Privacy Policy

Last updated: June 2026

1. Who We Are

The data controller is Thobe Studio Ltd, company number 17280131, registered at 152–154 Windsor Street, Liverpool, L8 8EH. If you have any questions about this policy or how we handle your personal data, please contact us at info@thobestudio.co.uk.

2. What Personal Data We Collect

When you place an order or browse our website, we may collect your name, email address, phone number, delivery and billing address, and order details. Payment information is processed securely by our payment providers and we do not store your card details. We also collect browsing data such as your IP address, the pages you visit, and information about the device you use.

3. Why We Collect It and Our Legal Basis

We collect and use your personal data to fulfil your order — including processing payment, arranging delivery, and sending order confirmations — on the legal basis of performance of a contract. We also retain certain records to comply with our legal obligations, such as HMRC tax requirements. We analyse how visitors use our website to improve our services, which we do on the basis of our legitimate interests. Where you have opted in, we may send you marketing communications on the basis of your consent.

4. Who We Share Your Data With

We share your personal data only where it is necessary to operate our business. Our store is hosted by Shopify Inc., which processes order data on our behalf. Payments are handled securely through Shopify Payments, which supports Apple Pay and Google Pay — your payment details are processed directly by these providers and we do not have access to your card or payment credentials. We share your name and delivery address with our shipping carrier in order to deliver your order. We do not sell your personal data to any third party.

5. How Long We Keep Your Data

We retain order and transaction records for six years, as required by HMRC for tax purposes. Account information is kept for as long as your account remains active or as long as is necessary to resolve any disputes. Where you have given consent to receive marketing, we hold your preferences until you unsubscribe or withdraw that consent.

6. Your Rights

Under UK GDPR and the Data Protection Act 2018, you have the right to access the personal data we hold about you, to have inaccurate or incomplete data corrected, and to request erasure of your data where there is no lawful reason for us to retain it. You also have the right to receive your data in a portable format, to object to processing carried out on the basis of our legitimate interests, and to withdraw consent at any time where consent is our legal basis for processing. To exercise any of these rights, please email info@thobestudio.co.uk.

7. Complaints

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO). You can do so at ico.org.uk.