Privacy Policy

Last updated:

This Privacy Policy describes how Thunmarefrex collects, uses, and protects your personal information when you visit our website or use our services. We are committed to protecting your privacy and handling your data responsibly.

Information We Collect

We collect information that you provide directly to us, including:

  • Name and contact details when you submit enquiries or contact forms
  • Email address for communication purposes
  • Phone number if provided during consultation requests
  • Postal address for delivery and invoicing purposes
  • Payment information processed securely through our payment providers
  • Project details and preferences for custom commission work

We also automatically collect certain information when you visit our website, including:

  • IP address and browser type
  • Device information and operating system
  • Pages visited and time spent on our site
  • Referring website addresses
  • Cookies and similar tracking technologies

How We Use Your Information

We use the information we collect to:

  • Respond to your enquiries and provide customer support
  • Process and fulfil orders for our products and services
  • Communicate with you about your projects and orders
  • Send you important updates about our services
  • Improve our website functionality and user experience
  • Analyse website usage patterns to enhance our services
  • Comply with legal obligations and protect our rights
  • Prevent fraud and ensure website security

Legal Bases for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal bases:

  • Consent: When you provide explicit consent for specific processing activities, such as marketing communications
  • Contractual necessity: To fulfil our contractual obligations when you place an order or commission work
  • Legitimate interests: For website analytics, security, and improving our services where these interests do not override your rights
  • Legal obligation: To comply with applicable laws and regulations, including tax and accounting requirements

Information Sharing and Disclosure

We do not sell your personal information to third parties. We may share your information only in the following circumstances:

  • With service providers who assist us in operating our website and conducting our business, subject to confidentiality agreements
  • With payment processors to facilitate transactions
  • With delivery companies to fulfil orders
  • When required by law or to respond to legal process
  • To protect our rights, property, or safety, or that of our customers
  • In connection with a business transfer, merger, or acquisition

All third parties with whom we share data are required to maintain appropriate security measures and use information only for specified purposes.

Data Protection

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit using SSL/TLS protocols
  • Secure storage systems with restricted access
  • Regular security assessments and updates
  • Staff training on data protection best practices
  • Access controls and authentication procedures

However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

Your Rights and Options

Under data protection laws, you have the following rights:

  • Right of access: Request copies of your personal data
  • Right to rectification: Request correction of inaccurate or incomplete data
  • Right to erasure: Request deletion of your personal data in certain circumstances
  • Right to restrict processing: Request limitation of how we use your data
  • Right to data portability: Receive your data in a structured, machine-readable format
  • Right to object: Object to processing based on legitimate interests
  • Right to withdraw consent: Withdraw consent for processing where consent is the legal basis

To exercise these rights, please contact us using the information provided in the Contact Information section below.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country.

When we transfer data internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by relevant data protection authorities, to protect your personal information in accordance with this Privacy Policy.

Data Retention Periods

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required or permitted by law.

  • Customer order information: Retained for 7 years for accounting and legal compliance purposes
  • Marketing consent data: Retained until consent is withdrawn
  • Website analytics data: Retained for up to 26 months
  • Enquiry data: Retained for 2 years or until you request deletion

After the retention period, we securely delete or anonymise your personal information.

Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child without parental consent, we will take steps to delete that information promptly.

If you believe we have collected information from a child, please contact us immediately using the contact details provided below.

Third-Party Services

Google Ads Conversion Tracking

We use Google Ads conversion tracking to measure the effectiveness of our advertising campaigns. This service uses cookies to track conversions and may collect information about your interactions with our ads.

Google Ads Remarketing

We use Google Ads remarketing to show you relevant advertisements on other websites you visit. This service uses cookies to display ads based on your previous visits to our website.

Google Analytics

We use Google Analytics to analyse website usage and improve our services. Google Analytics collects information such as how often users visit our site, what pages they visit, and what other sites they visited prior to coming to our site.

Google Maps API

We may use Google Maps API to display location information. When you interact with maps, Google may collect certain information about your location and device.

For more information about how these third-party services handle your data, please review their respective privacy policies.

Use of Cookies

We use cookies and similar tracking technologies to enhance your browsing experience, analyse site traffic, and personalise content. Cookies are small text files stored on your device when you visit our website.

For detailed information about the types of cookies we use and how to manage them, please refer to our Cookies Policy.

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website with a new "Last updated" date.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our services after any changes constitutes acceptance of the updated policy.

Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Thunmarefrex
46 Sackville St
Manchester M1 3WF
United Kingdom

callme@thunmarefrex.world
+44 161 697 4474

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not addressed your concerns adequately.