Privacy Policy
Last updated: 4 May 2026
1. Who We Are
THL Innovation Company Ltd (registered in England and Wales, company number 16511389) is the data controller responsible for your personal data.
- Registered address: Bartle House, 9 Oxford Court, Manchester, England, M2 3WQ
- Email: customers@thlinnovation.com
- Phone / WhatsApp: +44 (0)7417454526
2. What Data We Collect
| Data | Source | Purpose |
|---|---|---|
| Name, email, company, enquiry type, message | Contact form | Responding to your enquiry |
| Name, email, phone, billing & shipping address | Stripe Checkout | Processing and delivering your order |
| Payment card details | Stripe Checkout | Payment processing — card data never reaches our servers |
| Shopping basket contents, discount code | Your browser (localStorage) | Preserving your basket between visits — this data stays on your device only |
3. Legal Basis for Processing
- Contract performance — fulfilling orders, processing payments, arranging delivery and handling returns.
- Legitimate interest — responding to enquiries submitted through our contact form.
- Legal obligation — retaining transaction records as required by HMRC for tax purposes.
- Consent — analytics cookies (Google Analytics/GA4), placed only after you accept via the cookie consent banner.
4. Third-Party Service Providers
We share personal data only with the following processors, solely for the purposes described above:
- Stripe Payments Europe Ltd — payment processing. Stripe is certified PCI DSS Level 1. See Stripe's privacy policy.
- Formspree — contact form delivery. See Formspree's privacy policy.
- Netlify — website hosting. Server logs may temporarily record IP addresses. See Netlify's privacy policy.
- Google LLC (Google Analytics) — website analytics. Google Analytics collects anonymous data about how visitors use this site (pages visited, session duration, approximate location, device type). No personally identifiable information is sent to Google. Data is processed by Google LLC in the United States under Standard Contractual Clauses. See Google's privacy policy.
We do not share your personal data with any other third parties, and no personal data is transferred outside the United Kingdom except as processed by the services listed above under appropriate safeguards (Standard Contractual Clauses). You may request a copy of the relevant safeguards or further information about international transfers by emailing customers@thlinnovation.com.
5. Data Retention
- Order records in Stripe: retained for up to 6 years to comply with HMRC requirements.
- Contact form submissions: retained until the enquiry is resolved, then deleted within 12 months.
- Browser localStorage: controlled entirely by you; cleared when you clear your browser's site data.
6. Cookies & Local Storage
We use browser localStorage to preserve your shopping basket and any discount code you enter. This data stays on your device only and is not transmitted to our servers. It is strictly necessary for the shop to function and does not require separate consent under PECR.
We also use Google Analytics (GA4) to understand how visitors use this site. Google Analytics collects anonymous data such as pages visited, session duration, approximate location (country/city level), and device type. No personally identifiable information is collected. GA4 sets the following cookies:
| Cookie | Purpose | Duration |
|---|---|---|
_ga | Distinguishes unique visitors | 2 years |
_ga_DWDC8JKKMM | Maintains session state | 2 years |
These analytics cookies are set only if you accept via the cookie consent banner shown on your first visit. If you decline, no analytics cookies are placed and no data is sent to Google. You can withdraw consent at any time by clearing this site's data in your browser settings, or by installing the Google Analytics opt-out browser add-on.
Legal basis: Consent (Article 6(1)(a) UK GDPR; PECR Regulation 6).
7. Your Rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you
- Have inaccurate data corrected
- Request deletion of your data
- Restrict or object to processing
- Receive your data in a portable format
To exercise any of these rights, email customers@thlinnovation.com. We will respond within 30 days.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).
8. Children
This website is not directed at individuals under the age of 16 and we do not knowingly collect personal data from children.
9. Changes to This Policy
We may update this policy from time to time. The "last updated" date at the top of this page will always reflect the most recent version.