Legal
Privacy Policy
Last updated 12 October 2026
Who we are
Thornfell is a sole trader based in the United Kingdom, making handcrafted hats. When this policy says "we", "us" or "our", it means Thornfell. We are responsible for the personal information you share with us through this website.
What we collect
We only collect the information you choose to send us. When you use the contact form or enquire about a hat, we receive:
- your name and email address
- your message
- for hat enquiries, the hat, material and size you selected
We use Cloudflare Web Analytics to count page visits. It does not use cookies, does not collect personal information and does not track you across other websites. We do not build profiles of visitors.
How we use it
We use your details to reply to your enquiry and, if you go ahead, to make and deliver your hat. We rely on our legitimate interest in answering enquiries, and on taking steps towards a contract when you commission a hat.
We will never sell your information, and we will not send you marketing emails unless you ask us to.
Who we share it with
This website is hosted by Netlify, which also receives and stores form submissions on our behalf. Netlify may process data outside the UK, under safeguards approved for international transfers. Like most web hosts, Netlify may also keep short-term server logs (such as IP addresses) for security.
We do not share your information with anyone else unless the law requires it.
How long we keep it
We keep enquiries for up to 12 months after our last contact with you. If you commission a hat, we keep the order details for six years, as required for tax records.
Your rights
Under UK data protection law you can ask to see the information we hold about you, ask us to correct or delete it, or object to how we use it. To do any of these, email us at [email protected] or use our contact form.
If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk.
Changes to this policy
If we change how we handle personal information, for example when we start taking payments online, we will update this page. The date at the top shows when it was last changed.