Privacy policy

Last updated: April 2026

At Thea Dove Nottingham, we are committed to protecting your personal data and respecting your privacy in accordance with the UK GDPR, the Data Protection Act 2018, and where applicable, the EU General Data Protection Regulation (GDPR).

1. Who we are

Thea Dove Nottingham
Email: support@theadovenottingham.com

Thea Dove Nottingham is a business established in the Netherlands and operating internationally, including within the United Kingdom.

For the purposes of data protection law, we act as the data controller of your personal data.

2. What data we collect

We may collect and process the following personal data:

  • Name, email address, and phone number
  • Billing and shipping address
  • Payment details (processed securely via third-party providers)
  • Order details and purchase history
  • IP address, browser type, and device information
  • Website usage data (via cookies and similar technologies)

3. How we collect your data

We collect your data when you:

  • Place an order on our website
  • Contact us via email or forms
  • Subscribe to marketing communications
  • Browse or interact with our website (cookies)

4. Legal basis for processing

We process your personal data under the following legal bases:

  • Contract – to process and deliver your order
  • Consent – for sending marketing communications
  • Legitimate interests – to improve our website, prevent fraud, and enhance customer experience

You can withdraw your consent at any time.

5. How we use your data

We use your data to:

  • Process and deliver your orders
  • Communicate with you about your order
  • Provide customer support
  • Improve our website and services
  • Prevent fraud and ensure security
  • Send marketing emails (only if you have opted in)

You can unsubscribe from marketing emails at any time via the link in our emails.

6. Sharing your data

We may share your personal data with trusted third parties, including:

  • Shopify (our e-commerce platform)
  • Payment providers
  • Shipping, fulfilment, and dropshipping suppliers
  • IT and analytics service providers

These parties only process your data on our behalf and are required to handle it securely and in accordance with data protection laws.

7. International data transfers

As a Netherlands-based business operating internationally, your personal data may be processed within the European Economic Area (EEA) as well as the United Kingdom.

In order to fulfil your orders, we may share necessary information (such as your name, shipping address, and order details) with our dropshipping and fulfilment partners, which may be located in countries outside the UK and EEA, including regions in Asia.

Where personal data is transferred internationally, we ensure appropriate safeguards are in place, such as:

  • Standard Contractual Clauses (SCCs)
  • Working with providers that comply with applicable data protection standards

8. Data retention

We retain your personal data only as long as necessary for the purposes outlined in this policy.

  • Order and transaction data may be retained for up to 7 years to comply with legal and tax obligations
  • Marketing data is retained until you withdraw your consent

9. Your rights

Under applicable data protection laws, including the UK GDPR and EU GDPR, you have the right to:

  • Access your personal data
  • Correct inaccurate or incomplete data
  • Request deletion of your data
  • Restrict or object to processing
  • Withdraw consent at any time
  • Request data portability

If you are based in the United Kingdom, you also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

10. Cookies

We use cookies and similar technologies to:

  • Improve your browsing experience
  • Analyse website traffic
  • Personalise content and advertisements

Where required by law, we will request your consent via a cookie banner before placing non-essential cookies.

You can manage your cookie preferences through your browser settings.

11. Security

We implement appropriate technical and organisational measures to protect your personal data, including:

  • SSL encryption
  • Secure payment processing
  • Restricted access to personal data

12. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.

13. Contact us

If you have any questions about this Privacy Policy or your personal data, you can contact us at:

support@theadovenottingham.com