1. Who we are
This Privacy Notice describes how Thrum and Hearth (“we”, “us”) collects, uses, and protects your personal information when you visit https://thrumandhearth.com or use our services. We act as the data controller for the information described below.
2. Information we collect
- Account information: email address, password (hashed), and any profile details you provide.
- Order information: products purchased, order timestamps, and the email associated with a purchase.
- Support correspondence: messages you send us.
- Usage and device data: IP address, browser type, pages viewed, and similar telemetry.
Payment card data is collected and processed directly by Paddle, our Merchant of Record. We do not see or store your full card details.
3. How we use information
- To provide and maintain the service, including account creation and order fulfillment;
- To send you transactional messages (purchase confirmations, download links, security notices);
- To improve and secure the service and prevent fraud;
- To respond to your support requests;
- Where permitted, to send occasional updates you have opted into.
4. Legal bases
We process personal data on the basis of contract performance (delivering what you bought), legitimate interests (security, product improvement), legal obligation (tax records, accounting), and consent (optional marketing).
5. Who we share data with
- Paddle (Merchant of Record) — for processing payments, managing subscriptions, tax compliance, and invoicing.
- Hosting and infrastructure providers — for storage and delivery of the service.
- Email delivery providers — for sending transactional messages.
- Professional advisers (legal, accounting) where necessary.
- Authorities where required by law.
6. Data retention
We retain your data for as long as needed to provide the service and to meet legal, accounting, or reporting obligations. Order records are typically retained for at least seven years for tax purposes. Account data is removed on request unless retention is legally required.
7. Your rights
Depending on where you live, you may have the right to access, correct, delete, or port your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at hello@thrumandhearth.com. EU/UK residents may also lodge a complaint with their local data-protection authority.
8. International transfers
Your data may be processed in countries other than your own. Where required, we rely on appropriate safeguards such as standard contractual clauses.
9. Security
We use industry-standard technical and organisational measures, including encryption in transit, access controls, and managed infrastructure, to protect your information.
10. Cookies
We use essential cookies to keep you signed in and to operate the site. We do not use advertising cookies. If we add analytics in the future we will update this notice and provide cookie controls.
11. Contact
Questions about this notice? Email hello@thrumandhearth.com.