Privacy policy

Last updated: 26 October 2026

This policy explains what personal information Thicket & Co collects, why, and your rights. We follow UK data protection law (UK GDPR and the Data Protection Act 2018).

Who we are

Thicket & Co is a UK sole trader business. Address: Lytchett House, 13 Freeland Park, Wareham Road, Poole, Dorset, BH16 6FA. Email: hello@thicketco.co.uk.

What we collect

• Order details: your name, delivery and billing address, email, phone number, and what you bought.

• Payment: handled securely by our payment providers (Shopify Payments, including Apple Pay, Google Pay and Shop Pay). We never see or store your full card details.

• Messages: anything you send us by email or chat.

• Browsing data: device, browser and how you use our site, collected through cookies (see below).

• Marketing preferences: whether you've signed up for emails.

Why we use it, and our legal basis

• To process and deliver your order and handle returns: to perform our contract with you.

• To provide customer support: to perform our contract, and our legitimate interest in helping you.

• To prevent fraud and keep our store secure: legitimate interests.

• To send marketing emails: your consent, or, if you've bought from us, our legitimate interest in telling you about similar products. Every email has an unsubscribe link.

• For analytics and advertising cookies: your consent, which you can change at any time.

• To keep tax and accounting records: legal obligation.

Who we share it with

We only share what's needed, with trusted providers who process it on our behalf:

• Our store platform (Shopify) and payment providers.

• Our fulfilment partners and suppliers, who pack and ship your order (your name, address, phone number and order).

• Delivery companies and parcel-tracking services.

• Our email provider (Zoho) and email marketing tools.

• Automation and AI tools that help us process orders and draft replies to customer messages. A person oversees these, and they only use your data to provide that service to us.

• Advertising platforms (Meta, TikTok, Google), only through cookies you've agreed to.

• Our accountant, and authorities where the law requires it.

Some of these providers may process data outside the UK. When they do, we make sure appropriate safeguards are in place, such as UK adequacy regulations or the UK International Data Transfer Agreement.

How long we keep it

• Order and transaction records: 6 years, for tax purposes.

• Customer service messages: 2 years after your last contact.

• Marketing data: until you unsubscribe.

Your rights

You can ask us to access, correct or delete your data, to restrict or object to how we use it, or to send it to you in a portable format. You can withdraw consent at any time. Email hello@thicketco.co.uk and we'll respond within one month.

If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office (ico.org.uk), but please talk to us first so we can try to put it right.

Cookies

Essential cookies make the store work (e.g. your basket). With your permission, we also use analytics and advertising cookies to understand what's popular and show relevant ads. You can change your choice at any time using the cookie banner or your browser settings.