Hebrideanhandicrafts

Privacy Policy
1. INTRODUCTION This Policy describes how I, Pamela Lang, business owner and sole trader, will comply with the EU General Data Protection Regulation 2018 (and other legislation with regards to data protection including the UK Data Protection Act 1988 and the EU Data Protection Directive 1995) in respect of the collection, use and sharing of data provided to my business when you purchase an item from me, contact me, or otherwise use my business services. 2. WHY I COLLECT YOUR DATA The basis on which I collect Data/information relates to the law of Contract and the supply of goods and services. When you place an order via my business (through online platforms or in person) I collect only the required information to enable me to process your order (such as your name, address, e mail) – if you have placed the order through an online selling platform such as Etsy, Ebay, Conscious Crafties, Craftsy, Ravelry, Love Knitting then I will not receive any card or bank details as these platforms use their own payment platforms (This Policy does not apply to the practices of third parties that I do not own or control, including online website, social media or any third-party services you access through these platforms). 3. HOW I USE THE INFORMATION The information you provide is used in order to fulfil your order on a contractual basis and is only used for this purpose, to communicate with you regarding your purchase and to arrange for delivery of the item. Your personal information will not be added to a mailing list and you will not be contacted for marketing or advertising purposes unless you request me to do so. 4. SHARING YOUR DATA I will NEVER sell or rent your personal data. To process your order and to fulfil your contract with us, your information is shared with third parties for the purpose of delivery (this may include Royal Mail / Courier services). It may be shared for compliance with legal, regulatory and law enforcement requests as appropriate and necessary. I will endeavour to notify you of any such requests. I am not responsible for how these third parties process your data, please visit their websites to read their privacy policies. 5. HOW I SECURE STORE AND RETAIN DATA Your Data will be secured, stored and retained by the selling platform through which you completed the transaction to order goods or services and complete your purchase. I do not hold hard copies of your data and such data as I do hold is held only as long as is necessary to carry out completion of your order and to maintain adequate and accurate business and financial records (currently for accounting purposes HMRC requires this to be 7 years minimum) 6. HOW YOU CAN ACCESS, UPDATE OR DELETE INFORMATION HELD ABOUT YOU You have the right to access, update or ask us to delete your personal information. Please e mail via ukcosys@gmail.com. Or via Postal Communication to Pamela Lang , 83 East Road, Tylorstown, CF43 3DE. I am obliged to provide this service within 30 days of your request free of charge, however, I retain the right to refuse or charge for requests that are manifestly unfounded, excessive, repetitive or in contravention of my legal liabilities to store information as may be required to conduct the legal obligations of my business. 7. DATA BREACHES I will report any unlawful data breach to all relevant persons and authorities within 72 hours of knowledge of the breach, if it is apparent that personal data stored in an identifiable manner has been stolen. If you feel your data has been compromised you have a right to contact the Information Commissioners Office (ICO). 8. CHANGES TO OUR PRIVACY POLICY This privacy policy may change from time to time in line with legislation or industry developments. I will not explicitly inform my customers of these changes. PAMELA LANG 21ST May 2018.