Privacy policy

Privacy Policy

Last updated: October 21, 2025

Thames & Amber ("we", "us", "our") operates this store and website, including all related information, content, features, tools, products, and services (collectively, the "Services"). The Services are powered by Shopify, which helps us deliver a secure and streamlined shopping experience.

This Privacy Policy explains how we collect, use, and disclose your personal information when you access or use the Services, make a purchase, or communicate with us. If this Privacy Policy conflicts with our Terms of Service, this policy will apply with respect to personal information.

By using the Services, you confirm that you have read and understood this Privacy Policy.

1. Personal Information We Collect

“Personal information” refers to any information that can identify or reasonably be linked to you. We may collect the following categories of personal information:

  • Contact details: Name, billing and shipping address, phone number, email address
  • Financial information: Credit/debit card details, transaction data, payment confirmation
  • Account details: Username, password, preferences, security questions
  • Transaction history: Items viewed, purchased, returned, exchanged, or added to your wishlist or cart
  • Customer communications: Any messages or inquiries you send us
  • Device & browser data: IP address, device type, browser type, network info
  • Usage data: Pages visited, clicks, time spent, navigation patterns

2. How We Collect Personal Information

We collect personal information from the following sources:

  • Directly from you: When you create an account, place an order, or contact us
  • Automatically: When you use the Services, including via cookies and tracking technologies
  • From third-party partners: Including service providers and marketing platforms
  • From Shopify: As our e-commerce platform provider

3. How We Use Personal Information

We use your personal information for the following purposes:

a. To Provide and Improve Our Services

  • Fulfilling orders, processing payments, and managing returns
  • Maintaining your account and preferences
  • Delivering customer service and shipping updates
  • Recommending products and improving your shopping experience

b. For Marketing and Advertising

  • Sending marketing emails or messages (with your consent)
  • Displaying personalized ads based on your browsing or purchase history
  • Managing promotional campaigns or offers

c. For Security and Fraud Prevention

  • Detecting and preventing fraud, abuse, and unauthorized access
  • Securing transactions and verifying user identities

d. To Communicate with You

  • Responding to your inquiries
  • Sending updates about your account, order, or services

e. For Legal and Regulatory Compliance

  • Complying with applicable laws and tax regulations
  • Responding to legal requests or enforcing our policies

4. Legal Bases for Processing (GDPR Compliance)

Under the GDPR, we process your personal information based on the following legal grounds:

  • Consent – for marketing communications and certain tracking technologies
  • Contract – to fulfill purchases or provide services you request
  • Legal obligations – to comply with financial, tax, or regulatory duties
  • Legitimate interests – to improve services, secure our platform, and prevent fraud

You can withdraw your consent at any time by contacting us.

5. How We Share Personal Information

We may share your personal information with:

  • Shopify – our e-commerce platform
  • Service providers – payment processors, delivery partners, customer support
  • Marketing partners – to deliver relevant ads (if you consent to marketing cookies)
  • Authorities – where legally required or to enforce legal rights
  • Other third parties – with your explicit consent or at your direction

We do not sell your personal information.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

  • Enable website functionality and secure login
  • Remember your preferences and cart contents
  • Analyze website usage and improve performance
  • Deliver personalized ads (with consent)

You can manage your cookie preferences via your browser settings or our site’s cookie banner. For more details, refer to our Cookie Policy (if available).

7. Shopify’s Role in Data Processing

Our store is hosted on Shopify, which processes your data to deliver the Services. Shopify may also use your information to provide personalized services across other Shopify-powered stores.

To learn more about how Shopify processes personal data, visit the Shopify Consumer Privacy Policy. You may also manage your rights via Shopify’s Privacy Portal.

8. International Data Transfers

Your personal data may be stored or processed outside the EU, including in the U.S. or Canada. When we transfer data internationally, we use:

  • Standard Contractual Clauses approved by the European Commission
  • Adequacy decisions (where applicable)

These ensure your personal data receives adequate protection in line with GDPR.

9. Your Rights

Depending on your location, you may have the following rights:

  • Right to access – See what personal data we hold
  • Right to correct – Fix inaccurate or incomplete data
  • Right to delete – Request deletion of your data
  • Right to data portability – Receive a copy of your data
  • Right to restrict or object to processing – In certain cases
  • Right to withdraw consent – At any time

To exercise your rights, contact us using the details below. We may ask for identity verification before responding.

10. Children’s Data

Our Services are not intended for children under the age of 16. We do not knowingly collect personal data from minors. If you believe a child has provided us with personal data, please contact us so we can delete it.

11. Data Retention

We retain personal information only for as long as necessary to:

  • Provide services to you
  • Comply with legal and tax obligations
  • Resolve disputes and enforce agreements

12. Third-Party Links

Our website may contain links to third-party sites. We are not responsible for the content, privacy practices, or security of these external platforms. Always review their privacy policies before submitting your information.

13. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or legal obligations. Updates will be posted here with the “Last updated” date above. Continued use of the Services indicates acceptance of the changes.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, you may contact us at:

📧 Email: thamesamberlondon@gmail.com
📍 Registered business address: Available upon request

We will respond in accordance with applicable privacy laws.