Privacy Policy
For tcboo.shop
Operated by Spinney Yarns Ltd t/a tcboo.shop
Last Updated: 23 August 2026
1. Introduction
Spinney Yarns Ltd trading as tcboo.shop (“we”, “our” or “us”) respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how we collect, use, store, share and protect personal information when you visit tcboo.shop, create an account, contact us or purchase stock, bespoke, personalised or print-on-demand products.
This policy is intended to support compliance with:
• The UK General Data Protection Regulation (UK GDPR)
• The Data Protection Act 2018
• The Privacy and Electronic Communications Regulations 2003 (PECR)
• The EU General Data Protection Regulation, where applicable
• Other applicable privacy and data-protection laws in the countries in which we operate or supply customers
2. Data Controller
Spinney Yarns Ltd t/a tcboo.shop is the data controller responsible for the personal data covered by this Privacy Policy.
Business name: Spinney Yarns Ltd t/a tcboo.shop
Website: tcboo.shop
Email: accounts@tcboo.co.uk
Registered office: 3 Lawyers Lane, Oadby, Leicester, LE2 5QN, United Kingdom
Company registration number: 08616062
3. What Information We Collect
We may collect and process the following information:
Personal Information
- Name
- Billing address
- Delivery address
- Email address
- Telephone number
Order Information
- Products ordered
- Order history
- Payment status
- Refund information
- Delivery information
- Customer service communications
Design & Print Information
For custom, personalised, or print-on-demand products:
- Uploaded artwork
- Logos
- Images
- Text submissions
- Design instructions
- Artwork approvals
- Communication records
Technical Information
- IP address
- Browser type
- Device information
- Website interaction data
- Cookie data
- Analytics information
4. How We Use Your Information
We may use personal information to:
- Process and fulfil orders
- Deliver products and services
- Produce bespoke or printed products
- Communicate regarding orders or customer support
- Process refunds and returns
- Improve website performance and user experience
- Prevent fraud and misuse
- Meet legal or regulatory obligations
- Conduct internal business administration
- Send marketing communications where consent has been given
5. Legal Basis for Processing
We process personal data under one or more of the following lawful bases:
• Contract: to process orders, payments, deliveries, returns, refunds and instructions relating to bespoke or personalised products.
• Legal obligation: to maintain accounting, tax and regulatory records and to respond to lawful requests from public authorities.
• Legitimate interests: to administer and improve our business, respond to enquiries, prevent fraud, protect our website and systems, resolve disputes and provide customer service.
• Consent: for non-essential cookies and marketing communications where consent is required.
Where we rely on legitimate interests, we consider whether our interests are outweighed by the individual’s rights, freedoms and interests.
6. Print-on-Demand & Uploaded Content
When customers submit artwork, logos, images, text, design instructions or other content, we process that information to:
• Produce personalised, bespoke or print-on-demand products
• Prepare and provide artwork proofs
• Record customer approval
• Communicate about the design or order
• Fulfil and deliver the order
• Resolve questions, complaints or disputes
• Facilitate repeat orders where requested
We may retain submitted artwork, proofs, design instructions, communications and approval records in accordance with the retention periods described in Section 14 of this Privacy Policy.
Customer obligations relating to ownership, permission, intellectual-property rights and design accuracy are covered by our Terms and Conditions.
7. Payments
Payments are processed securely using third-party payment providers.
We do not store full payment card information on our own systems.
Third-party payment processors may process data under their own privacy and security policies.
8. Cookies & Tracking Technologies
Our website may use:
- Essential cookies
- Functional cookies
- Shopping cart cookies
- Analytics cookies
- Performance cookies
- Marketing cookies
Cookies help us:
- Operate the website
- Improve functionality
- Analyse website traffic
- Improve user experience
- Measure advertising effectiveness
Non-essential cookies are only activated after user consent has been provided through our cookie banner or consent management system where legally required.
Users may manage cookie settings through browser preferences.
A separate Cookie Policy may also apply.
9. Marketing Communications
Where consent has been provided, we may send:
- Promotional emails
- Product updates
- Newsletters
- Offers
- Business communications
Users may unsubscribe at any time via unsubscribe links or by contacting us directly.
We do not sell personal information to third parties.
Review invitations and customer photographs
Separately from marketing communications, we may use a customer’s name, email address, order number and product details to send one review invitation approximately 14 days after an order is completed. This helps us collect genuine feedback and improve our products and customer service. Customers may opt out of future review requests. Reviews and photographs are submitted voluntarily. We will obtain separate permission before publishing a photograph, destination or chosen name on our website or social media as part of our “Where in the world has your tcboo been?” feature.
10. Sharing Information
We may share personal information, where reasonably necessary, with:
• Payment providers
• Delivery and logistics companies
• Website hosting and e-commerce providers
• Cloud storage and IT service providers
• Printing and manufacturing partners
• Analytics providers
• Professional advisers, including accountants, insurers and legal advisers
• Customs authorities and other regulatory or public authorities where legally required
• Venue operators, event organisers or fulfilment partners where necessary to complete an order
Where third parties process personal data on our behalf, they are required by contract to protect it, maintain appropriate security and use it only for the agreed purposes.
We do not sell personal information to third parties.
11. International Data Transfers
Some of our service providers, delivery partners or customers may be located outside the United Kingdom. As a result, personal data may occasionally be transferred to, processed in or accessed from another country.
International transfers may be necessary for:
• Order fulfilment and international delivery
• Payment processing
• Customer support
• Website hosting, cloud storage or other service integrations
• Customs processing
• Cruise ship, resort, hotel, event or destination-based deliveries
Where personal data is transferred outside the United Kingdom, we use a lawful transfer mechanism where required. This may include:
• UK adequacy regulations
• The UK International Data Transfer Agreement
• The UK Addendum to approved contractual clauses
• Another safeguard or exception permitted under applicable data-protection law
Some countries may not provide the same level of legal protection for personal data as the United Kingdom.
Information about the safeguards applying to a particular transfer may be requested by contacting accounts@tcboo.co.uk.
12. International Privacy Rights
Depending on where you live and subject to applicable law, you may have rights relating to your personal data, including:
• The right to request access to your personal data
• The right to have inaccurate or incomplete information corrected
• The right to request deletion of personal data
• The right to request restriction of processing
• The right to object to certain processing
• The right to data portability
• The right to withdraw consent at any time
• The right to object to direct marketing
• Rights relating to automated decision-making, where applicable
• The right to complain to the relevant data-protection authority
Requests may be sent to:
We normally respond to valid data-protection requests within one month. This period may be extended where permitted by law, including where a request is particularly complex.
We may request information reasonably necessary to confirm your identity before processing a request.
13. Automated Decision-Making
We do not currently use automated decision-making or profiling that produces legal or similarly significant effects on users.
14. Data Retention
We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, operational and dispute-resolution requirements.
Our usual retention periods are:
• Completed orders: up to seven years
• Cancelled or refunded orders: up to seven years
• Failed or abandoned orders: up to 12 months
• Customer accounts: retained while active and normally deleted or anonymised following account closure or prolonged inactivity, subject to legal and accounting requirements
• Artwork, design files, proofs and approvals: normally up to three years following the most recent order
• Customer-service communications: normally up to three years after the matter is concluded
• Marketing-consent records: retained until consent is withdrawn or the information is no longer required
• Marketing opt-out records: limited information may be retained to ensure that an opt-out request continues to be respected
Information may be retained for longer where:
• Required by law
• Necessary for tax or accounting purposes
• Necessary to prevent or investigate fraud
• Required to establish, exercise or defend legal claims
• Necessary to resolve a complaint or dispute
• The customer has requested that artwork be retained for future repeat orders
When personal data is no longer required, it will be securely deleted or anonymised.
15. Security
We implement reasonable and appropriate technical and organisational measures to help protect personal information against:
• Unauthorised access
• Accidental loss
• Misuse
• Unauthorised disclosure
• Alteration
• Destruction
Access to personal data is restricted to people and service providers who reasonably require it for legitimate business purposes.
However, no internet-based service or electronic storage system can be guaranteed to be completely secure.
Where a personal data breach must legally be reported, we will notify the appropriate supervisory authority and affected individuals within the applicable legal timescales.
16. Children’s Privacy
Our website and products are not specifically directed at children.
Customers must be at least 18 years old to place an order or must have the involvement and permission of a parent or legal guardian.
We do not knowingly collect personal data directly from children where parental consent or another lawful basis would be required.
If you believe that a child has provided personal data to us without appropriate permission, please contact accounts@tcboo.co.uk so that we can investigate and take appropriate action.
17. Cruise Ship, Event & International Venue Sales
Orders involving cruise ships, hotels, resorts, conferences, weddings, sporting events, festivals or other international venues may require us to share relevant information with:
• Venue operators
• Event organisers
• Delivery and logistics providers
• Customs authorities
• Local storage or fulfilment partners
• International shipping providers
The information shared may include the customer’s or recipient’s name, contact information, delivery address, order details and any information reasonably required to arrange access or delivery.
We only share information reasonably necessary to fulfil the order, complete delivery and comply with applicable legal or customs requirements.
18. Third-Party Links
Our website may contain links to third-party websites, social media platforms, or external services.
We are not responsible for the privacy practices, policies, or content of third-party websites.
19. Changes to This Policy
We may update this Privacy Policy periodically.
Updated versions will be published on this page together with the revised update date.
20. Contact Information
For privacy-related enquiries or requests, contact:
Spinney Yarns Ltd t/a tcboo.shop
accounts@tcboo.co.uk
3 Lawyers Lane, Oadby, Leicester, LE2 5QN
21. Complaints
If you have concerns about how we collect, use or protect your personal data, please contact us so that we can investigate:
Spinney Yarns Ltd t/a tcboo.shop
accounts@tcboo.co.uk
3 Lawyers Lane, Oadby, Leicester, LE2 5QN, United Kingdom
You also have the right to complain directly to the Information Commissioner’s Office and are not required to contact us first.
UK users may contact:
Information Commissioner’s Office
Website: ico.org.uk
Telephone: 0303 123 1113
EU users may contact the data-protection supervisory authority in the country where they live or work.
Users in other jurisdictions may contact their relevant local privacy or data-protection regulator.