RESPONSIBLY SOURCED • HOTEL-GRADE TEXTILES • BULK & TRADE PRICING • RELIABLE UK DELIVERY •

Privacy Policy

TH Mills respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store and protect your personal information when you visit thmills.co.uk, purchase from us, create an account, contact us, subscribe to our communications or otherwise interact with TH Mills.

It also explains the rights available to you under applicable UK data protection law.

1. Who We Are

This website is operated by:

THORNTON MILLS LTD
Trading as TH Mills / Thornton Mills
Company Number: 13184161

Registered Office:
Unit 1 A, Nile House
Pump Street
Blackburn
Lancashire
BB2 1PG
United Kingdom

Website: thmills.co.uk
Email: [email protected]
Telephone: +44 1274 299227

For the purposes of applicable UK data protection legislation, Thornton Mills Ltd is the data controller responsible for the personal information described in this Privacy Policy.

2. Information We Collect

Depending on how you interact with us, we may collect the following categories of personal information.

Identity Information

This may include:

Contact Information

This may include:

Order and Transaction Information

This may include:

Payment Information

Payments may be processed by third-party payment providers.

Depending on the payment method selected, the relevant payment provider may process information such as your:

TH Mills does not necessarily receive or store complete payment card details where payments are securely processed by a third-party payment provider.

Account Information

If you create an account on our website, we may store information including:

You are responsible for keeping your account password confidential.

Communications

If you contact us, we may retain information contained in your communication, including:

Marketing Information

If you subscribe to our newsletter or marketing communications, we may collect:

Technical and Website Information

When you visit our website, certain technical information may be collected automatically.

This may include:

This information may be collected through cookies and similar technologies.

3. How We Collect Your Information

We may collect personal information:

Directly from you

For example, when you:

Automatically

Certain technical information may be collected automatically when you use our website through technologies such as cookies, server logs and similar tools.

From third parties

We may receive relevant information from third parties involved in providing our services, including:

We may also receive information from another person or business where they place an order or make an enquiry on your behalf.

4. How We Use Your Personal Information

We may use your information to:

Process and Fulfil Orders

This includes:

Manage Your Account

We may use your information to:

Communicate With You

We may contact you regarding:

Operate and Improve Our Website

We may use information to:

Prevent Fraud and Protect Our Business

We may process information where reasonably necessary to:

Meet Legal and Regulatory Requirements

We may process and retain information when necessary to:

5. Our Lawful Bases for Using Your Information

UK data protection law requires us to have a lawful basis for processing personal information.

Depending on the circumstances, we may rely on the following bases.

Contract

We process information where it is necessary to perform a contract with you or take steps at your request before entering into a contract.

For example:

Legal Obligation

We may process information where necessary to comply with a legal obligation, including accounting, taxation and regulatory requirements.

Legitimate Interests

We may process information where necessary for our legitimate business interests and where those interests are not overridden by your rights.

These interests may include:

Consent

Where required, we may rely on your consent.

This may include certain:

Where processing is based on consent, you may withdraw that consent at any time.

6. Marketing Communications

You may choose to receive product news, collection updates, offers and other communications from TH Mills.

Where consent is required, we will only send marketing communications where the appropriate permission has been obtained.

You can unsubscribe at any time by:

Stopping marketing communications will not prevent us from sending service messages that are necessary in relation to an order, account or other transaction.

7. Cookies and Similar Technologies

Our website may use cookies and similar technologies.

Cookies are small pieces of information stored on your device that help websites operate and remember information about your visit.

We may use categories of cookies including:

Strictly Necessary Cookies

These are required for important website functions such as:

These cookies may not require consent where they are strictly necessary to provide a service you have requested.

Functional Cookies

These may help remember choices or preferences and provide enhanced website functionality.

Analytics Cookies

These may help us understand:

Where legally required, analytics cookies will only be activated after appropriate consent has been obtained.

Marketing Cookies

Where used, marketing cookies or similar technologies may help measure advertising effectiveness or provide more relevant marketing.

Where consent is legally required, these technologies should not be activated until you have made the appropriate choice.

You can manage available cookie preferences through our cookie consent controls and, in many cases, through your browser settings.

Disabling certain cookies may affect website functionality.

8. Who We Share Personal Information With

We do not sell your personal information.

We may share information where reasonably necessary with trusted organisations that help us operate our business.

These may include:

Payment Providers

To securely process payments and prevent fraudulent transactions.

Delivery and Logistics Providers

To deliver your order and provide delivery updates.

This may require sharing information such as:

Website and Hosting Providers

We may use service providers to host, maintain, secure or support our website and ecommerce systems.

Email and Marketing Providers

Where appropriate, service providers may help us manage newsletter subscriptions or send marketing and service communications.

Analytics and Technology Providers

We may use providers that help us understand website usage, monitor performance and improve our services.

Professional Advisers

We may share information where necessary with:

Government and Regulatory Authorities

We may disclose information where required by law, court order or a lawful request from a regulatory or government authority.

Business Transfers

If Thornton Mills Ltd is involved in a restructuring, merger, acquisition or sale of all or part of its business or assets, relevant personal information may be transferred as part of that transaction, subject to applicable data protection requirements.

9. Payment Security

Payments made through our website may be handled by secure third-party payment providers.

Payment information is processed according to the security measures and privacy practices of the relevant provider.

Where possible, TH Mills does not directly store complete payment card information on its own website systems.

Please ensure you review the privacy information presented by your selected payment provider where appropriate.

10. Delivery Information

To fulfil your order, we may provide relevant information to delivery companies, couriers or logistics providers.

We only provide information reasonably required to arrange and complete delivery.

Delivery providers may process your personal information under their own legal obligations and privacy policies.

11. Trade and Business Customers

TH Mills also supplies commercial and trade customers.

Where you contact us on behalf of a business, we may process information including:

We may retain appropriate information about business customers and contacts where necessary to manage our commercial relationship, fulfil contracts and maintain required records.

12. Factory-Direct Enquiries and External Websites

Our website may refer customers seeking very large or factory-direct orders to another business or website.

If you choose to follow an external link and provide information directly to another organisation, that organisation may become responsible for how it handles the information you provide.

Its own privacy policy will apply to information collected directly by it.

We encourage you to review the privacy policy of any external website before providing personal information.

13. International Transfers

Some of our service providers may store or process personal information outside the United Kingdom.

Where personal information is transferred internationally, we take appropriate steps, where required, to ensure that the information receives an appropriate level of protection.

Depending on the destination and circumstances, these protections may include:

You may contact us if you would like further information about safeguards relevant to an international transfer of your personal information.

14. How Long We Keep Your Information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including to meet legal, accounting, tax and reporting requirements.

The exact retention period may depend on:

Certain transaction and accounting records may need to be retained for at least six years where required by applicable UK record-keeping requirements.

When personal information is no longer required, we will take reasonable steps to securely delete or anonymise it.

15. How We Protect Your Information

We use reasonable technical and organisational safeguards designed to protect personal information against:

Measures may include appropriate access controls, website security measures, encryption and secure third-party payment processing where applicable.

However, no internet-based system can be guaranteed to be completely secure.

You are responsible for keeping your account password and login details confidential.

16. Your Data Protection Rights

Depending on the circumstances and applicable law, you may have rights concerning your personal information.

These may include:

Right of Access

You may request information about the personal data we hold about you and request a copy.

Right to Rectification

You may ask us to correct inaccurate or incomplete personal information.

Right to Erasure

In certain circumstances, you may ask us to delete your personal information.

This right is not absolute, and we may need to retain certain information where required by law or where another lawful reason applies.

Right to Restrict Processing

You may be entitled to ask us to restrict how your personal information is processed in certain circumstances.

Right to Data Portability

Where applicable, you may request certain information you provided to us in a structured and machine-readable format or request its transfer to another organisation.

Right to Object

You may have the right to object to certain processing based on legitimate interests.

You have the right to object to the use of your personal information for direct marketing.

Right to Withdraw Consent

Where we rely on your consent, you may withdraw it at any time.

Withdrawal does not make any processing carried out before withdrawal unlawful.

17. Exercising Your Rights

If you would like to exercise any applicable data protection right, contact us at:

Email: [email protected]

Please include enough information to help us identify you and understand your request.

We may need to ask for reasonable evidence of identity before disclosing or changing personal information.

We will respond to valid requests within the timeframe required by applicable data protection law.

Usually, exercising your data protection rights does not require payment. However, the law may permit us to charge a reasonable fee or refuse a request in limited circumstances, such as where a request is manifestly unfounded or excessive.

18. Complaints

If you have concerns about how we have handled your personal information, please contact us first so that we have an opportunity to investigate and resolve the matter.

You also have the right to make a complaint to the UK data protection regulator:

Information Commissioner’s Office (ICO)
Website: ico.org.uk

Your right to contact the ICO is not affected by contacting us first.

19. Third-Party Websites

Our website may contain links to external websites.

TH Mills is not responsible for the privacy practices, security or content of websites operated by other organisations.

When you leave our website, we recommend reviewing the privacy policy of the website you visit.

20. Automated Decision-Making

We do not currently intend to make decisions that produce significant legal or similarly significant effects solely through automated processing of your personal information.

Fraud-prevention or payment providers may use automated systems when assessing transactions.

Where applicable, their own privacy information should explain how those systems operate and the rights available to you.

21. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect:

The latest version will be published on this page and the Last updated date will be changed accordingly.

We recommend reviewing this Privacy Policy periodically.

22. Contact Us

For questions regarding this Privacy Policy or how we use your personal information, please contact:

TH Mills / Thornton Mills Ltd

Unit 1 A, Nile House
Pump Street
Blackburn
Lancashire
BB2 1PG
United Kingdom

Company Number: 13184161

Email: [email protected]
Telephone: +44 1274 299227
Website: thmills.co.uk