Privacy policy
Last updated 25 October 2026
This policy explains what personal data we collect when you use thousandisles.co.uk, why we collect it and the rights you have over it. We only collect what we need to sell you ube and answer your questions.
Who we are
Thousand Isles is the data controller for the personal data described here. If you have a question about this policy or your data, email hello@thousandisles.co.uk.
- Business
- Thousand Isles
What we collect and why
When you place an order
Online checkout isn’t open yet, so orders come to us by email. You send us your name, email address and delivery address, along with what you’d like to order. If you give a phone number, we collect that too. We use these details to take payment, deliver your order, send you updates about it and handle any returns. We need them to carry out our contract with you, and we keep order records to meet our tax and accounting obligations.
If you pay by card, you pay through a PayPal payment link, and PayPal handles the payment under its own privacy statement. We never see your card number. If you pay by bank transfer, we keep the name and reference that come with your payment as part of our order records.
When you send a wholesale enquiry
The enquiry form asks for your business name, your name and your email address. You can also add your phone number, location, type of business, expected volume and a message. We use these to reply to you and, if you go ahead, to set up and run your trade account. We rely on our legitimate interest in responding to business enquiries, and on taking steps you’ve asked for before entering into a contract.
When you email us
We keep the emails you send us so we can reply and keep a record of the conversation. Our email is provided by Google Workspace.
When you browse the site
We use Vercel Web Analytics and Speed Insights to see how the site is used and how quickly it loads. They don’t use cookies. Visits are counted with an anonymised identifier that resets every day, so we only see totals such as page views and load times, never a profile of you. We rely on our legitimate interest in running a reliable website.
The site’s fonts are served from our own website, so loading them doesn’t connect your browser to any other company.
Cookies and browser storage
We don’t use advertising or tracking cookies. While online checkout isn’t open, the shop doesn’t save anything in your browser.
Who we share it with
We share personal data only with the services that help us run the shop, and only what each one needs:
- PayPal processes card payments made through our payment links.
- Delivery couriers receive your name and delivery address so they can deliver your order.
- Google hosts our email.
- Vercel hosts the website and provides our analytics.
- Our form provider receives enquiries sent through the wholesale form and passes them on to us.
We don’t sell your personal data or share it for advertising. We may disclose it if the law requires us to.
Some of these providers process data outside the UK, including in the United States. Where they do, the transfer is covered by UK adequacy regulations or by safeguards such as the UK International Data Transfer Agreement.
How long we keep it
- Orders: six years after the end of the financial year they relate to, as tax and accounting rules require.
- Trade accounts: while the account is open, then six years.
- Enquiries that don’t lead to an account: up to two years.
- Other emails: up to two years after the conversation ends.
Your rights
Under UK data protection law you can ask us to:
- give you a copy of the personal data we hold about you
- correct anything that’s wrong
- delete your data where we don’t need to keep it
- restrict or object to how we use it
- send your data to you or another organisation in a portable format
To make a request, email hello@thousandisles.co.uk. We’ll reply within one month and won’t charge you, unless a request is clearly unfounded or excessive.
If you’re unhappy with how we’ve handled your data, please tell us first so we can put it right. You can also complain to the Information Commissioner’s Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113.
Marketing
We don’t send marketing emails. If that changes, we’ll only email you if you’ve opted in. Every email will include a way to unsubscribe.
Changes to this policy
If we change how we use your data, we’ll update this page and the date at the top.