ROSEANDHEN

What is General Data Protection Regulation (GDPR)?

General Data Protection Regulation (GDPR) comes in to effect on the 25 May 2018, and the aim is to strengthen data protection for individuals and ensure that the law adequately protects the storage of peoples’ personal information. Personal data is any information that might be used to identify a person, directly or indirectly, such as name, address, contact number, email address or online details.

The following information outlines how and when I will use your data:

What Information do I collect?

By confirming an order, you authorise Etsy is pass certain details to me (your name, address, email) so I can then complete your order. If you require a custom order, you may choose to provide me with any further information to complete your request.

Where is your data stored?

Any data Etsy have passed to me for the completion of your order is stored within Etsy. If you have contacted me directly via email, your details and conversations will be stored within my email account and contacts, which is password protected. Completed orders are stored on my PC and backed up securely to my Google Drive cloud for my own personal records only, both of which are password protected.

How long is your data stored for?

In accordance with self-employment laws, I am required to keep business records and basic customer information (name, address, email and evidence of transaction) for 7 years.

How is your data used?

Personal data will be used to fulfil any orders placed through Etsy, including arranging shipping which will generally be through Royal Mail (unless otherwise advised). I also share information with Etsy, where necessary, in order to provide my services to you and comply with the Etsy Seller Policy and Etsy Terms of Use. If you wish to know more about Etsy’s own GDPR policy please view this under Etsy's About section and Policies. I will never pass your data on to third parties, other than those mentioned, and will not be added to any mailing lists for my business (Rose & Hen,) unless you have specifically subscribed.

Mailing list and Newsletters.

Please note that I do not currently operate a mailing list or send out newsletters.

Reviews and Testimonials.

I will share reviews you have kindly given on Etsy via social media. Reviews and testimonials I have received via any other form of communication will be shared only once permission is received. I will not display your name or contact details and will not disclose any other details.

Your Rights.

Under data protection laws you have the right to request access, change, erasure, restriction, transfer, to object to processing of your personal information.
You can see more about your rights please visit www.ico.org.uk

If at any time you wish to contact me directly in order to change or delete your information, please do so at the following email address: carrie.lyall@gmail.com or alternatively by mail to: Rose & Hen, 87 Cranbrook Rd, York, YO26 5JQ, United Kingdom.