Privacy policy

Last updated: August 16, 2026

This Privacy Policy describes how T.vP. Studios, operating as Thea London (“we”, “us”, or “our”), collects, uses, stores, and discloses your personal information when you visit our website, use our services, or make a purchase through our online store (the “Services”).

This Privacy Policy applies to customers and visitors in the United Kingdom and is intended to comply with applicable UK data protection and privacy laws, including the UK General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 (“PECR”), and applicable amendments introduced by the Data (Use and Access) Act 2025.

Thea London is powered by Shopify, which enables us to provide our online store and related Services to you. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy governs with respect to the collection, use, and disclosure of personal information.

By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy.

Who We Are

Data Controller: T.vP. Studios, operating as Thea London
Address: Graaf 3A, 6101CC Echt, Limburg, Netherlands
Email: info@thea-london.com
Phone: +44 7463 588404

Personal Information We Collect

“Personal information” means information that identifies you or can reasonably be linked to you. Depending on how you interact with our Services, we may collect the following categories of personal information:

Contact details: name, shipping address, billing address, email address, and phone number.
Order and payment information: products purchased, order history, billing details, transaction confirmations, and payment status. Payment information is processed securely by our payment providers.
Account information: login details, account preferences, saved addresses, and settings.
Commercial information: products viewed, added to cart, purchased, returned, exchanged, or reviewed.
Customer support information: messages, enquiries, complaints, return requests, and other information you provide when contacting us.
Device and usage data: IP address, browser type, device identifiers, operating system, referring URLs, pages viewed, and interactions with our website.
Marketing and cookie data: cookie identifiers, marketing preferences, advertising interactions, and analytics data.

Sources of Personal Information

We may collect personal information from the following sources:

Directly from you when you place an order, create an account, contact us, or subscribe to marketing;
Automatically through cookies and similar technologies when you use our website;
From Shopify and other service providers who support our store operations;
From payment, delivery, fulfilment, marketing, analytics, and fraud prevention partners;
From publicly available sources or third parties, where permitted by law.

How We Use Personal Information and Our Lawful Bases

We only use your personal information where we have a lawful basis to do so under applicable UK data protection law. We may use your personal information for the following purposes:

To process and fulfil your order: including payment processing, order confirmation, shipping, delivery, returns, refunds, and customer support. Our lawful basis is the performance of a contract with you.
To manage your account: including account creation, login, saved details, and order history. Our lawful basis is the performance of a contract or our legitimate interests in operating our Services.
To provide customer support: including responding to enquiries, complaints, refund requests, or product questions. Our lawful basis is the performance of a contract and our legitimate interests in supporting our customers.
To improve our website and Services: including analytics, troubleshooting, testing, and performance monitoring. Our lawful basis is our legitimate interests in improving our business and Services, or consent where required.
For marketing and advertising: including sending promotional emails, showing relevant advertisements, and measuring campaign performance. Our lawful basis is your consent where required, or our legitimate interests where permitted by law.
For security and fraud prevention: including detecting, preventing, and investigating fraudulent, unauthorised, or illegal activity. Our lawful basis is our legitimate interests and compliance with legal obligations.
To comply with legal obligations: including tax, accounting, consumer protection, and regulatory requirements. Our lawful basis is compliance with a legal obligation.

Marketing Communications

If you subscribe to our marketing communications, we may send you emails about products, offers, and updates. You can unsubscribe at any time by clicking the unsubscribe link in our emails or by contacting us at info@thea-london.com.

Where required by law, we will only send marketing communications with your consent. You may withdraw your consent at any time. You also have the right to object to the use of your personal information for direct marketing at any time.

Cookies and Tracking Technologies

We use cookies and similar technologies to operate our website, remember your preferences, analyse website traffic, improve our Services, and support marketing and advertising efforts.

Some cookies and similar technologies are necessary for the website to function properly. Other technologies, including certain analytics and advertising technologies, may require your consent in accordance with applicable law.

Where consent is required, you can manage your preferences through the cookie consent controls available on our website. You can also manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

Disclosure of Personal Information

We may disclose your personal information to third parties where necessary for the purposes described in this Privacy Policy, including:

Shopify, which hosts and powers our online store;
Payment processors and fraud prevention providers;
Shipping, delivery, warehouse, and fulfilment partners;
Customer support, email, hosting, IT, and analytics service providers;
Marketing and advertising partners, where permitted by law;
Professional advisers, such as accountants, legal advisers, and insurers;
Authorities, regulators, courts, or other parties where required by law or to protect our rights.

Relationship With Shopify

Our store is hosted on Shopify. Shopify processes personal information to help us provide and improve the Services, including website hosting, checkout, payment processing, order management, analytics, and fraud prevention.

For more information about how Shopify processes personal information, please review the Shopify Privacy Policy.

International Transfers

Because we work with service providers and partners located in different countries, your personal information may be transferred to and processed outside the United Kingdom.

Where we transfer personal information internationally, we take appropriate steps to protect your information in accordance with applicable UK data protection law. This may include relying on adequacy regulations, appropriate contractual safeguards, or other lawful transfer mechanisms designed to ensure an appropriate level of protection.

Data Security

We implement reasonable administrative, technical, and organisational measures to protect personal information against loss, misuse, unauthorised access, disclosure, alteration, or destruction.

However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

Data Retention

We retain personal information only for as long as necessary to fulfil the purposes described in this Privacy Policy, including providing the Services, maintaining business records, resolving disputes, preventing fraud, and complying with legal, tax, accounting, or reporting obligations.

When personal information is no longer required, we will delete, anonymise, or securely store it in accordance with applicable law.

Your UK Privacy Rights

Under applicable UK data protection law, you may have the following rights in relation to your personal information:

Right of access: to request a copy of the personal information we hold about you;
Right to rectification: to ask us to correct inaccurate or incomplete personal information;
Right to erasure: to ask us to delete your personal information in certain circumstances;
Right to restriction: to ask us to restrict how we use your personal information in certain circumstances;
Right to data portability: to receive your personal information in a structured, commonly used, machine-readable format, where applicable;
Right to object: to object to certain types of processing, including processing based on legitimate interests and direct marketing;
Right to withdraw consent: where we rely on consent, you may withdraw it at any time.

The right to object to direct marketing is absolute. If you object to direct marketing, we will stop using your personal information for that purpose.

To exercise your privacy rights, please contact us at info@thea-london.com. We may need to request additional information to verify your identity or clarify your request where permitted by law.

We will respond to valid privacy requests without undue delay and generally within one month, subject to any extensions or pauses permitted under applicable law.

Data Protection Complaints

If you have concerns or complaints about how we collect, use, store, or otherwise process your personal information, please contact us at info@thea-london.com.

We will acknowledge receipt of a data protection complaint within 30 days. We will take appropriate steps to investigate the complaint, keep you informed where appropriate, and communicate the outcome without undue delay.

If you are not satisfied with our response, you also have the right to raise a complaint with the UK Information Commissioner's Office (ICO), the UK supervisory authority for data protection matters.

More information about making a complaint is available on the Information Commissioner's Office website.

Children’s Privacy

The Services are not intended for children. We do not knowingly collect personal information from children in circumstances where doing so would be unlawful. If you believe that a child has provided us with personal information, please contact us so that we can take appropriate action.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other operational reasons. Any changes will be posted on this page with an updated “Last updated” date.

Contact Information

T.vP. Studios operating as Thea London
Address: Graaf 3A, 6101CC Echt, Limburg, Netherlands
Phone: +44 7463 588404
Email: info@thea-london.com