Privacy policy

This Privacy Policy describes how Thunder Egg Ltd handles your personal information when you visit, use or make a purchase from this website (www.thunderegg.co.uk).

How we use your information

Using our website

We use Shopify to power our website and online store. You can read more about how Shopify uses your personal information on Shopify’s Privacy Policy.

Parts of our website are hosted by Hiltonian Media Ltd and CloudFlare.

As you use our website, the following information may be collected automatically using cookies, log files, web beacons, tags or pixels: web browser software information, device information, IP address, time zone, cookie information, the sites or products you view, search terms, and how you interact with the website. This information is collected to load the site accurately for you, and perform usage analytics to optimise our website. It is in our legitimate interests to collect this data to prevent malicious use of our services, monitor server performance, increase security, and diagnose problems. This information might be transferred outside of the EEA.

Website analytics

We use Google Analytics to analyse how visitors use our website. This stores a “cookie” on your computer containing an anonymous tracking ID to allow Google to track your activity around our website. This service is subject to Google’s Privacy Policy. We've taken steps to ensure that you are not personally identifiable to Google Analytics, including the anonymisation of your IP address and preventing Google from sharing our Analytics data with its other services. The information associated with your cookie tracking ID is deleted 14 months after your last use of our website. Learn more about how you can control the information sent to Google and opt-out of Google Analytics.

Contact form

If you fill in and submit our contact form, the information you supply will be logged or sent to us by email and only used to respond to your enquiry. It is in your legitimate interests for this data to be processed so that we can respond to your enquiry. This information is retained for as long as necessary to deal with your enquiry.

Placing and processing orders

When you place an order with us, your name, billing address, shipping address, payment information (including credit card numbers), email address, and phone number are used in order to fulfil the contract and process your order. When you place an order through our website, Shopify will retain your personal information unless and until you ask us to erase it for you.

Your name and delivery contact information is transferred to the courier(s) used to send your order – they will handle your data according to their privacy policy (Royal Mail), and might transfer it outside of the EEA.

If you make payment with PayPal, your order information (including personal data) is transferred to PayPal to facilitate the payment process. This is required to fulfil the contract and process your order. Your data will be processed and retained by PayPal in accordance with their Privacy Policy, and might be transferred by them outside of the EEA.

In order to offer you Klarna’s payment methods, we might in the checkout pass your personal data in the form of contact and order details to Klarna, in order for Klarna to assess whether you qualify for their payment methods and to tailor those payment methods for you. Your personal data transferred is processed in line with Klarna’s privacy notice.

If you make payment by card (except through PayPal or Klarna), your order information (including personal data) is processed by Shopify Payments to facilitate the payment process. This is required to fulfil the contract and process your order. Your data will be processed and retained by Shopify in accordance with their Privacy Policy, and might be transferred by them outside of the EEA.

Mailing list (marketing emails) and email notifications

If you subscribe to our mailing list, we'll send you marketing emails from time to time. We'll only do this with your consent, and you can withdraw your consent at any time by clicking the “unsubscribe” link at the bottom of one of our marketing emails.

If you start the checkout process but do not complete your order, we might send you an email a few hours later containing a link to allow you to complete your order. This is in your legitimate interests, as it allows you to easily resume your order if you were unable to complete checkout. It is also in our legitimate interests to remind customers to complete the checkout process.

We might also send you one-off notification emails in response to specific events, such as account activation or order confirmation/updates. This is in your legitimate interests so that you can complete or be kept informed about the relevant process.

To send these emails to you, your data will be processed and retained by Klaviyo (who provide our mailing list software) in accordance with their Privacy Policy, and might be transferred by them outside of the EEA.

Online advertising

To help us increase sales, we advertise our products and brand on a variety of websites, including Google and Facebook. With your consent, we'll send the companies listed below information about the products and pages you view on our website, the products you add to and remove from your basket, and the products you purchase. This is used to show you personalised adverts that are more relevant to you. These companies identify you by placing a “tracking beacon” on our website which uses a cookie to identify you to them. Your data will be processed and retained in accordance with their privacy policies and might be transferred by them outside of the EEA.

You can choose whether to allow marketing cookies/tracking using the tickbox below:

Allow marketing cookies: [Please enable JavaScript to change this preference]

Registering and logging in

When you register on our website, we collect your name, email address and password. This information is used to allow you to log in to the website and speed up checkout, so it is in your legitimate interests for us to use your information in this way.

Any personal information (including your name and contact details) that you provide through the My Account section of the website will only be used to process orders and provide you with customer support. Shopify will retain your personal information unless and until you ask us to erase it for you.

Wish List

Adding products to your wish list allows you to store a list of your favourite products. This information will be associated with your account if you are logged in, or tracked with a cookie if you are not logged in. It is in your legitimate interests for us to process this information so that we can provide the wish list facility. It is also in our legitimate interests as it allows us to see (anonymised) statistics about which products are most/least popular. This data is processed by Appmate (who provide our wish list software) in accordance with their Privacy Policy, and might be transferred by them outside of the EEA.

If you share your wish list, anyone with the correct URL will be able to view your wish list.

Detecting humans

It is in our legitimate interests to prevent automated scripts from abusing our website. To do this, we use reCAPTCHA, a piece of software provided by Google, to verify that you are indeed a human. When you start to interact with reCAPTCHA, Google may set identifier cookies. This service is subject to Google’s Privacy Policy. Learn more about how you can control the information sent to Google.

Your Rights

Depending on why we use your data, residents of the UK and EEA have various rights under the GDPR. These are:

  • The right to be informed about the use of your data. This privacy policy forms part of that obligation.
  • The right to access your personal data or confirm that it is being processed.
  • The right to rectify any inaccurate personal data or complete any incomplete personal data.
  • The right to have any personal data erased or restrict its processing in some circumstances.
  • The right to object to the use of your personal data, but only if we are processing your data for legitimate interests (rather than, for example, to fulfil a contract).
  • The right to data portability of personal data they have provided to a controller, but only if we are processing the information on the basis of consent or to fulfil a contract, and when the processing is carried out by automated means.

To exercise any of these rights, please contact us. Where a request is unfounded or excessive, or you are requesting information we have already provided to you, we may charge a reasonable fee to fulfil the request or refuse to respond. We will take reasonable steps to verify your identity before fulfilling the request, and we will respond within one month.