Privacy Policy
Little Threads Last updated: January 2026
1. Introduction
Little Threads (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you interact with us or use our website.
We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Who We Are
Little Threads is a UK-based embroidery and personalisation business operating from Surrey, United Kingdom.
If you have any questions about this Privacy Policy or how we handle your data, you can contact us using the details provided on our website.
3. What Personal Data We Collect
We may collect and process the following personal data:
a) Information You Provide
-
Name
-
Email address
-
Phone number
-
Business name (if applicable)
-
Delivery and billing addresses
-
Artwork, logos, or designs you supply
-
Order and enquiry details
b) Website Usage Data
-
IP address
-
Browser type and version
-
Pages visited and time spent on the site
-
Device and operating system information
This data is collected via cookies and similar technologies.
4. How We Use Your Personal Data
We use your data to:
-
Respond to enquiries and provide quotations
-
Process and manage orders
-
Communicate with you about your order
-
Arrange delivery or collection
-
Maintain business records and invoices
-
Improve our website and services
-
Comply with legal and accounting obligations
We do not sell your personal data to third parties.
5. Legal Basis for Processing
We process your personal data under the following lawful bases:
-
Contract – to fulfil orders or take steps before entering a contract
-
Legitimate interests – to operate and improve our business
-
Legal obligation – for tax, accounting, and regulatory compliance
-
Consent – where required (e.g. marketing communications)
6. Marketing Communications
We will only send marketing emails if:
-
You have opted in, or
-
You are an existing customer and the communication relates to similar services
You can opt out of marketing communications at any time by contacting us or using the unsubscribe link (if applicable).
7. Sharing Your Data
We may share your data with trusted third parties where necessary, including:
-
Delivery and courier services
-
Payment processors
-
Accountants or professional advisers
All third parties are required to handle your data securely and lawfully.
8. Data Storage & Security
We take appropriate technical and organisational measures to protect your personal data from:
-
Unauthorised access
-
Loss
-
Misuse
-
Disclosure
Your data is stored securely and only retained for as long as necessary to fulfil the purposes outlined in this policy or to meet legal requirements.
9. Data Retention
We retain personal data:
-
For active enquiries and orders
-
For legal, tax, and accounting purposes (typically up to 6 years)
-
Until you request deletion where no legal obligation applies
10. Your Rights
Under UK GDPR, you have the right to:
-
Access your personal data
-
Request correction of inaccurate data
-
Request erasure of your data
-
Object to or restrict processing
-
Request data portability
-
Withdraw consent at any time
To exercise your rights, please contact us using the details on our website.
11. Cookies
Our website uses cookies to:
-
Improve user experience
-
Analyse website traffic
You can control cookies through your browser settings. For more information, please see our Cookie Policy.
12. Third-Party Links
Our website may contain links to external websites. We are not responsible for the privacy practices or content of third-party sites.
13. Children’s Data
Our services are not directed at children, and we do not knowingly collect personal data from individuals under 16 years of age.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. The latest version will always be available on our website.
15. Contact & Complaints
If you have concerns about how we handle your data, please contact us first.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).


