Customer information
Privacy Policy
Last updated: 27 September 2026
This policy explains what personal data we collect when you visit yarnvik.shop or buy from us, why we use it, who we share it with and what rights you have. We keep it short and only collect what we need to run the shop.
Who is responsible for your data
The data controller is MINERVA FABRICS LIMITED, trading as YARNVIK, a company registered in England and Wales (company number 04703503), registered office: Minerva Craft Centre, Atlas Road, Darwen, Lancashire, BB3 3BY, United Kingdom. For any privacy question, email support@yarnvik.shop or call +44 7445 823740.
What we collect
- Order details: your name, billing and delivery address, email address, phone number, the items you buy, and the order total and currency.
- Payment details: card and wallet payments are handled directly by our payment providers (Stripe and PayPal). We never see or store your full card number; we receive only a confirmation, the payment method type and, for cards, the last four digits and expiry date.
- Account details: if you create an account, your email address, password (stored in encrypted form) and saved addresses.
- Messages: what you write to us by email, phone or the contact form.
- Technical data: your IP address and browser information, which our hosting provider and payment providers process for security and fraud prevention, and the essential cookies described in our Cookie Policy.
We do not use advertising cookies, tracking pixels or analytics tools on this site, and we do not sell your data.
Why we use it and our legal basis
| Purpose | Legal basis |
|---|---|
| Taking your order, payment, delivery, returns and refunds | Performance of a contract |
| Sending order confirmations, dispatch emails and replies to your questions | Performance of a contract; our legitimate interest in answering you |
| Preventing fraud and keeping the site secure | Legitimate interests |
| Keeping invoices and order records for tax and accounting | Legal obligation |
| Managing your customer account | Performance of a contract |
We only send marketing emails if you have asked to receive them, and every email includes a way to unsubscribe.
Who we share it with
- Payment providers: Stripe (Stripe Payments Europe Ltd. / Stripe, Inc.) and PayPal (Europe) S.à r.l. et Cie, S.C.A., to process payments and prevent fraud. They act under their own privacy policies for some of this processing.
- Delivery carriers: your name, delivery address, and where needed your phone number or email, so they can deliver your parcel and send delivery updates.
- Hosting and email: our website host (Hostinger) and email services, which store data on our behalf.
- Authorities and advisers: where the law requires it, or to our accountants and legal advisers under a duty of confidentiality.
International transfers
We are based in the United Kingdom. Some providers (for example payment providers) may process data outside the UK or the European Economic Area, including in the United States. Where this happens, the transfer is protected by an adequacy decision or by standard contractual clauses approved by the UK and EU authorities.
How long we keep it
- Order and invoice records: 6 years after the end of the financial year of the order, as required by UK tax law.
- Customer accounts: until you ask us to close the account, or after 3 years without any login or order.
- Messages that are not part of an order: up to 2 years.
Your rights
You have the right to access your data, have it corrected or deleted, restrict or object to its use, and receive it in a portable format. Where we rely on consent, you can withdraw it at any time. To use any of these rights, email support@yarnvik.shop; we reply within one month.
You also have the right to complain to a data protection authority. In the UK this is the Information Commissioner’s Office (ico.org.uk). If you live in the EU, you can contact the authority in your country, for example Datatilsynet in Denmark or the data protection authority of your German state.
Security
The whole site uses an encrypted (HTTPS) connection. Payment details are entered into forms provided by our payment providers, which are certified to the PCI DSS standard. Access to order data is limited to the people who need it to serve you.
Changes to this policy
If we change this policy, we will update the date at the top of this page. Significant changes will be highlighted on the site.