Crafty Coast Privacy Policy

This Privacy Policy describes how and when we collect, use, and share information when you purchase an item from Crafty Coast, visit our website, contact us, or otherwise use services through Facebook.com, Instagram.com, or the website at www.CraftyCoast.co.uk, or through other means such as commissioned work that is purchased and communicated via email. This Privacy Policy does not apply to the practices of third parties that I do not own or control, including Facebook, Instagram, Etsy, Paypal, Royal Mail, Hermes, DHL, DPD or any other courier. To view their respective Privacy Policies, please visit the relevant links below. (Please note, these links take you to external websites, and you will no longer be on the Crafty Coast website) Paypal’s Privacy Policy can be found here: https://www.paypal.com/en/webapps/mpp/ua/privac y-full Royal Mail Privacy Policy can be found here: https://www.royalmailgroup.com/about-us/our- policies/our-privacy-policy Facebook’s Privacy Policy can be found here: https://www.facebook.com/business/gdpr Etsy’s Privacy Policy can be found here: https://www.etsy.com/legal/privacy/ Hermes Privacy Policy can be found here: https://www.myhermes.co.uk/privacy-policy/ DHL Privacy Policy can be found here: https://www.dhl.com/gb-en/home/footer/local- privacy-notice.html DPD Privacy Policy can be found here: https://www.dpd.co.uk/privacy_policy.jsp We are committed to ensuring that your privacy is protected. Should we ask you to provide certain information, then you can be assured that it will only be used in accordance with this privacy statement. We may change this policy from time to time by updating this page. You should check this page from time to time to ensure that you are happy with any changes. This policy is effective from 22nd May 2018 What we collect To fulfil your order, you must provide Tracy Beattie (Crafty Coast) with certain information such as your name, email address, postal address, Paypal email address, and the details of the product that you’re ordering. If you contact us directly, you may also choose to provide Tracy Beattie with additional personal information, and sometimes photographs to aid completion of an order (for a custom order of painting or craft, for example). Contact Form We use Hubspot to provide the contact forms on our website. The information we collect (name, email, address) are used only to reply to your message and are not used for any other purpose. You can view Hubspot’s Privacy Policy here https://www.dpd.co.uk/privacy_policy.jsp If you prefer not to use our contact forms, you can contact us via email at tracy@craftycoast.co.uk Why we need your information and how we use it We rely on a number of legal bases to collect, use, and share your information, including: As needed to provide our services, such as when we use your information to fulfil your order, to settle disputes, or to provide customer support; When you have provided your affirmative consent, which you may revoke at any time, such as by signing up for our mailing list; If necessary to comply with a legal obligation or court order or in connection with a legal claim, such as retaining information about your purchases as required by HMRC tax law; and as necessary for the purpose of our legitimate interests, if those legitimate interests are not overridden by your rights or interests. Such legitimate interests include providing and improving my services. We use your information to provide the services you requested and in my legitimate interest to improve our services. Cookies We use Google Analytics tracking cookies to collect anonymous traffic data about how users use this website. This information is stored by Google and subject to their privacy policy, which can be viewed here: http://www.google.com/privacy.html Google Analytics collects information such as pages which users visit within this site, the browser and operating system used and time spent viewing pages. The purpose of this information is to help us improve the site for future visitors. Overall, cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. Security We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online. We will not sell, distribute or lease your personal information to third parties unless we have your permission or are required by law to do so. Devices used to store personal information are both password protected and encrypted. The devices are owned solely by Tracy Beattie (Crafty Coast), and your information will never be stored or accessed on any third party device. As a sole trader, only Tracy Beattie will have access to your information, other than described above for fulfilment of services (delivery companies to deliver your goods, for example). Different passwords are always used for each device or application used. Information Sharing and Disclosure Information about customers is important to Crafty Coast. Your personal information is shared for very limited reasons and in limited circumstances, as follows: Paypal - we share information with Paypal, such as your email address as necessary to provide you our services Service providers - we engage certain trusted third parties to perform functions and provide services, such as delivery companies. We will share your personal information with these third parties, but only to the extent necessary to perform these services, for example your postal address in order that the said companies can deliver your order. Compliance with laws - we may collect, use, retain, and share your information if we have a good faith and belief that it is reasonably necessary to: (a) respond to legal process or to government requests; (b) enforce our agreements, terms and policies; (c) prevent, investigate, and address fraud and other illegal activity, security, or technical issues; or (d) protect the rights, property, and safety of our customers, or others. Data Retention We retain your personal information only for as long as necessary to provide you with my services and as described in this Privacy Policy. However, we may also be required to retain this information to comply with our tax, legal and regulatory obligations, to resolve disputes, and to enforce my agreements. We generally keep your data for the following time period: 7 years. Any photographs provided for in order to complete a commissioned artwork are deleted from our system within 28 days of the completion of the order. Your Rights If you reside in certain territories, including the EU, you have a number of rights in relation to your personal information. While some of these rights apply generally, certain rights apply only in certain limited cases. I describe these rights below: Access - You may have the right to access and receive a copy of the personal information I hold about you by contacting me using the contact information below. Change, restrict, delete - You may also have rights to change, restrict my use of, or delete your personal information. Absent exceptional circumstances (like where I am required to store data for legal and tax reasons) I will generally delete your personal information upon request. Object - You can object to (i) my processing of some of your information based on my legitimate interests and (ii) receiving marketing messages from me after providing your express consent to receive them. In such cases, I will delete your personal information unless I have compelling and legitimate grounds to continue using that information or if it is needed for legal reasons. Complain - If you reside in the EU and wish to raise a concern about my use of your information (and without prejudice to any other rights you may have), you have the right to do so with your local data protection authority. How to Contact Us For purposes of EU data protection law, I, Tracy Beattie, am the data controller of your personal information. If you have any questions or concerns, you may contact me at tracy@craftycoast.co.uk. Alternately, you may mail me at: Tracy Beattie, 30 Ballinlea Rd, BT54 6NL