GDPR
Thursday 18th May 2018

General Data Protection Regulation Policy (GDPR) - effective from 25th May 2018
1. Introduction
What is GDPR - The General Data Protection Regulation (GDPR) (EU) 2016/679 is a regulation in EU law on data protection and privacy for all individuals within the European Union. ... When the GDPR takes effect, it will replace the 1995 Data Protection Directive (Directive 95/46/EC). It was adopted on 27 April 2016 and comes into effect on 25 May 2018.
1.1 What data do Thee Third Tree collect?
To fulfil your order, you must provide us with certain information (which you authorised Etsy to provide to us), such as your name, email address, postal address, payment information, and the details of the product that you’re ordering. You may also choose to provide us with additional personal information (for a custom order, for example), if you contact us directly.
1.2 How is this data collected ?
This data is supplied to Thee Third Tree at the time of ordering.
1.3 Why do we collect this data and do we share it?
We rely on a number of legal bases to collect, use, and share your information, including:

as needed to provide our services, such as when we use your information to fulfil your order, to settle disputes, or to provide customer support;
if necessary to comply with a legal obligation or court order or in connection with a legal claim, such as retaining information about your purchases if required by tax law; and
as necessary for the purpose of our legitimate interests, if those legitimate interests are not overridden by your rights or interests, such as 1) providing and improving our services. We use your information to provide the services you requested and in our legitimate interest to improve our services; and 2) Compliance with the Etsy Seller Policy and Terms of Use. We use your information as necessary to comply with our obligations under the Etsy Seller Policy and Terms of Use.

Your data is not shared with or sold to any outside individuals or third parties.
We share your Full Name & Delivery Address with the delivery company, this is so your parcel can be delivered to you. For posting, Thee Third Tree uses Royal Mail with handwritten labels.

2. Using Your Data for Marketing Purposes
Thee Third Tree does not partake in any external marketing activity - you will not receive any marketing emails or text messages from Thee Third Tree.
3. How do we keep your data secure?
3.1 Data stored digitally
The information collected during ordering with Thee Third Tree is stored in an order book. We do not write customers addresses or emails in our orderbook only customers name as reference to their order. All names, addresses and emails are stored digitally.
Devices in our possession that have access to our Etsy account are as follows;
Smartphone - Sony Experia– Password Protected
Apple Iphone 5 - Password Protected - Intel desktop computer- Password Protected
We employ security measures on all of our devices to ensure data is stored securely
3.2 Data stored as a hard copy
We do not print any documents with your information present.
4. Requesting a Copy of the Data we hold
4.1 The process
You can request a copy of all the data we currently hold on file for you. We are legally required to provide this to you free of charge and within a month of the original request.
5. Requesting we delete all data we hold
5.1 The process
If you want us to delete all information we have on file we are legally required to do so should you request it.
6.How long do we keep your data? We retain your personal information only for as long as necessary to provide you with our services and as described in our Privacy Policy. However, we may also be required to retain this information to comply with our legal and regulatory obligations, to resolve disputes, and to enforce our agreements. We generally keep your data for the following time period: 5 years.
7. How to contact us:
For purposes of EU data protection law, we Thee Third Tree, are the data controllers of your personal information. If you have any questions or concerns, you may contact us at Theethirdtree@hotmail.co.uk
Thank you Sarah and Leilah