ShellsCCC

General Data Protection Regulation Policy (GDPR)

I, Michelle Gallagher, trading as Shell's Cards, Colouring & Crafts, am the data-controller of your personal information as it relates to my business.

This Policy does not apply to the practices of third parties that I do not own or control, including online website, social media or any third-party services you access through these platforms. For information on the privacy policies of the third parties, please visit the following links;

Facebook, Messenger & Instagram privacy policy: https://www.facebook.com/about/privacy/update?ref=old_policy

PayPal privacy policy:
https://www.paypal.com/uk/webapps/mpp/ua/privacy-prev

Royal Mail privacy policy:
https://www.royalmail.com/privacy-policy/

Etsy privacy policy:
https://www.etsy.com/uk/legal/privacy/

What Data Do I collect?

Facebook Orders:
When you place an order with me through Facebook, I will request your email address through Facebook messages on my business page. Your email address will be used to send you an invoice via PayPal. I will receive your postal address via PayPal once your payment has been received. I will only use these details to process and deliver your order, or deal with any queries you have related to that order. Conversations regarding your order which take place on the messages section of my Facebook business page are confidential and can be accessed only by myself.

Instagram Orders:
For orders placed via Instagram I will request your email address through Instagram direct messages. Your email address will be used to send you an invoice via PayPal. I will receive your name, address details and email address via PayPal once your payment has been received. I will only use these details to process and deliver your order, or deal with any queries you have related to that order. Conversations regarding your order which take place on the messages section of my Instagram business account are confidential and can be accessed only by myself.

Etsy Orders:
When you place an order via my Etsy shop, I will receive your name, address details and email address, so that I can process and deliver your order, or deal with any queries you have related to that order. Conversations regarding your order which take place via the conversations section of my Etsy store are confidential and can be accessed only by myself.

What Data Do I store?
When an order is placed with me via any channel, the details of the order are added to a password protected spreadsheet stored on my personal pc. The information added to the spreadsheet includes your first name and surname only. This information is kept so that I can identify your specific order on my order spreadsheet should there be questions about the order in the future, or should you wish to order the same items again. This spreadsheet can be accessed only by myself.

In addition to this, for orders placed via Facebook and Instagram, I operate a customer loyalty scheme, which involves me sending out one of a series of Artist Trading Cards, until a customer has collected the full set. To avoid sending repeats of the same card design, I keep a spreadsheet that lists customer name along with the designs that have already been sent. This spreadsheet is stored on a secure, password protected Google Drive. Google operate their own Privacy Policy, which can be found here - https://policies.google.com/privacy?hl=en-GB&gl=uk

Regardless of which platform you place your order through, if you provide me with details of a third-party address for your item to be shipped to, this information will never be stored in any form, other than in the original message requesting delivery to a different address. I will never make a note of this information and save it anywhere else.

What Data Do I share?
I will share your full name & delivery address with the courier who will be shipping your order, usually Royal Mail. This is so your parcel can be delivered to you.

Your data is not shared with or sold to any outside individuals for marketing purposes or any other purpose, and you will never be added to any mailing list without your explicit consent.

Your Legal Rights:
I will only retain your details for as long as necessary to process the transaction and I will securely store any data collected during that period. I retain personal data related to orders or customer queries for six years for tax purposes. After this time, I will delete your data from my records.

You have the right to request a copy of all the data I currently hold on file for you. I am legally obliged to provide you with this information within one month of your request, and free of charge.

You also have the right to request that I delete all information that I hold on file for you, and I am legally obliged to do so.
I am registered with the ICO (Independent Commissioner's Office) and you have the right to complain to them should you believe that there is an issue with the way in which I handle your data. My registration number is ZA378196.

Should you wish to contact me to request a copy of your data, or deletion of said data, the email address for correspondence is enquiries@shellsccc.com. I can also be contacted via my Facebook messages at www.facebook.com/shellsccc, Instagram messages at www.instagram.com/shellsccc or Etsy store at www.etsy.com/uk/shop/ShellsCCC

Last updated 26/05/2018