Privacy Policy

1. Who we are

Eldravis is an online shop selling yarn, project kits, knitting needles, crochet hooks, accessories and pattern books. The shop is run by ELDRAVIS LTD, a company registered in England and Wales under company number 17476308, with its registered office at 167-169 Great Portland Street, Fifth Floor, London, England, W1W 5PF.

ELDRAVIS LTD is the controller of the personal data described in this policy. This policy follows the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

For any privacy question or request, email [email protected] or call +44 7418 293657.

2. Data we collect

When you place an order

• Your full name, email address and phone number.
• Delivery address, town or city and postcode.
• Anything you write in the order note, such as delivery instructions or a dye lot you want to match.
• What you ordered, quantities, prices, the order number and date.

Dye lot records

Yarn is dyed in batches, and colours vary slightly between batches. We record the dye lot number of the yarn sent with your order so that, if you need more later, we can find a matching batch.

Payment information

Card details are entered directly with our payment provider. We never see or store your full card number or security code. We receive only a payment confirmation, the amount, and limited details such as the card type and last four digits.

Email and phone conversations

If you email or call us, we keep your contact details and what you tell us so we can answer and refer back to it, for example questions about yarn quantities, returns or a delivery.

Newsletter

If you ask to subscribe, we keep your email address and the date you asked to join.

Technical data

Our site does not use analytics or advertising trackers. Like any website, our hosting provider may record basic server logs (IP address, browser type, pages requested, time) for security and to keep the site running.

3. Purposes and legal bases

Where we rely on legitimate interests, we have weighed them against your rights and you can object at any time (see section 9).

4. Who we share data with

We do not sell your personal data. We share it only with service providers who need it to do their job for us, under contracts that require them to protect it:

• Payment provider — processes your card payment and refunds. It acts as an independent controller for payment and fraud checks under its own privacy policy.
• Courier and postal services — receive your name, delivery address, postcode and, where tracking is used, your phone number or email.
• Email and hosting providers — store our website and email correspondence.
• Accountants and professional advisers — where needed for our accounts and legal compliance.
• Authorities — HMRC, the police or courts, only where the law requires it.

5. International transfers

We aim to keep your data in the UK. Some providers, such as payment, email or hosting services, may process data outside the UK. When that happens we make sure the transfer is covered by UK adequacy regulations or by appropriate safeguards such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

Our pages load fonts from Google Fonts, which means your browser sends your IP address to Google, which may process it outside the UK.

6. How long we keep data

7. Security

Our site is served over HTTPS. Access to order and customer records is limited to people who need it, accounts are protected with strong passwords and two-factor authentication where available, and we choose providers with recognised security standards. Card data is handled only by our payment provider. No system is perfectly secure, but if a breach is likely to put you at risk we will tell you and the ICO as the law requires.

8. Cookies

Our website does not set any cookies and does not use analytics, advertising or social media tracking. Your cart lives only in the open page and disappears when you close or reload it. If we ever add cookies that are not strictly necessary, we will ask for your consent first and update this policy.

9. Your rights

Under UK GDPR you have the right to:

• Access — get a copy of the personal data we hold about you.
• Rectification — have inaccurate or incomplete data corrected.
• Erasure — ask us to delete your data where we no longer have a reason to keep it.
• Restriction — ask us to limit how we use your data, for example while a correction is checked.
• Portability — receive data you gave us under contract or consent in a common machine-readable format, or have it sent to another organisation.
• Objection — object to processing based on legitimate interests, and to direct marketing at any time.
• Withdraw consent — where we rely on consent, such as the newsletter.

To use any of these rights, email [email protected]. We will reply within one month. It is free, though we may ask you to confirm your identity first.

10. Withdrawing consent

You can withdraw your consent to the newsletter at any time by replying “Unsubscribe” to any newsletter or emailing [email protected]. Withdrawing consent does not affect anything we did with your data before you withdrew it.

11. Complaints

If you are unhappy with how we handle your data, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority: ico.org.uk, helpline 0303 123 1113.

12. Children

Our shop is meant for adults. You must be 18 or over to place an order, and we do not knowingly collect personal data from children under 13. If you think a child has given us their data, contact us and we will delete it.

13. Changes to this policy

We may update this policy when our services or the law change. The “Last updated” date at the top shows when it was last revised. If a change significantly affects how we use your data, we will let customers know by email.

Last updated: 8 October 2026.