Privacy Policy
1. Introduction
I sell items online through Etsy, I also receive requests for custom orders via Facebook’s Messenger and Instagram’s Direct Message. I take payments via Etsy’s Automated Payment service and PayPal. Occasionally I also receive enquiries and take custom orders via email. This policy covers data collected through any of these platforms (and additionally section 5 shows where to find their privacy policies). I do not have my own website or mailing list or currently attend craft fairs. If I set up a website, mailing list or attend craft fairs in the future, I will update this policy accordingly.
2. What information will I use and how will I use it?
If you place an order on Etsy, I will have access to your name and postal address. I require these to fulfil your order. The legal basis for collecting this data is “contractual”. I do not download or store this data anywhere myself. It is held for me on Etsy and I do not have any control over how long it is held for. I do not use this data for anything other than fulfilling your order.
If you purchase an item outside of Etsy, and pay for it using PayPal, I will have access to your name, postal address and email address. This information is provided by the PayPal system and is required to fulfil your order. The legal basis for collecting this data is “contractual”. I do not download or store this data anywhere myself. It is held for me on the paypal system and I do not have any control over how long it is held for. I do not use this data for anything other than fulfilling your order.
If you contact me with an enquiry about a custom item, or for any other reason, you may provide me with some/all of the following - name, email address, postal address, phone number, as required to address your enquiry. The legal basis for collecting this data is “legitimate interest”. The data is held within the system used to make the enquiry. For email enquiries it will be held on the email server by my provider – Outlook – and also downloaded onto my laptop or accessed via my mobile phone. My laptop and mobile phone are used only by me, and both my user account and the email account are password protected (with different passwords). Both devices have Antivirus programs which are regularly updated.
For facebook/messenger enquiries, the data will be held on the facebook/messenger system and will not be downloaded or stored anywhere else by me. For enquiries received via Instagram direct messaging, the data will be held on the instagram system and will not be downloaded or stored anywhere else by me. I would not normally delete these messages in case the enquiries are followed up at a later date, but I can do so, if requested. (see section 4 for how to request this). I will not use this data for any purpose other than addressing your enquiry.
3. Who do I share your data with?
I do not share your data with anyone, unless legally required to do so, e.g. by the police, or HM customs and excise.
4. Your choices and rights
You have the right to know what information I hold about you, to correct that information and to request that the information be deleted. You have the right to restrict how that information is used and shared. If you are concerned about how your information is used, please contact me – Katie Luce –by emailing me at info@katies-shed.com I am happy to supply my postal address and telephone number on request.
You also have the right to complain to a supervisory authority if you think your data has been collected/used or shared inappropriately. In the UK, this is the ICO (ico.org.uk).
5. Links to privacy polices for third party data processors named within this document
(all GDPR compliant)
Etsy - https://www.etsy.com/uk/legal/privacy/?ref=list
PayPal - https://www.paypal.com/us/webapps/mpp/ua/privacy-full
Outlook - https://privacy.microsoft.com/en-us/privacystatement
facebook/messenger/instagram - https://www.facebook.com/legal/FB_Work_Privacy
Author:
Katie Luce
Katie’s Shed