Please see below my current privacy policy along with the new GDPR rights you have as a buyer.

Please feel free to contact me should you need anything clarifying.

-----------------------------------------
Personal information the seller may have includes:
Email address - used for contact and needed to supply the buyer with their orders and any drafts

Home/work Address - used in order to fulfil buyers orders and any postal records will be stored in a locked cupboards until no longer needed by the seller.

Telephone numbers - used as part of a order to contact the buyer throughout the order process (this is unlikely to be relevant to any etsy sales).

Any buyers Personal information - (names to fulfil and orders (address, telephone numbers, email address) will be stored securely when not being used to process any orders & destroyed when no longer needed for tax, legal reasons.

****How your information will be used
Information supplied digitally will be stored via a secure online system where password are needed to access this information.

If The Seller would like to use The Buyer's finished products for marketing or promotion (as images for the website or at wedding shows) permission will be sort prior to this taking place.

The information The Seller holds is restricted to information that is necessary for the business and will not share data with third parties.

Buyers will only be contacted by the seller to fulfil an order or respond to any enquiries and will not be contacted for any marketing promotions.

If a buyers personal information (address, email, telephone) are visible on a finished product the seller will contact the buyer to gain consent before using this a wedding shows. Non of the above will be visible in any images used on social media or the sellers website.

To fulfil an order the seller may securely share the buyer information via:
wetransfer.com (file transfers) - secure transfer of PDF printing files via the internet. Files are removed from the server after 7 days.

Digital Printers (receives printing files) - files are used to create printed materials

Delivery companies (inc Royal Mail)- names and addresses will be shared in order for the delivery companies to fulfil their contractual duties to The Seller.

The 'Egress' secure web service provides customers with the ability to send and receive file attachments securely with officers of Chesterfield Borough Council.

The Buyer and Enquirer has the right to access and receive a copy of the personal information The Seller holds about them by contacting The Seller.

The Buyer/Enquirer has the right to change, restrict The Sellers use of, or delete any personal information. Apart from in exceptional circumstances (for example where The Seller is required to store data for legal & tax reasons). On request The Seller will delete The Buyers personal information upon request.


Buyer Rights
GDPR - 8 Rights under GDPR
What rights will individuals have under GDPR? There are 8 fundamental rights, they will effect how event marketers can collect, store and use data, they are:
more
1 The right to be informed – all organisations must be completely transparent in how they are using personal data (personal data may include data such as a work email and work mobile if they are specific to an individual).
2 The right of access - individuals will have the right to know exactly what information is held about them and how it is processed.
3 The right of rectification - individuals will be entitled to have personal data rectified if it is inaccurate or incomplete.
4 The right to erasure - also known as 'the right to be forgotten', this refers to an individual's right to having their personal data deleted or removed without the need for a specific reason as to why they wish to discontinue.
5 The right to restrict processing - an individual's right to block or suppress processing of their personal data.
6 The right to data portability - this allows individuals to retain and reuse their personal data for their own purpose.
7 The right to object - in certain circumstances, individuals are entitled to object to their personal data being used. This includes, if a company uses personal data for the purpose of direct marketing, scientific and historical research, or for the performance of a task in the public interest.
8 Rights of automated decision making and profiling - the GDPR has put in place safeguards to protect individuals against the risk that a potentially damaging decision is made without human intervention. For example, individuals can choose not to be the subject of a decision where the consequence has a legal bearing on them, or is based on automated processing