When you place an order, you need to provide your name and address, so that I can post your order to you, and your email address, for confirming that your order has been received or contacting you in the event of a problem processing your order. This information is processed by Big Cartel (who host my shop) and Mailchimp (who send automated order confirmation emails, which may contain personalised product recommendations based on what you’ve ordered).
Your payment details are securely processed by either Stripe (if you choose to pay by card) or Paypal (if you choose the Paypal checkout option).
When you check out, you can also choose to sign up for my email newsletter, which is powered by Mailchimp and which you can unsubscribe from at any time.
With the exception of automated order confirmation emails, if there is a problem with your order, or if you contact me with a question regarding your order, I will never contact you via email unless you opt-in to the newsletter.
You can contact me at firstname.lastname@example.org at any time to request a copy of your data, or to request that it is deleted.
THE LEGAL STUFF
The policy sets out the different areas where user privacy is concerned and outlines the obligations and requirements of the users, the website and website owners. Furthermore, the way this website processes, stores and protects user data and information will also be detailed within this policy.
This website and its owners take a proactive approach to user privacy and ensure the necessary steps are taken to protect the privacy of its users throughout their visiting experience. This website complies to all UK national laws and requirements for user privacy. We respect and value the privacy of everyone that visits our website and only collect and use information in ways that are useful to you and in a manner consistent with your rights and our obligations under the law, including the General Data Protection Regulation (GDPR).
This policy applies where we are acting as a data controller with respect to the personal data of our website visitors and service users; in other words, where we determine the purposes and means of the processing of that personal data.
The only cookies in use on this site are those set by Big Cartel. Big Cartel use different technologies to collect information, including cookies and web beacons. Cookies are small data files stored on your hard drive or in device memory that help improve Services and your experience, see which areas and features of Services are popular and count visits. Web beacons are electronic images that may be used in Services or emails and help deliver cookies, count visits and understand usage and campaign effectiveness.
Name and Address – This is collected to post your order to you.
Email Address – This is collected to confirm your order, and to contact you in the event of any issues with the order. This may also be used to sign you up to a mailing list, an your discretion.
Payment details – Through Big Cartel these are securely processed by either Stripe or Paypal.
We will use all reasonable efforts to safeguard your personal information. However, you should be aware that the use of the Internet is not entirely secure and for this reason we cannot guarantee the security or integrity of any personal information which is transferred from you or to you via the Internet.
Use of Data
Why we collect data: We use the information we collect from all of our services to provide, maintain, protect and improve them, to develop new ones, and to protect the website owner and our users.
Data Security: We employ industry standard techniques to protect against unauthorised access of data that we store.
Sharing of data: The website owner shares data with Big Cartel and MailChimp for purposes of selling products and sending order confirmation emails.
We may process information contained in any enquiry you submit to us regarding services (“enquiry data”). The enquiry data may be processed for the purposes of offering, marketing and selling relevant goods and/or services to you.
Some or all of your data may be stored or transferred outside of the European Economic Area (“the EEA”). if we do store or transfer data outside of the EEA, we will take all reasonable steps to ensure that your data is treated as safely and securely as it would within the EEA and under the GDPR.
This website operates an email newsletter program, used to inform subscribers about products and services supplied by this website. Users can subscribe through an online automated process should they wish to do so but do so at their own discretion. Some subscriptions may be automatically processed through prior written agreement with the user.
Subscriptions are taken in compliance with UK Spam Laws detailed in the Privacy and Electronic Communications Regulations 2003. All personal details relating to subscriptions are held securely and in accordance with the Data Protection Act 1998. No personal details are passed on to third parties nor shared with companies / people outside of the company that operates this website. Under the Data Protection Act 1998 you may request a copy of personal information held about you by this website’s email newsletter program. A small fee will be payable. If you would like a copy of the information held on you please write to the business address at the bottom of this policy.
Email marketing campaigns published by this website or its owners may contain tracking facilities within the actual email. Subscriber activity is tracked and stored in a database for future analysis and evaluation. Such tracked activity may include; the opening of emails, forwarding of emails, the clicking of links within the email content, times, dates and frequency of activity [this is by no means a comprehensive list]. This information is used to refine future email campaigns and supply the user with more relevant content based around their activity.
In compliance with UK Spam Laws and the Privacy and Electronic Communications Regulations 2003 subscribers are given the opportunity to un-subscribe at any time through an automated system. This process is detailed at the footer of each email campaign.
Data Protection Officer
Our data protection officer is Lindsay Haynes who can be contacted at email@example.com.
You have the right to request a copy of the information that we hold about you. If you would like a copy of some, or all of your personal information, please email us at firstname.lastname@example.org. We may make a small charge for this service.
We want to ensure that your personal information is accurate and up to date. You may ask us to correct or remove information you think is inaccurate.
Changes to this Policy