Privacy

Fabraholic Ltd (registered company number 13113582) is the controller of your personal information. This means we decide how and why it's used. Our address is 211 Tilehouse Green Lane, Knowle, Solihull, B93 9EB.

We hold the following information about you:

• Information you give us, such as:
  • your name
  • your address, and the addresses you ask us to deliver to
  • your phone number
  • your email address
• Your orders: what we've sent you, when and how you paid, and how you shopped with us. We never see or store your full card or PayPal details; PayPal handles those.
• Your account details: your email address. You sign in with a link or code we email you, so there's no password.
• Your marketing preferences: whether you've agreed to receive offers by email, and a record of when and how you agreed or unsubscribed.
• Technical information about the device you use to visit our website, such as your browser and IP address, which our systems record to keep the site secure and working.
• Information from delivery partners, such as tracking and delivery updates from Royal Mail or our courier.
• Messages you send us, by email or on social media, and our replies.
• Whether our emails reached you: we're told if an email was delivered, bounced or marked as spam. We don't track whether you open our emails or click their links.
• Information from PayPal: when you pay with PayPal, they send us your name, email address and delivery address.
• Information from eBay: if you buy from us on eBay, the name, delivery address and order details eBay gives us.
• Information from Facebook: if you order or ask a question through Facebook, the name and messages you send us there.

You don't have to give us your information, but without your name, delivery address and email address we can't take or deliver your order.

To use your personal information, we need a lawful reason (a "legal basis"). Ours are:

• Contract: we need your information to take, pay for and deliver your order, and to run your account.
• Legitimate interests: we use some information to run and improve our business and keep our website secure, but never in a way that overrides your interests or rights.
• Consent: where you've agreed, for example to receive marketing emails. You can withdraw your consent at any time.
• Legal obligation: where the law requires us to keep or share information, for example tax records.

We use your information to:

• Provide our products to you: if you order from us (thank you!), we use your information to process, pack and deliver your order and handle any returns.
• Contact you: about the progress of your order, to answer a question or sort out a problem, or to ask for feedback.
• Run your account: so you can sign in, save addresses and see your order history.
• Improve our service: to understand what our customers like so we can keep improving our range and our website.
• Send you marketing: if you've opted in, we'll email you about new fabrics and offers we think you'll like.
• Keep our website secure: to protect against fraud and misuse.

We don't make decisions about you by automated means alone.

We only use essential cookies, which keep your basket, sign-in and checkout working and help protect the site. We don't use tracking or advertising cookies. Our Cookie Policy has the details.

We only share your information with companies that help us run our business, and only as much as they need. They include:

• our payment provider, PayPal
• Royal Mail and our couriers, so they can deliver your order
• the companies that host our website, protect it from attacks and store our product photos
• our email delivery service, which sends your order emails
• our accountants and, where needed, other professional advisers such as lawyers.

PayPal handles your payment as a controller in its own right, so its own privacy policy also applies.

We don't sell your personal information.

If you contact us through, or use the services of, other companies such as Facebook or eBay, your information is also covered by their privacy policies.

We may also share your information if we need to protect our legal rights, our customers or our systems, or if the law requires us to share it with a public or regulatory authority.

Our website and systems are hosted in the UK. Some of our service providers process information in the European Economic Area or the United States. Where they do, it's protected by the safeguards UK data protection law requires, such as UK adequacy regulations or approved contract terms.

We'd love to email you offers and news of new fabrics, but only if you've asked us to. We ask with a box you can tick at checkout or when you create an account. It's never ticked for you, and buying from us doesn't sign you up. Either way, we'll still email you about your orders.

You can unsubscribe at any time:

• with the unsubscribe link in any offer email
• on your account's Profile page, under "Offers by email"
• by emailing us at [email protected]

We keep a record of when and how you agreed, and of when you unsubscribed, so we can show we had your consent and make sure we don't email you again. We stop as soon as you unsubscribe, though an email already on its way might still arrive.

We never keep your information for longer than we need to. For orders and accounts, we usually keep it for 7 years after your last order, because the law requires us to keep financial records. If you ask us to close your account, we'll delete the details we don't need to keep. If you unsubscribe from offers, we keep your email address and when you unsubscribed for as long as we send offers, so you're never emailed again by mistake.

Copies of the emails we send you are kept for 2 years (we keep a note that they were sent with your order). Our website's technical logs, including IP addresses, are kept for no more than 90 days.

We take the security of your personal information very seriously. Our controls include:

• limiting who can access the computers and systems that hold your information, on a need-to-know basis
• firewalls, encryption and secure sign-in
• systems that detect and respond to threats
• following good-practice standards for information security.

Under UK data protection law, you have the right to:

• be informed about how we use your information
• access the information we hold about you
• have incorrect information corrected
• have your information deleted
• restrict how we use your information
• receive your information in a portable format
• object to how we use your information
• not be subject to decisions made only by automated means.

Where we rely on your consent, you can withdraw it at any time.

To use any of these rights, contact us using the details below. We may need to confirm your identity first. We'll respond within one month.

If you're unhappy with how we've handled your information, you can complain to us by email or post using the details below. We'll acknowledge your complaint within 30 days, look into it, and tell you what we've found and what we'll do. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

If you want to use any of your rights, or you're just curious about how we hold and use your information, contact us:

• By email: [email protected]
• By post: Fabraholic Ltd, 211 Tilehouse Green Lane, Knowle, Solihull, B93 9EB

We may update this policy from time to time. The date at the top of this page shows when it was last changed.