Privacy Policy

Last Updated: October 13, 2025

Thymehouse manages this store and this website, including the data, content, features, tools, products, and services, to provide you—the customer—with a curated shopping experience (the “Services”). Thymehouse uses Shopify technology to deliver these Services. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, make a purchase, or otherwise interact with the Services, or when you communicate with us through any other means. In the event of any conflict between our Terms of Service and this Privacy Policy, this Privacy Policy will prevail with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand how your personal information is collected, used, and disclosed, in accordance with this document.

Personal Information We Collect or Process

When we use the term “personal information,” we refer to any data that identifies you or can reasonably be linked to you or another person. Personal information does not include anonymized or de-identified data that can no longer reasonably identify you. Depending on how you interact with the Services, where you live, and what the applicable laws require, we may collect or process the following categories of personal information—including inferences derived from such information:

Contact details, including your name, address, billing address, shipping address, phone number, and email address.
Financial information, including credit or debit card numbers, financial account details, payment card data, payment confirmations, and other payment-related information.
Account information, including your username, password, security questions, preferences, and settings.
Transaction information, including items you view, add to your cart, save to your wishlist, purchase, return, exchange, or cancel, as well as your past transactions.
Communications with us, including any information you provide in your communications with our customer support team.
Device information, including details about your device, browser, or network connection, IP address, and other unique identifiers.
Usage information, including information about your interactions with the Services—how and when you access or browse them.

Sources of Personal Information

We may collect personal information from the following sources:

Directly from you, such as when you create an account, visit or use the Services, communicate with us, or otherwise provide your information.
Automatically through the Services, such as information from your device when using our products or visiting our website, including cookies and similar technologies.
From our service providers, when we engage them to enable certain technologies or process your personal data on our behalf.
From our partners or other third parties.

How We Use Your Personal Information

Depending on your interactions with us or the Services you use, we may use your personal information for the following purposes:

To provide, personalize, and improve the Services.
We use your personal information to fulfill our contract with you, process payments, manage orders, remember your preferences, send account notifications, handle returns or exchanges, and provide a personalized shopping experience, including product recommendations.
Marketing and advertising.
We use your information for marketing and promotional purposes, such as sending promotional emails, SMS messages, or postal mail, and displaying online ads for our products or services—both on our website and on third-party sites—based on your shopping activity.
Security and fraud prevention.
We use your information to authenticate accounts, ensure safe transactions, detect and investigate potential fraud or illegal activity, and maintain the security of our services. You are responsible for keeping your login credentials confidential.
Communications with you.
We use your information to provide customer service, respond to inquiries, and maintain our business relationship.
Legal obligations.
We may use your information to comply with laws, respond to legal processes, or enforce our terms and policies.

How We Disclose Personal Information

In certain cases, we may share your personal information with third parties for legitimate business reasons, as outlined below:

With Shopify, service providers, and vendors who perform services on our behalf (e.g., IT management, payments, analytics, order fulfillment, shipping, cloud storage, customer service).
With marketing and business partners to deliver targeted advertising or promotions. Shopify supports personalized advertising services across merchants and websites, and these partners will use your information according to their own privacy policies.
With your consent, such as when you use social media integrations or third-party widgets.
With affiliates or our business group, as part of our corporate structure.
In connection with business transactions, such as mergers, acquisitions, insolvency proceedings, or to comply with legal obligations or enforce our Terms of Service.

Relationship with Shopify

The Services are hosted on Shopify, which collects and processes personal information related to your access and use of our website to provide and improve the Services.
Your information may be transmitted to and shared with Shopify and third parties located in other countries. Shopify also uses aggregated data from your interactions with our store and other merchants to enhance its platform. In these cases, Shopify acts as the data controller for such processing.

For more details on how Shopify handles your data and your rights, visit Shopify’s Consumer Privacy Policy or access the Shopify Privacy Portal.

Third-Party Websites and Links

Our Services may contain links to third-party websites or platforms. If you access these, please review their privacy and security policies. We are not responsible for the privacy, accuracy, or reliability of those websites.
Information shared publicly (e.g., via social media) may be visible to other users and is not covered by this Policy.

Children’s Data

Our Services are not intended for minors, and we do not knowingly collect data from children under the applicable age of consent. If a minor has provided personal information, parents or guardians may contact us to request deletion.
As of the effective date of this Policy, we do not “sell” or “share” personal data of individuals under 16 years old.

Security and Retention

While we take appropriate measures to safeguard your data, no security system is entirely foolproof. Do not send sensitive information through unsecured channels.
We retain your personal information only as long as necessary for business, legal, or contractual purposes.

Your Rights and Choices

Depending on where you live, you may have the following rights:

Access – Request a copy of your personal data.
Deletion – Ask us to delete your data.
Correction – Request that we fix inaccurate data.
Portability – Receive or transfer your data to a third party.
Opt-out of data sales or targeted advertising.
Manage communication preferences – You can unsubscribe from promotional emails anytime.

If you live in the UK or EEA, you may also:

Object to or restrict processing for certain purposes.
Withdraw consent where applicable. (Withdrawal does not affect prior lawful processing.)

You can exercise these rights through the contact information below or via Shopify’s privacy page: https://privacy.shopify.com/en.

We may need to verify your identity before processing requests. Authorized agents must provide proof of authorization.

Complaints

If you have concerns about how we handle your personal information, please contact us using the details below.
Depending on your location, you may also have the right to appeal our decision or file a complaint with your local data protection authority.
A list of EEA authorities is available here.

International Transfers

We may transfer, store, and process your personal information outside your country of residence.
When transferring data outside the EEA or UK, we rely on recognized safeguards, such as EU Standard Contractual Clauses (SCCs) or equivalent UK mechanisms, unless transferring to an approved “adequate” country.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Updates will be posted on this site with a new “Last Updated” date, and we will notify you as required by law.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:

📞 Phone: +34 920 817 614

📧 Email: service@thymehouse.com

📍 Address: Calle de Rafael Sarandeses 3, 33420 Lugones, Asturias, Spain

For data protection purposes, we are the data controller of your personal information.