By a Thread — Privacy Policy Last updated: 14/05/2026

1. Who We Are This website is operated by By a Thread, a digital wellness brand offering downloadable journals and personal written response services. By a Thread acts as the data controller for any personal information collected through this site.

We are committed to protecting your privacy and handling your personal data responsibly and transparently.

2. Personal Information We Collect

Information collected automatically When you visit byathread.uk we may automatically collect:

  • Web browser type and device information

  • IP address and approximate location

  • Pages viewed and time spent on site

  • Referring websites or search terms

  • How you interact with the site

Information you provide to us We collect personal information you voluntarily provide, including:

  • Name and email address

  • Payment details (processed securely by third-party payment providers — we do not store card details)

  • The content of any completed journals you submit as part of The Read-Back service

3. The Read-Back — Special Note on Journal Content When you purchase The Read-Back, you voluntarily share the contents of your completed journal with us by email.

Please be aware:

  • Journal content is read solely for the purpose of preparing your personal written response

  • It is not stored beyond what is operationally necessary

  • It is never shared with third parties

  • It is never used for marketing, training, or any other purpose

  • You may request deletion of your submitted content at any time by emailing buddy@byathread.uk

4. Why We Process Your Data We process your personal data only where necessary, including:

  • Delivering digital products and written responses

  • Processing payments via third-party providers

  • Communicating with you about your order or response

  • Sending emails you have opted into via our mailing list

  • Improving website performance

  • Complying with legal obligations

5. Email Marketing If you sign up to receive the free journal or opt in to our mailing list, your email address will be stored in Mailerlite, our email marketing platform.

You can unsubscribe at any time using the link in any email we send. We do not send spam and we do not sell your data to third parties.

6. Lawful Basis for Processing Under UK GDPR we process personal data on the following lawful bases:

  • Performance of a contract — fulfilling orders and delivering products

  • Consent — email marketing and mailing list

  • Legitimate interests — website analytics and fraud prevention

  • Legal obligations — where required by law

7. Your Rights As a UK or European resident you have the right to:

  • Be informed about how your data is used

  • Access the personal data we hold about you

  • Request correction of inaccurate data

  • Request erasure of your data

  • Restrict or object to processing

  • Data portability

  • Withdraw consent at any time

To exercise any of these rights contact us at buddy@byathread.uk

8. Cookies We use cookies to improve website functionality and understand usage. You can control or disable cookies through your browser settings, though some features may not function correctly without them.

9. Data Sharing Your data may be shared with trusted third-party providers only where necessary to operate our business, including:

  • Payment processors

  • Mailerlite (email marketing)

  • Hostinger (website hosting)

We do not sell your personal data. Ever.

10. Data Security We take reasonable measures to protect your personal data against loss, misuse, or unauthorised access. No method of internet transmission is completely secure, and we cannot guarantee absolute security.

11. Data Retention We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, or as required by law.

Journal content submitted as part of The Read-Back is deleted once your response has been delivered, unless you request otherwise.

12. Links to Other Websites Our website may contain links to third-party sites. We are not responsible for their privacy practices and encourage you to review their policies.

13. Contact For questions about this Privacy Policy or how your data is handled:

buddy@byathread.uk byathread.uk