Privacy Policy

We are EMB SUPPLIES LIMITED (“Embsupply”, “we”, “us”), a private limited company registered in Scotland under Company No. SC724902, with registered office at 9 Maxwell Street, IV32 7DE, United Kingdom. We are the data controller for the personal data described in this policy. UK ICO registration is pending and the registration number will be added here once issued. You can contact us at support@embsupplyco.com.

We only collect the data we need to fulfil orders and run the site.

• Account & order data: name, email, billing and shipping address, telephone (optional), order history, tracking numbers.
• Payment data: processed by Stripe and (optionally) PayPal. We never see, store or have access to your full card number, expiry, or CVV. We receive only the last four digits and card brand for receipts.
• Communications: emails and contact-form messages you send us.
• Technical data: IP address, browser type, device type, referring URL, pages visited — used for security and (with consent) analytics.
• Marketing data: email address if you subscribe to the slow-stitch letter; whether you have opened or clicked recent emails.

• Performance of a contract (UK/EU GDPR Art. 6(1)(b)) — to take payment, ship your order, handle returns.
• Legal obligation (Art. 6(1)(c)) — to retain tax and accounting records for the period required by UK / EU law.
• Legitimate interests (Art. 6(1)(f)) — to operate, secure and improve the site; to prevent fraud (Stripe Radar); to answer your questions. We assess and document each legitimate-interest balancing exercise.
• Consent (Art. 6(1)(a)) — for non-essential cookies, the marketing newsletter, and any optional marketing communications. You can withdraw consent at any time.

We use a small number of carefully chosen processors. Each is contractually bound to UK / EU GDPR standards and a written data-processing agreement.

• Stripe Payments Europe Ltd. — card processing & fraud prevention.
• PayPal (Europe) S.à r.l. — optional payment alternative.
• Vercel Inc. — website hosting and analytics.
• Royal Mail / Parcelforce / DHL — shipping carriers.
• An email service provider (transactional and newsletter delivery).
• HMRC — when required by tax law.

A current list of processors is available on request from support@embsupplyco.com.

Some processors (notably Stripe and Vercel) operate from or transfer data to the United States. Such transfers are protected by the UK International Data Transfer Addendum, the EU Standard Contractual Clauses 2021/914, and where applicable the EU–US Data Privacy Framework. A copy of the safeguards in place is available on request.

• Order & tax records: 6 full UK tax years (HMRC requirement).
• Customer support correspondence: 24 months.
• Newsletter subscription: until you unsubscribe + 6 months for suppression-list purposes.
• Analytics & logs: maximum 14 months.

Cookies and similar technologies are governed by our separate Cookie Policy. You can review and change your choices at any time via the “Cookie Settings” link in the footer.

Under UK and EU GDPR you have the right to:

• Access the personal data we hold about you.
• Have inaccurate data corrected.
• Have your data erased (where the legal basis is consent or legitimate interest).
• Restrict our processing of your data.
• Port your data to another controller in a structured, commonly used, machine-readable format.
• Object to processing based on legitimate interests or direct marketing.
• Withdraw any consent you have given.

Email support@embsupplyco.com to exercise any of these rights. We will respond within one calendar month.

If you are unhappy with how we have handled your data you can complain to the UK Information Commissioner’s Office (ico.org.uk) or your local EU supervisory authority.

The site is not directed at children under 16. We do not knowingly collect personal data from children. The Kids Sewing Learning Kit is purchased by an adult on behalf of a child; we only collect adult-purchaser data.

We will publish material changes on this page with a new “Last updated” date. We will not reduce your rights retroactively.