Effective Date: 11 August 2025
Last Updated: 11 August 2025
Wheway Yarns (“we,” “our,” or “us”) values your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you visit whewayyarns.com or interact with our services.
1. Who We Are
Wheway Yarns is an independent yarn and craft business based in Dublin Ireland.
If you have any questions about this policy or your data, you can contact us:
Email: hello@whewayyarns.com
2. Data We Collect
We may collect and process the following information:
a) Information You Provide
- Name
- Email address
- Phone number (if provided)
- Billing and shipping address
- Payment details (processed securely via our payment provider — we do not store your card details)
- Any messages you send us via email, forms, or social media
b) Information We Collect Automatically
- IP address
- Browser type and version
- Pages visited and time spent on our site
- Device type and operating system
- Cookies and similar tracking technologies
3. How We Use Your Data
We process your personal data for the following purposes:
- To process and fulfil your orders
- To respond to your queries and customer service requests
- To send you updates about your order
- To send marketing emails (only if you have given consent — you can unsubscribe anytime)
- To improve our website, products, and services
- To comply with legal obligations
4. Legal Basis for Processing (GDPR)
We process your data under the following lawful bases:
- Contract: To fulfil an order or service you requested
- Consent: Where you have given us permission (e.g., marketing emails)
- Legal Obligation: For tax, accounting, or regulatory purposes
- Legitimate Interests: To operate and improve our business and prevent fraud
5. Sharing Your Data
We only share your information when necessary, such as with:
- Payment processors (e.g., Stripe, PayPal)
- Delivery/courier companies (to ship your orders)
- Website hosting and IT support providers
- Email marketing platforms (only if you subscribed)
We do not sell or rent your personal data to third parties.
6. Cookies & Tracking Technologies
We use cookies to improve your browsing experience, analyse site traffic, and remember your preferences.
You can control or delete cookies through your browser settings.
Full details can be found in our [Cookie Policy] (if separate).
7. Data Retention
We keep your personal data only as long as necessary for the purposes it was collected, including legal or accounting requirements. For example, order records are typically kept for 6 years for tax purposes.
8. Your Rights (Under GDPR)
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate information
- Request deletion of your data (“right to be forgotten”)
- Restrict or object to certain processing
- Withdraw consent at any time (for marketing emails)
- Request a copy of your data in a portable format
To exercise these rights, email us at [Insert Email Address].
9. Security
We take appropriate technical and organisational measures to protect your data against loss, misuse, unauthorised access, or disclosure.
10. International Transfers
Some of our service providers may process your data outside the European Economic Area (EEA). We ensure these transfers are protected by adequate safeguards, such as Standard Contractual Clauses or Privacy Shield certification (where applicable).
11. Third-Party Links
Our website may contain links to other websites. We are not responsible for the privacy practices of those websites.
12. Updates to This Policy
We may update this policy from time to time. Any changes will be posted on this page with a revised “Last Updated” date.