Privacy policy

We take protecting your online privacy, data security, and confidentiality seriously. This Privacy Notice sets out our comprehensive approach to collecting, processing, storing, and protecting your personal data, alongside your statutory rights under UK data protection legislation.

1. Introduction & Data Controller Details

The Fabric Obsession (‘we’, ‘our’, ‘us’) is responsible as a Data Controller for collecting, processing, storing, and safe-keeping personal and other information as part of providing our fabrics, haberdashery, sewing kits, PDF sewing patterns, craft workshops, and regular e-commerce business activities.

• Trading / Studio Address: 5-6a Twigden Barns, Creaton Road, Creaton, Northampton, NN6 8LU, United Kingdom

• Data Protection & General Enquiries: info@thefabricobsession.co.uk
• ICO Registration Number: [Insert ICO Registration Number, if registered]
• Applicable Legislation: Data Protection Act 2018, the UK General Data Protection Regulation (UK GDPR), and the Privacy and Electronic Communications Regulations (PECR).

 

2. Data Processing Principles

When handling your personal data, we adhere strictly to the core principles set out under UK Data Protection Legislation:

• Specified Purpose: Data is collected only for clear, explicit, and legitimate commercial purposes.

• Data Minimisation: We limit our data collection to what is strictly adequate, relevant, and necessary to deliver our products, digital patterns, and services.

• Lawful & Fair Processing: Information is collected and utilized only where we have a sensible legal ground, such as contract fulfilment or explicit consent.

• Accuracy & Rectification: We take reasonable measures to maintain accurate records and welcome your updates or requests for amendment.

• Storage Limitation: Personal data is kept in an identifiable format no longer than necessary to fulfill its purpose or satisfy statutory obligations.

• Integrity & Security: We apply high technical and organisational security standards to protect all processing against unauthorised access, disclosure, or accidental loss.

3. What Information We Collect

Depending on your interaction with The Fabric Obsession (such as browsing our website, purchasing physical fabric, downloading PDF sewing patterns, subscribing to the Sew Obsessed Sewscription Box, or attending creative workshops), we may collect the following categories of information:

Special Category Data: We do not routinely request or process special category data (such as medical or health information). In the rare event that accessibility requirements are voluntarily shared for an in-person creative workshop, this information is processed exclusively with your explicit consent, protected under strict access restrictions, and discarded after the event.

4. How We Collect, Use, and Share Personal Data

Most personal data is provided directly by you when you place an order, download a pattern, sign up for our newsletter, or contact our customer support team. We use your data to:

• Process, cut, pack, and ship your physical fabric, haberdashery, and kit orders.

• Generate automated download links and customer portal access for PDF sewing patterns and digital publications.

• Administer monthly subscriptions and workshop bookings.

• Respond to customer service requests, technical queries, or order amendments.

• Send curated marketing newsletters, seasonal sales alerts, and sew-along guides where you have provided consent.

• Maintain business accounting, tax reporting (HMRC), and prevent fraudulent transactions.

• Improve and optimize our website presentation, navigation, and user experience.

Data Sharing, Safeguards & AI Restrictions

• No Selling or Renting: We will never sell, rent, or trade your personal data to third parties for marketing or commercial purposes.

• Vetted Service Providers: We only share information with third-party service providers essential to operational delivery (e.g. Royal Mail, courier delivery partners, payment gateways like Stripe/PayPal, website hosting on Squarespace, and email platforms). All providers are subject to strict data processing agreements compliant with UK data protection legislation.

• No AI Model Training: We will not give consent to third-party service providers or external platforms to use your personal information, communications, customer records, or creative materials for the training, testing, or development of AI modeling software or machine learning systems.

5. Legal Bases for Processing Your Data

Under the UK GDPR, we process your personal data under the following legal bases:

• Performance of a Contract: Necessary to complete your purchase, deliver physical goods, supply downloadable PDF patterns, manage subscriptions, or communicate order tracking.

• Consent: Where you have opted in to receive promotional newsletters, marketing campaigns, or provided express permission for specific processing.

• Legitimate Interests: Necessary for our legitimate business purposes (e.g. fraud detection, website analytics, system security, and customer service enhancement), where these interests are not overridden by your rights.

• Legal Obligation: Necessary to comply with statutory accounting, tax reporting (HMRC), and commercial regulatory obligations.

6. How We Store, Transfer, and Retain Information

Data Storage & Security: Personal data is stored on secure, password-protected, encrypted systems accessible only by authorised personnel and trusted technical partners.

International Data Transfers: Where data is hosted or processed on secure cloud systems outside the UK/EEA (such as US-based software platforms), we ensure appropriate transfer mechanisms and safeguards are in place, including the UK International Data Transfer Agreement (IDTA), standard contractual clauses, or recognized adequacy frameworks (such as the UK Extension to the EU-U.S. Data Privacy Framework).

Data Retention: We keep your data only as long as necessary for the purpose it was gathered. Financial, order, and billing records are retained for a minimum of 6 years to satisfy UK statutory tax obligations. Marketing subscriber data is retained until you unsubscribe or withdraw consent.

Personal Data Breaches: We maintain formal procedures to identify, handle, and mitigate data security incidents. Any breach presenting a risk to your rights will be reported to the Information Commissioner’s Office (ICO) and notified to you within legal timeframes.

7. Your Legal Rights as a Data Subject

Under UK data protection law, you possess enforceable legal rights regarding your personal data:

• Right of Access: You may request a copy of the personal information we hold about you.

• Right to Rectification: You may ask us to correct inaccurate, outdated, or incomplete records.

• Right to Erasure (‘Right to be Forgotten’): You may request the deletion of your personal data where there is no overriding statutory obligation for retention.

• Right to Restriction: You have the right to request that we pause processing under certain circumstances.

• Right to Data Portability: You may request your data in a structured, commonly used, and machine-readable format.

• Right to Object: You have the right to object at any time to direct marketing or processing based on legitimate interests.

• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting past lawful processing.

To exercise any of these rights, contact us at info@thefabricobsession.co.uk.

8. Marketing Communications & Opt-Out

We only send marketing emails and newsletters where you have provided explicit opt-in consent. You can opt out at any time by:

1. Clicking the automated ‘Unsubscribe’ link at the bottom of any promotional email.

2. Emailing us directly at info@thefabricobsession.co.uk with the subject line “Unsubscribe” (processed within 48 hours).

9. Cookies & Website Analytics

Our website uses cookies and web analytics tools to provide a seamless browsing experience, monitor page performance, and understand user interaction across our online store.

• Analytics data (such as page views, browsing durations, and device types) is collected in an aggregated, anonymised manner.

• You can modify, restrict, or disable cookies at any time via your internet browser settings. Please note that disabling essential cookies may impact checkout functionality and website performance.

10. Making a Complaint & Dispute Resolution

If you have concerns about how we have handled your personal information, please contact us first so we can resolve the issue promptly:

• Email: info@thefabricobsession.co.uk

• Subject Line: FAO: Data Protection Lead – Notice of Data Complaint

We will formally acknowledge your complaint within 5 working days (and provide an outcome no later than 30 days as required by law). We will review the facts, consult relevant records, and provide a clear written response.

You also have the statutory right to lodge a complaint directly with the UK supervisory authority:

Information Commissioner’s Office (ICO)

Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Helpline: 0303 123 1113 | Website: ico.org.uk

11. Policy Review & Updates

We review this Privacy Notice periodically (at least every 6 to 12 months, or immediately following updates to data protection legislation). The latest version is always available on our website.

Effective Date: November 7, 2026

Last updated: November 7, 2026