Privacy and Cookie Consent Policy

[Our terms and conditions can be found here: https://www.handstampedwotnots.co.uk/terms-and-conditions.html]

Here at Handstamped WotNots we take the privacy of all our customers seriously and are committed to protecting our customers privacy 100%.We adhere to the new GDPR regulations.Our privacy policy and cookie consent are outlined below, and details the information we may collect and how we handle and store the data.

There is a legal basis we rely on for collection and processing your personal data, that basis is as follows.

Consent

We can collect and process your data where you have given your consent in certain situations. An example would be, if you subscribe to any newsletter. We will always be clear which data is necessary to the service/newsletter we are providing

Contractual

Your data can be collected so we may carry out and comply with our contractual obligations with you - for instance - details such as your name, address and order details, given at the time any order is placed so we may make create and deliver your order.

Legitimate Interest

We require certain data from you in the day to day running of handstamped wotnots, which would be reasonably expected such as keeping records for our tax and vat purposes.

Legal Compliance

We do have a legal compliance in that if the law requires us to share information for fraud reasons we may pass on information to law enforcement.

Cookie Consent

Cookies are small bits of information that are stored on your computer if you agree, via the cookie consent. Cookies contain information to help you use our site and shop better and shop easily with us.To understand cookies better you can read about them here: https://www.cookiesandyou.com

 

When do we collect Data

Any personal data we may collect when you use our site, shop with us, message us, leave any feedback or review or engage with us on social media may include but not limited to, your name, any user name an e-mail address, your billing and mailing address and telephone number plus any details you submit for personalisation on an item ordered from us.

What data do we collect and how do we use it

Name and address and contact details for instance e-mail address and or telephone number We collect the information of your name and address and any contact information given as you place an order with us and we use this information to make, create and deliver your order, or contact you to send order updates such as dispatch notifications and to fulfill our contract with you. We require this information to contact you if necessary regarding any customer service we need to provide such as any query, refund or complaint. 

Personal details pertaining to your order such as messages left to be stamped onto any item purchased, this information is held as part of your order and held along with all other information for the reasonablly legal amount of time required.

Feedback or reveiws We collect this data to enable us to improve our service and better our service to future customers

Information about your device - for example computer, tablet, laptop or mobile. The information you send us as you browse our shop, IP address device type and general location details, is collected to enable us to see how you use our services and to enable us to build a better service.  We use google analytics to gather this information. They have their own privacy policy here: https://support.google.com/analytics/answer/6004245?hl=en

Any information on how users use our website is only stored for 21 days.

Payment details

We have no access to your bank or card details when placing an order with us on the different market places we sell our items. The information shared by the market place the order was placed on is the way that the payment was placed ie either a card transaction or a PayPal payment. We have no further payment details pertaining to the order. When you place an order on our own website we use paypal.

 

How we protect the information from you we have gathered

The data we collect and your privacy is something we take seriously and we are committed to ensure it is stored safely and protected.We ensure that our website is https secure and use ssl encryption. That any third party we use the same technology and adhere to the same gdpr privacy terms.  All our log in and computer hardware is password protected 

Who do we share information with

We only share data with trusted third parties to enable us to fulfill our contractual purpose with you.This means, the market place that you have purchased from us, being, etsy, amazon,ebay, folksy,madebymums,heartizan,the british craft house or from our own website, which is hosted by the create platform.Each of these have their own privacy policy and we do encourage you to read up on these individual sites privacy policies here:

Etsy - https://www.etsy.com/uk/legal/privacy/

Amazon - https://www.amazon.co.uk/gp/help/customer/display.html?nodeId=202166060

eBay - https://pages.ebay.co.uk/help/policies/privacy-policy.html

Create - https://www.create.net/about/privacy-policy

We have no access to any payment details from each individual market place each site processes the payment and pass on order details to us.

Our own website www.handstampedwotnots.co.uk only uses paypal to facilitate payments and again, they have their own privacy policy which we encourage you to read here: https://www.paypal.com/uk/webapps/mpp/ua/privacy-prev

We will also share details of your name and address to the delivery companies that we use so we may fulfill our contract with you. We will only share the details needed for them to perform the service required,ie only name and address on the delivery parcel.We may at times use a courier service and may need to supply a phone number or email for them to perform there service of delivery to you.

There may be times when we have to disclose information to law enforcement,Government or regulatory body for the purpose of legal requirements if requested to do so.

Where your data may be processed

If you are outside the EU and place an order with us we will hold the data collected from you in the UK.The data we collect may be transferred and stored using various services that are important to the day to day running of Handstamped WotNots, such as cloud based storage. We do use cloud based storage serviced by Apple and Google, in the day to day running of Handstamped WotNots and, again, these providers have their own privacy polices in place here:

Apple - https://www.apple.com/uk/legal/privacy/en-ww/

Google - https://policies.google.com/privacyI

If you reside outside the EU, by purchasing from us, and submitting any data you are giving consent to the process and storage of your details. You do still have the right to ask us not to process the information in a certain manner, we will always respect your wishes. Sometimes we will need to transfer this information to third parties outside your country of residence in order to fulfill your order with us, for instance to courier services in the uk to pass over to your countries postage system in able to deliver your order.

 

Data Retention 

How Long we store your data for

We will hold onto your data for the period that is reasonably required by law for tax and vat purposes, hmrc requires us to hold on to this information for a period of a minimum of 6 years, after which we will dispose of any data in a responsible manner.

Your Rights to Access the Information and Data held about you Under the GDPR you have rights to know and access the information and personal data we may hold about you.

Right of access

You have the right to know exactly what information we hold about you and how we process that information, and to request a copy of the data and information.

Right of Rectification

You have the right to have your personal data rectified if it is incomplete or incorrect

Right to be Forgotten

You have the right to have your personal data removed or deleted without a specific reason, except in the circumstances that require me to retain certain information for my legal reasons.

Right to Object and Block Processing your personal data

You have the right to object to my processing your information based on my legitimate reasons, and also the right to object to receiving marketing messages from me after giving your consent to receive them. You have the right to block your personal data from being processed.

For purposes of EU data protection law I, Debbie Hughes am the data controller of your personal data and you can contact me, at 58 Princess Road, Oldbury, West Midlands, B68 9PP And at [email protected] with any concerns regarding your personal data that we hold.

updated 21-05-2018