Privacy Policy
Last updated: 16 October 2026
1. Who We Are
THL Innovation Company Ltd (registered in England and Wales, company number 16511389) is the data controller responsible for your personal data.
- Registered address: Bartle House, 9 Oxford Court, Manchester, England, M2 3WQ
- Email: customers@thlinnovation.com
- Phone / WhatsApp: +44 (0)7417454526
2. What Data We Collect
| Data | Source | Purpose |
|---|---|---|
| Name, email, company, enquiry type, message | Contact form | Responding to your enquiry |
| Name, email, phone, billing & shipping address | Stripe Checkout | Processing and delivering your order |
| Payment card details | Stripe Checkout | Payment processing — card data never reaches our servers |
| Shopping basket contents, discount code | Your browser (localStorage) | Preserving your basket between visits; basket items and discount codes are also sent to our checkout services when you validate a discount or start checkout |
3. Legal Basis for Processing
- Contract performance — fulfilling orders, processing payments, arranging delivery and handling returns.
- Legitimate interest — responding to enquiries submitted through our contact form.
- Legal obligation — retaining transaction records as required by HMRC for tax purposes.
- Consent — analytics cookies (Google Analytics/GA4), placed only after you accept via the cookie consent banner.
4. Third-Party Service Providers
We share personal data only where necessary to operate this website, process payments, fulfil and deliver orders, and respond to enquiries. The service providers and recipient categories involved are listed below.
- Stripe Payments Europe Ltd — payment processing. Stripe is certified PCI DSS Level 1. See Stripe's privacy policy.
- Formspree — contact form delivery. See Formspree's privacy policy.
- Netlify — website hosting. Server logs may temporarily record IP addresses. See Netlify's privacy policy.
- Google LLC (Google Analytics) — website analytics. Depending on your consent choice, Google Analytics processes usage and device information using analytics cookies or cookieless measurement signals. We do not send Google the name, contact details, order details, or payment information you provide to THL. Data is processed by Google LLC in the United States under Standard Contractual Clauses. See Google's privacy policy.
- Carriers and delivery service providers — recipient names, delivery addresses and contact details needed to deliver orders. Where needed for record keeping and legal obligations, relevant order records may also be handled by accounting service providers.
Some service providers process personal data outside the UK. The safeguards applicable to the services listed above are described in their privacy policies. You can request further information about recipients and international-transfer safeguards by emailing customers@thlinnovation.com.
5. Data Retention
- Order records in Stripe: retained for up to 6 years to comply with HMRC requirements.
- Contact form submissions: retained until the enquiry is resolved, then deleted within 12 months.
- Browser localStorage: controlled entirely by you; cleared when you clear your browser's site data.
6. Cookies & Local Storage
We use browser localStorage to preserve your shopping basket and any discount code you enter. The saved copy remains on your device. When you validate a discount code or start checkout, basket items and any applicable discount code are sent to our server-side checkout services and Stripe to validate prices and discounts and process your order. It is strictly necessary for the shop to function and does not require separate consent under PECR.
We also use Google Analytics (GA4) to understand how visitors use this site. With consent, GA4 uses analytics cookies and processes information such as pages visited, session duration, approximate location and device type. If analytics storage is denied, Google may still receive cookieless consent-state and measurement signals under Advanced Consent Mode. GA4 may set the following cookies only after you accept analytics:
| Cookie | Purpose | Duration |
|---|---|---|
_ga | Distinguishes unique visitors | 2 years |
_ga_DWDC8JKKMM | Maintains session state | 2 years |
These analytics cookies are set only if you accept via the consent banner. If you decline, no analytics cookies are placed, but Google may receive cookieless consent and measurement signals. You can change or withdraw your choice at any time using Cookie settings in the footer; withdrawing consent removes accessible GA cookies from this site. You may also install the Google Analytics opt-out browser add-on.
Legal basis: Consent (Article 6(1)(a) UK GDPR; PECR Regulation 6).
7. Your Rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you
- Have inaccurate data corrected
- Request deletion of your data
- Restrict or object to processing
- Receive your data in a portable format
To exercise these rights, email customers@thlinnovation.com. We respond without undue delay and normally within one calendar month of receipt. If the law permits an extension, we will explain the reason and the revised deadline.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).
8. Children
This website is not directed at individuals under the age of 16 and we do not knowingly collect personal data from children.
9. Changes to This Policy
We may update this policy from time to time. The "last updated" date at the top of this page will always reflect the most recent version.