Privacy & Cookie Policy

Effective Date: 09/12/25
Website: https://threadsandflows.com
Business Name: Threads & Flows
Contact Email: info@threadsandflows.com

1. Introduction
Threads & Flows (“we”, “us”, “our”) is committed to protecting the privacy of visitors to our website and ensuring transparency around how we collect and use personal data. This policy is compliant with UK data protection legislation, including UK GDPR and the Data Protection Act 2018.
This combined Privacy & Cookie Policy explains:
– What personal data we collect
– How we use it
– How cookies and tracking tools operate on our website
– Your rights regarding your data
By using our website, you agree to the practices described in this policy.
2. Information We Collect
2.1 Personal Data You Provide to Us
We collect personal data only when you voluntarily submit it, including:
Email address (e.g., signing up for our newsletter)
Name (if provided through forms)
Any information you include when contacting us
We do not collect or process payment information.
2.2 Automatically Collected Data
When you visit our website, and only if you consent to non-essential cookies, the following data may be collected via analytics and marketing tools:
– IP address
– Browser type and version
– Device information
– Approximate location
– Pages visited and navigation patterns
This data helps us analyse website performance and improve user experience.
3. Use of Personal Data
We use the data collected for purposes including:
– Responding to inquiries and messages
– Sending newsletters and marketing emails (only if opted-in)
– Improving website performance (via Google Analytics 4 and search engine analysis)
– Running advertising and remarketing campaigns (Google Ads)
– Delivering relevant content and emails (via Klaviyo)
We never sell your personal data.
4. Sharing of Data
We may share data with the following trusted third parties:
– Klaviyo – for email automation and storing subscriber information
– Google Analytics 4 (GA4) – for website analytics
– Google Ads – for advertising performance and remarketing
– Google Search Console – for website indexing and technical performance monitoring
These providers process data on our behalf in accordance with their own privacy and security standards.
We do not share personal data with any other third parties unless required by law.
5. Cookies & Tracking Technologies
5.1 What Are Cookies?
Cookies are small files placed on your device to store and track information. Cookies help us improve site performance, understand visitor behaviour, and deliver relevant marketing.
5.2 Cookies We Use
Our website uses the following cookie types:
Essential Cookies: Required for the website to function properly. These cannot be disabled.
Analytics Cookies (GA4): Used to measure website performance, such as device and browser data, on-site behaviour, and traffic sources. These cookies are activated only with your consent.
Marketing Cookies (Google Ads): Used to evaluate advertising performance and provide remarketing functionality.
Klaviyo Cookies: Track interactions with signup forms and email activity. These help ensure relevant email delivery to subscribers.
Third-Party Cookie Note: Please note that the specific cookies set by Klaviyo, Google Analytics 4, and Google Ads are controlled by those third parties. We encourage you to review their respective cookie policies for detailed information on their tracking practices.
5.3 Cookie Consent
Upon your first visit, a cookie banner will ask you to:
– Accept all cookies
– Reject non-essential cookies
– Customise cookie preferences
You may change or withdraw consent at any time via your browser settings or the cookie management tool on our site.
6. Legal Basis for Processing (GDPR)
For visitors in the European Economic Area (EEA), we process personal data under the following lawful bases:
Consent: For newsletter signups, analytics tracking and marketing cookies.
Legitimate Interest: For essential website functionality.
Contract / Pre-contractual Steps: For taking steps at your request before entering into a contract, such as responding to service inquiries, or for fulfilling a contract for services once signed.
7. Your Rights (GDPR)
You have the right to:
– Request access to your personal data
– Correct or update inaccurate data
– Request deletion (“right to be forgotten”)
– Withdraw consent at any time
– Object to processing where applicable
– Request a copy of your data (data portability)
To exercise your rights, email: info@threadsandflows.com
8. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy, or for as long as required to comply with our legal obligations (such as tax and accounting purposes).
Email subscriber data is stored within Klaviyo in accordance with their retention policies.
Analytics and cookie data are retained based on your consent and platform defaults.
9. Data Security
We use reasonable technical and administrative measures to protect your data from unauthorised access, alteration, or disclosure. However, no online transmission is 100% secure.
10. International Transfers
Some third-party tools (such as Klaviyo and Google) may process data outside your country. These providers use appropriate safeguards such as Standard Contractual Clauses (SCCs) to ensure compliance.
11. Children’s Privacy
Our website is not intended for minors under 18. We do not knowingly collect personal data from individuals under 18.
12. Changes to This Policy
We may update this Privacy & Cookie Policy periodically. Updates will be posted on this page with the revised effective date.
13. Contact Us
If you have any questions about this policy or your personal data, contact us at:
Email: info@threadsandflows.com Business Name: Threads & Flows