains what personal data we collect when you shop with Thistle & Hearth, what we use it for, and who we share it with.

What we collect

When you place an order, we collect your name, delivery address, email address and order details (items purchased, quantities and price). Payment card details are collected and processed directly by Stripe — we never see or store your full card details ourselves.

How we use it

We use this information to process and dispatch your order, send order confirmations and updates, and handle any returns or customer service queries. We do not sell your personal data to third parties.

Who we share it with

• Stripe — to process your payment securely.
• Ancient Wisdom (our fulfilment supplier) — your name, delivery address and order details are shared with them so your order can be picked, packed and dispatched.

We don't share your data with anyone else except where we're required to by law.

How long we keep it

We keep order records for as long as needed to meet our legal and accounting obligations [Paul/Sandra: confirm a retention period, e.g. 6 years for UK tax records].

Your rights

Under UK GDPR, you have the right to access, correct or request deletion of your personal data. To make a request, contact us.

[Paul/Sandra: add the registered business name, address and ICO registration number if applicable.]