Last updated 12 March 2026 · Version 3.2 · 2 min read
In short
1. Who we are
Things Retail Ltd. ("Things", "we", "us") is the controller of the personal data described in this policy. We run the Things website, app and stores.
This policy applies when you browse our website, create an account, place an order or contact our customer team.
2. What data we collect
We collect information you give us and information created when you use our services:
- Identity and contact details, such as your name, email address and phone number
- Delivery and billing addresses
- Order history, returns and saved items
- Device and usage data, such as pages viewed and app version
3. How we use your data
We use your data to process orders, deliver products, handle returns and provide customer support. With your permission, we also send offers and personalise what you see.
We never sell your personal data.
4. Legal basis for processing
We process your data to perform our contract with you, to meet legal obligations, for our legitimate interests (such as preventing fraud) and, where required, with your consent.
5. Sharing your data
We share data only with partners who help us run our services, such as payment providers, delivery companies and IT suppliers. Each partner is bound by a contract that protects your data.
6. How long we keep it
We keep order data for 6 years to meet tax and accounting rules. Account data is kept while your account is active and deleted 24 months after your last activity.
7. Your rights
You can ask to access, correct, delete or export your data, and you can object to or restrict certain processing. You can withdraw consent at any time in your account settings.
If you are not happy with how we handled your request, you can complain to your local data protection authority.
8. Contact us
Questions about this policy? Write to our data protection officer at privacy@things.example or to the registered office address in Legal.