Privacy policy
This Privacy Policy explains how eduthreads.shop collects, uses, stores, shares and otherwise processes personal information when individuals visit our website, make a purchase, communicate with us or otherwise interact with our services.
For privacy-related questions or requests, contact:
Email: info@eduthreads.shop
We seek to process personal information in accordance with applicable UK data-protection and privacy legislation, including the UK GDPR, Data Protection Act 2018, Privacy and Electronic Communications Regulations 2003 and relevant amendments introduced by the Data (Use and Access) Act 2025.
Personal Information We May Collect
Depending on how a person interacts with eduthreads.shop, we may process information including:
Identity information, such as name.
Contact information, such as email address, telephone number, billing information and delivery information.
Order information, including products purchased, quantities, prices, transaction details, returns, refunds and order history.
Payment-related information, although complete payment-card information may be processed directly by authorised payment providers rather than being stored directly by us.
Account information, where customer-account functionality is available.
Device and technical information, including IP address, browser type, device type, operating system, identifiers and related technical information.
Website usage information, including pages viewed, interactions, referral sources and website activity.
Communication information, including emails, customer-service messages, return requests and other communications.
Marketing information, including marketing preferences and, where applicable, interactions with promotional communications.
Fraud and security information, where necessary to detect suspicious activity and protect customers and our services.
How We Collect Personal Information
Information may be collected directly when an individual:
- Places an order;
- Creates or uses an account;
- Enters information at checkout;
- Contacts customer support;
- Requests a return or refund;
- Subscribes to permitted marketing;
- Uses website functionality; or
- Otherwise voluntarily provides information.
Information may also be generated automatically through website operations or obtained from service providers where legally permitted.
Purposes of Processing
We may process personal information for purposes including:
- Providing and operating eduthreads.shop;
- Processing orders;
- Processing payments;
- Providing order confirmations;
- Fulfilling and delivering purchases;
- Providing tracking information;
- Managing customer accounts;
- Handling cancellations;
- Managing returns and refunds;
- Responding to enquiries and complaints;
- Preventing fraud and abuse;
- Protecting our systems and customers;
- Maintaining website functionality;
- Improving our services;
- Measuring website performance;
- Meeting accounting, tax and recordkeeping requirements;
- Establishing, exercising or defending legal claims;
- Complying with legal obligations; and
- Providing marketing where permitted by applicable law.
Lawful Bases
Where the UK GDPR requires a lawful basis, we may rely on an appropriate basis according to the specific processing activity.
This may include processing that is:
Necessary to perform a contract, such as processing an order, arranging delivery or providing customer service related to a purchase.
Necessary to comply with a legal obligation, such as maintaining legally required records.
Necessary for legitimate interests, where those interests are not overridden by the individual's rights and freedoms, such as fraud prevention, network security and certain service-improvement activities.
Based on consent, where consent is required, such as certain forms of electronic marketing or certain storage/access technologies.
Where consent is used as the lawful basis, an individual may withdraw that consent subject to applicable law.
Shopify
Our ecommerce services may be supported by Shopify and Shopify-related technology.
Shopify may process information necessary to provide ecommerce infrastructure, website hosting, checkout functions, transaction services, security, analytics and related functionality.
Information processed through Shopify may be handled according to Shopify's own applicable privacy terms and contractual arrangements with merchants.
Payment Providers
Payments may be processed by Shopify Payments or other compatible payment providers.
Payment processors may process transaction details, payment credentials, billing information, fraud-prevention information and other data necessary to authorise or complete a transaction.
We do not require customers to send complete payment-card information to us by ordinary email.
Fulfilment and Delivery Providers
We may provide relevant information to fulfilment, warehouse, logistics and delivery providers where necessary to process and deliver an order.
This information may include the customer's name, delivery address, contact information, ordered products and information reasonably necessary for fulfilment and delivery.
Other Service Providers
We may engage third-party service providers for functions such as:
- Ecommerce infrastructure;
- Hosting;
- Payment processing;
- Shipping;
- Order fulfilment;
- Customer support;
- Email services;
- Fraud prevention;
- Security;
- Analytics;
- Advertising;
- Consent management; and
- IT services.
We seek to limit information shared to what is reasonably required for the relevant purpose and to use appropriate contractual or legal safeguards where required.
Cookies and Similar Technologies
eduthreads.shop may use cookies and similar storage or access technologies.
Some technologies may be necessary for website operation, checkout, security, remembering shopping-cart contents or delivering functionality requested by the user.
Other technologies may be used for analytics, personalisation, advertising or related purposes.
Where applicable UK law requires consent, such technologies will be used only after appropriate consent has been obtained.
Where a statutory exception permits storage or access without consent, we may rely on that exception where its requirements are satisfied.
Users should be provided with appropriate controls over technologies for which consent is required.
Analytics
We may use analytics tools to understand how visitors interact with our website, identify technical problems and improve performance.
Where analytics involve technologies requiring consent under applicable law, the relevant processing will be subject to the appropriate consent mechanism.
Marketing Communications
We may send promotional electronic communications where permitted by applicable law.
Where consent is required, we will seek the required consent before sending such communications.
Recipients may unsubscribe using the mechanism included in the relevant marketing communication or by contacting:
Transactional messages concerning orders, security, returns, refunds or essential service matters are not necessarily marketing communications.
Disclosure Required by Law
We may disclose personal information where reasonably necessary to:
- Comply with applicable law;
- Respond to a valid legal process;
- Comply with a lawful request from a competent authority;
- Protect legal rights;
- Prevent fraud or unlawful conduct;
- Protect users, customers or the public; or
- Establish, exercise or defend legal claims.
Business Transactions
If eduthreads.shop or relevant business assets are involved in a merger, acquisition, restructuring, financing, sale or similar transaction, information may be transferred as part of that transaction where legally permitted and subject to appropriate safeguards.
International Transfers
Some service providers used in connection with eduthreads.shop may process personal information outside the United Kingdom.
Where UK data-protection law requires safeguards for an international transfer, we seek to rely on an applicable lawful transfer mechanism.
This may include an adequacy regulation, appropriate contractual safeguards, recognised transfer documentation or another legally permitted mechanism.
Data Retention
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and for legitimate legal, regulatory, accounting, tax, fraud-prevention, dispute-resolution and recordkeeping purposes.
Different types of information may therefore be kept for different periods.
When information is no longer reasonably required, it may be deleted, anonymised or otherwise securely disposed of, subject to legal obligations.
Security
We use reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
No internet transmission or electronic-storage system can be guaranteed to be completely secure.
Customers should also take reasonable steps to protect passwords, account credentials and devices.
Data Protection Rights
Subject to applicable law and any relevant exemptions, individuals may have rights including:
- The right to be informed about processing;
- The right to request access to personal information;
- The right to request correction of inaccurate personal information;
- The right to request deletion in appropriate circumstances;
- The right to request restriction of processing in appropriate circumstances;
- The right to object to certain processing;
- The right to data portability where applicable;
- Rights concerning certain forms of automated decision-making; and
- The right to withdraw consent where processing is based on consent.
Rights are not absolute and may be subject to statutory conditions or exceptions.
Exercising Privacy Rights
To submit a privacy request, contact:
We may request information reasonably necessary to verify identity and protect personal information from unauthorised disclosure.
We will handle valid requests within the time periods required by applicable law.
Where clarification is reasonably necessary to respond to a request, applicable legal rules concerning response periods may apply.
Privacy Complaints
Individuals who have concerns about how their personal information has been handled may contact us at:
We will consider privacy complaints in accordance with applicable legal requirements.
Individuals may also have the right to complain to the UK Information Commissioner's Office (ICO).
Children's Privacy
Our services are intended for individuals who are legally capable of entering into the relevant purchase arrangements or who act with appropriate authority.
We do not intentionally seek unnecessary personal information from children.
Where an online service is likely to be accessed by children and specific statutory requirements apply, we will take those requirements into account.
Third-Party Websites
eduthreads.shop may contain links to third-party websites.
We do not control the privacy practices of independent third parties.
Users should review the privacy information provided by those third parties before supplying personal information to them.
Changes to This Privacy Policy
We may update this Privacy Policy where reasonably necessary to reflect changes in legislation, regulatory guidance, technology, services or business practices.
The current version will be published on eduthreads.shop with an updated revision date.
Contact
For privacy questions, requests or complaints:
eduthreads.shop
Email: info@eduthreads.shop
- Choosing a selection results in a full page refresh.