Privacy Policy - Thamdesign LTD

Effective Date: June 13, 2025
Last Updated: June 13, 2025
Applies To: All visitors, users, and customers of thamdesignltd.com

At ThamDesignLTD, we understand that trust is essential when shopping for clothing, footwear, and home accessories. When you purchase a premium T-shirt, comfortable sneakers, or a stylish area rug from us, you deserve complete transparency about how your personal information is handled.

This Privacy Policy explains our data practices in clear, straightforward terms and demonstrates our commitment to compliance with all applicable data protection laws, including GDPR (European Union), UK GDPR (United Kingdom), and CCPA (California Consumer Privacy Act).

1. 📋 Information We Collect

We collect only the information necessary to provide you with exceptional service and deliver your ThamDesignLTD products:

a. Order & Customer Information

Purpose: To process and fulfill your clothing, footwear, and home accessory orders

Full name and contact details
Shipping address and billing address
Phone number and email address
Order specifics: product type (apparel/footwear/home goods), size, color, quantity, price
Order status and tracking information
Payment method selection (processed by secure third-party processors – we never store card details)

b. Account Information (Optional)

Purpose: To provide personalized shopping experience and order history

Login credentials (email address and securely encrypted password)
Purchase history for clothing, footwear, and home accessories
Saved items and wishlist (apparel preferences, shoe sizes, home decor styles)
Size preferences and fit history

c. Website Usage Information

Purpose: To improve website functionality and user experience

IP address and general location (city/region level only)
Device and browser information (type, version, screen size)
Pages visited within our clothing, footwear, and home categories
Time spent browsing product collections
Search terms used within our product catalog
Referral source (how you found our website)

d. Communication Preferences

Purpose: To send relevant updates about products you’re interested in

Newsletter subscription status (opt-in only)
Product category interests (clothing, footwear, home accessories)
Email engagement metrics (opens, clicks – for delivery optimization only)
Communication channel preferences

Information We Do NOT Collect:

Government-issued identification numbers
Biometric or health data
Financial account details (handled by payment processors)
Sensitive personal characteristics or political affiliations
Location tracking beyond general shipping region

2. 🎯 How We Use Your Information

We use your personal information exclusively for legitimate business purposes related to your ThamDesignLTD shopping experience:

Purpose	Specific Use	Legal Basis
Order Processing	Fulfilling clothing, footwear, and home accessory orders; shipping coordination; delivery confirmation	Contract Performance
Customer Service	Order inquiries, returns/exchanges, product questions, size guidance	Contract Performance
Product Communication	Restock alerts for sold-out items, new collection announcements, seasonal promotions	Legitimate Interest (with opt-out)
Website Improvement	Analyzing browsing patterns to improve product categorization and site navigation	Legitimate Interest
Fraud Prevention	Protecting against unauthorized transactions and account access	Legal Obligation
Legal Compliance	Meeting tax reporting, consumer protection, and regulatory requirements	Legal Obligation

Marketing Communications: We only send promotional emails to customers who have explicitly opted in. You can unsubscribe at any time using the link in every email or by contacting our support team.

3. 🔐 Data Security & Protection

Your information security is paramount. We implement comprehensive protection measures:

Technical Safeguards:

256-bit SSL Encryption for all data transmission
PCI DSS Level 1 Compliance for payment security
Secure cloud infrastructure with regular security updates
Encrypted data storage with access controls
Regular security audits and vulnerability assessments

Operational Safeguards:

Role-based access control – only authorized personnel can access customer data
Data minimization – we collect and retain only necessary information
Staff training on data protection and privacy best practices
Incident response procedures for any security concerns

Payment Security:

No card storage – all payment details processed by certified third-party providers
Tokenized transactions – no sensitive payment data passes through our systems
Fraud monitoring – automated systems detect unusual transaction patterns

4. 🍪 Cookies & Website Technologies

We use cookies and similar technologies to enhance your browsing and shopping experience:

Essential Cookies (Always Active):

Shopping cart persistence – keeps your selected items during your session
User authentication – maintains secure login status
Security tokens – prevents unauthorized access attempts
Basic site functionality – ensures proper website operation

Performance Cookies (With Your Consent):

Page load optimization – improves website speed and responsiveness
Error tracking – helps us identify and fix technical issues
Mobile optimization – ensures proper display across devices

Marketing Cookies (With Your Consent):

Product recommendations – suggests relevant clothing, footwear, or home items
Abandoned cart reminders – helps you complete your purchase
Email campaign optimization – improves newsletter relevance

Managing Cookie Preferences: You can control cookie settings through our cookie consent banner (displayed on first visit) or adjust preferences in your browser settings. Disabling essential cookies may affect core website functionality, including the ability to complete purchases.

5. 🤝 Information Sharing & Third Parties

We never sell, rent, or trade your personal information.

We share data only with trusted service providers essential for delivering ThamDesignLTD products and services:

Logistics & Fulfillment Partners:

Shipping carriers (USPS, Royal Mail, UPS, FedEx, DHL) – to deliver your orders
Warehouse partners – for inventory management and order fulfillment
Returns processors – to handle exchanges and refunds

Payment & Financial Services:

Payment processors (PayPal, Stripe) – for secure transaction processing
Financial institutions – for payment verification and fraud prevention
Accounting services – for tax compliance and financial reporting

Technology & Communication Providers:

Email service providers – for transactional and marketing communications
Website analytics (Google Analytics with privacy controls) – for site improvement
Customer support platforms – for help desk and live chat functionality
Cloud storage providers – for secure data hosting and backup

Third-Party Obligations: All service providers are contractually required to protect your data, use it only for specified purposes, and comply with applicable privacy laws.

6. 🌍 International Data Transfers

ThamDesignLTD operates from both the United States and United Kingdom. Your personal information may be transferred and processed in either jurisdiction to provide optimal service:

Transfer Safeguards:

UK to US transfers: Protected under UK adequacy decision for limited commercial transfers
EU to US transfers: Covered by Standard Contractual Clauses (SCCs) approved by European Commission
Cross-border security: All transfers use encrypted channels and secure protocols
Data localization: European customer data primarily processed within UK when possible

Regional Processing:

UK customers: Primary processing in UK, with US processing only for specialized services
US customers: Primary processing in US, with UK coordination for inventory management
International customers: Processing in region closest to shipping destination

7. 👤 Your Privacy Rights

Your privacy rights vary by location. Here are the rights available to you:

Universal Rights (All Customers):

📧 Unsubscribe from marketing emails at any time
🔒 Account access to view and update your information
❓ Customer support for privacy-related questions

Enhanced Rights (GDPR/UK GDPR/CCPA):

📄 Access: Request a copy of personal information we hold about you
✏️ Rectification: Correct inaccurate or incomplete information
🗑️ Erasure: Request deletion of your personal data (subject to legal obligations)
⏸️ Restriction: Limit how we process your information
📁 Portability: Receive your data in a structured, machine-readable format
🚫 Objection: Opt out of marketing communications or legitimate interest processing
🔄 Consent withdrawal: Revoke consent for voluntary data processing

Exercising Your Rights:

Contact Method: Email support@thamdesignltd.com with “Privacy Request” in subject line
Verification: We’ll verify your identity before processing requests
Response Time: 30 days maximum (we typically respond within 7-10 business days)
No Cost: Most requests are processed free of charge

8. ⏰ Data Retention Periods

We retain personal information only as long as necessary for legitimate business purposes:

Retention Schedule:

Active customer accounts: Retained while account is active plus 3 years after last purchase
Order information: 7 years for tax and warranty purposes
Marketing data: Until you unsubscribe, then deleted within 30 days
Website analytics: Aggregated data only, retained for 26 months
Customer service records: 3 years after last interaction
Payment transaction logs: 2 years for fraud prevention (no card details stored)

Automatic Deletion:

Inactive accounts: Accounts with no activity for 4 years are automatically deleted
Guest checkout data: Deleted 1 year after purchase completion
Marketing contacts: Removed immediately upon unsubscribe request
Cookie data: Expires according to individual cookie settings (maximum 2 years)

Legal Retention:

Some information may be retained longer when required by law (e.g., tax records, warranty claims, legal proceedings).

9. 👶 Children’s Privacy

ThamDesignLTD products and services are intended for adults (18+). We do not knowingly collect personal information from children under 13 years of age.

If we discover that a child under 13 has provided personal information:

We will delete the information immediately
We will contact parents/guardians if contact information is available
We will review our processes to prevent future occurrences

Parent/Guardian Rights: If you believe your child has submitted information to us, please contact us immediately at support@thamdesignltd.com for prompt removal.

10. 🔄 Policy Updates & Changes

This Privacy Policy may be updated to reflect changes in our practices, technology, or legal requirements.

Update Process:

Notification: Significant changes will be announced via email to registered users
Effective date: New policies take effect 30 days after posting
Continued use: Using our website after the effective date constitutes acceptance
Archive: Previous versions available upon request