Legal

Privacy Policy
& GDPR

Last updated: August 2026  ·  bandofthreads.com

1. Who We Are

Band of Threads is a WW2 heritage apparel brand operating at bandofthreads.com. For any privacy-related queries, contact us at hello@bandofthreads.com.

2. What Data We Collect

We collect the following personal data only when you voluntarily provide it:

• Name — when you sign up for pre-order notifications
• Email address — to notify you about product launches and updates
• Size preference — to help us plan stock levels (optional)

We do not collect payment information directly — any purchases are handled by third-party platforms (e.g. Shopify, Printify) with their own privacy policies.

3. How We Use Your Data

Your data is used solely for:

• Notifying you when products go on sale (if you signed up)
• Sending occasional updates about Band of Threads launches and content
• Improving our website and understanding our audience

We will never sell, rent, or share your personal data with third parties for marketing purposes.

4. Legal Basis for Processing (GDPR)

Under the UK GDPR and EU GDPR, we process your personal data on the following legal bases:

• Consent — you actively submitted your email to receive notifications. You can withdraw consent at any time.
• Legitimate interests — to operate and improve our website.

5. Email Marketing

By submitting your email on our website, you consent to receive emails from Band of Threads about product launches and updates. Every email we send includes an unsubscribe link. You can opt out at any time.

We use Brevo (formerly Sendinblue) to manage our mailing list. Your data is stored on Brevo's servers in accordance with their privacy policy.

6. Cookies

Our website uses minimal cookies:

• Essential cookies only — no tracking, no advertising cookies
• We use ipapi.co to detect your approximate country for currency display. This is a one-time API call and no personal data is stored.

We do not use Google Analytics, Facebook Pixel, or any other third-party tracking tools at this time.

7. Your Rights (GDPR)

Under UK/EU GDPR, you have the following rights:

• Right to access — request a copy of the data we hold about you
• Right to erasure — ask us to delete your data ("right to be forgotten")
• Right to rectification — correct inaccurate data we hold
• Right to restrict processing — limit how we use your data
• Right to data portability — receive your data in a portable format
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — unsubscribe or contact us to remove your data entirely

To exercise any of these rights, email us at hello@bandofthreads.com. We will respond within 30 days.

8. Data Retention

We keep your email address on our mailing list until you unsubscribe or ask us to delete it. We do not retain data for longer than necessary.

9. Data Security

We take reasonable steps to protect your personal data. Email lists are stored with Brevo, which maintains industry-standard security practices. Our website is served over HTTPS.

10. Third-Party Services

We use the following third-party services that may process data:

• Brevo — email list management (privacy policy)
• ipapi.co — country detection for currency display (no personal data stored)
• Google Fonts — font delivery via Google CDN
• YouTube — embedded channel link (Google's privacy policy applies)

11. International Transfers

If you are based in the EU or UK, your data may be transferred to and processed in countries outside the EEA. Where this occurs, we ensure appropriate safeguards are in place (e.g. Standard Contractual Clauses with Brevo).

12. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated date. We encourage you to review this page periodically.

13. Contact & Complaints

For any privacy concerns, contact us at hello@bandofthreads.com.

If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) in the UK: ico.org.uk, or your local EU supervisory authority.