Privacy policy

Last updated: 5 September 2025

New Rainbow Textiles Ltd (“we”, “us”, “our”) operates this online store and website (the “Services”). Our store is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit or shop with us.

By using the Services, you acknowledge you have read and understood this Privacy Policy.

1) Who we are (Data Controller)

New Rainbow Textiles Ltd

98 The Broadway, Southall, Middlesex, UB1 1QF, United Kingdom

Email: info@newrainbowtextiles.com

We are the data controller of personal information processed via this website and store.

2) Personal information we collect

Depending on how you interact with the Services, we may collect:

  • Contact details (name, billing/shipping address, email, phone).
  • Order & transaction data (items viewed, cart activity, purchases, returns).
  • Payment data (card/payment details processed securely by our payment providers).
  • Account data (login, preferences, saved details).
  • Communications (messages to our support or contact forms).
  • Device & usage data (IP address, browser, device identifiers, pages viewed, interaction data).
  • Marketing preferences (your opt-in/opt-out choices).

Some information is collected directly from you, some automatically via cookies/ similar technologies, and some from service providers (e.g., payments, analytics, fulfilment) to operate the Services.

3) Why we use your information (lawful bases)

We process personal information under the UK GDPR on the following bases:

  • Contract – to take and fulfil your orders, provide customer service, manage your account.
  • Legitimate interests – to operate and improve the Services, prevent fraud, keep our site secure, understand usage, and market similar products to existing customers (you can opt out at any time).
  • Consent – for email/SMS marketing where required, and for non-essential cookies. You can withdraw consent at any time.
  • Legal obligation – to comply with tax, accounting, and other legal requirements.

4) How we use your information

We use personal information to:

  • Provide and improve the Services (take payment, arrange shipping, handle returns/exchanges).
  • Personalise your experience (remember preferences, suggest relevant products).
  • Communicate with you (service emails about orders, responses to enquiries).
  • Send marketing (where permitted/consented) and measure campaign effectiveness.
  • Maintain security, prevent fraud and misuse.
  • Comply with legal obligations.

5) Cookies and similar technologies

We and our partners (including Shopify) use cookies and similar technologies to run the site, remember preferences, analyse traffic, and support advertising.

  • Non-essential cookies will only run with your consent (via your cookie banner/settings).
  • You can manage cookies in your browser and via the site’s cookie settings.
    For more detail on Shopify’s cookies, see: https://www.shopify.com/legal/cookies

6) Sharing your information

We share personal information with trusted service providers who help us operate the Services (e.g., Shopify, payment processors, analytics, email, fulfilment and shipping). We may also share data:

  • When required by law or to protect our rights.
  • With professional advisers (legal/accounting) under duty of confidentiality.
  • In connection with a business transaction (e.g., merger or sale), where permitted by law.

We do not sell your personal information.

7) Relationship with Shopify

Our store is hosted and supported by Shopify. Shopify processes personal information about your interactions with our store to provide and improve its services, including certain enhanced features that combine data from interactions with other merchants.

  • Shopify Consumer Privacy Policy: https://www.shopify.com/legal/privacy
  • Shopify Privacy Portal (exercise rights with Shopify where applicable): https://privacy.shopify.com/

8) International transfers

Shopify and some service providers may process data outside the UK/EEA. Where this occurs, we rely on appropriate safeguards (e.g., UK Addendum to the EU Standard Contractual Clauses) or adequacy decisions to protect your information.

9) Data retention

We keep personal information only as long as necessary for the purposes described above—for example:

  • Orders/transactions: retained to meet tax and accounting obligations.
  • Marketing data: retained until you unsubscribe or your consent is withdrawn, or after a defined inactivity period.
  • Support enquiries: retained as needed to manage your requests.
    We then securely delete or anonymise data.

10) Your rights (UK/EEA)

Subject to conditions and exceptions, you have the right to:

  • Access your personal information.
  • Rectify inaccurate or incomplete data.
  • Erase data (where applicable).
  • Restrict or object to processing (including direct marketing).
  • Portability of data you provided to us.
  • Withdraw consent at any time (where processing is based on consent).

To exercise your rights, email info@newrainbowtextiles.com. We may need to verify your identity before responding.

Complaints: You can complain to the UK Information Commissioner’s Office (ICO): https://ico.org.uk/. We would appreciate the chance to address your concerns first.

11) Children’s data

Our Services are not intended for children. We do not knowingly collect personal information from children under the age of majority in your jurisdiction. If you believe a child has provided data, please contact us.

12) Security

We use appropriate technical and organisational measures to protect personal information. However, no method of transmission or storage is 100% secure. Please avoid sending sensitive information via unencrypted channels.

13) Third-party links

The Services may link to third-party sites we do not control. Their privacy practices are governed by their own policies.

14) Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version with a new “Last updated” date. Material changes will be notified as required by law.

15) Contact us

Questions or requests about this Privacy Policy or your personal information:

info@newrainbowtextiles.com

New Rainbow Textiles Ltd, 98 The Broadway, Southall, Middlesex, UB1 1QF, United Kingdom