GDPR compliant privacy policy.

Sam’s Crafty Corner GDPR Compliant Privacy Policy.

23rd May 2018

Fair Processing Notice - How We Use Personal Information

Sam’s Crafty Corner is committed to complying with the latest rules and regulations regarding customer privacy and data protection. This document has been created in order to ensure Sam’s Crafty Corner’s compliance with the General Data Protection Regulation (GDPR) May 2018, and to provide continued transparency to customers of Sam’s Crafty Corner in regards to the use and safe storage of personal data. This privacy Policy describes how and when I collect, use and share information when you purchase an item from me, contact me or otherwise use my services through any of the social media platforms or host websites that I use.

•Who we are

When we refer to “we”, “us” and “our” in this notice it means Sam’s Crafty Corner.

When we say, “individuals”, “customers” or “clients” in this notice, we mean anyone whose personal information we may collect.

•How we use personal information

We use personal information in the following ways:

•To provide quotes

•To request payment

•To arrange delivery of products

•To fulfil orders

•For tax purposes

In order for Sam’s Crafty Corner to provide accurate quotations, the delivery of goods and online invoices, individuals must provide personal information (name, address, email etc.). There is no obligation from the customer to provide this personal information, however, with the exception of face-to-face sales, Sam’s Crafty Corner would be unable to provide it's services without this information. Anyone whose personal information we hold has the right to object to us using it. They can do this at any time by telling us. We will consider the request and either immediately cease all use of the personal information and dispose of any and all sensitive materials in an appropriate manner stop using their personal information, and dispose of accordingly or explain why at that time we are not able to. Further details can be found below.

•The personal information we collect

We collect the following types of personal information so we can complete the activities in the section detailed, “How we use personal information”:

•Contact details including name and address to arrange delivery of products

•Contact details such as PayPal email address to arrange payment for products

•Personal information regarding names, dates, colours etc to complete personalised orders

When you order there will some information visible to me such as your username on social media platforms. When you order from me I will be able to view your name, email address and payment amount via PayPal, I will not be able to see your payment method or bank details.

•Where we collect personal information

Direct from individuals, their PayPal account or information they have made public, for example, on social media.

From other persons or organisations, for example:

•Bigcartel, where they pass your email address, name and postage address after completing an order

•Facebook, where messages have taken place to confirm order details

•Instagram, where messages have taken place to confirm order details

•Izettle, where payment is made via card in person

•Sharing personal information

We may share personal information with:

• Royal Mail or other delivery company where product is to be delivered

•The police if requested

•HMRC if requested

•How long we keep personal information

I retain your personal information for as long as necessary to provide you with my services, to keep records of sales and to track prior transactions. I will keep your personal information for as long as required by law or contract, in some cases up to 7 years for tax purposes.

•Data Retention

•All copies of any information provided electronically are stored on devices that are password protected

•All paper copies of your personal information are stored securely, and shredded to dispose of

•Know your rights

Any individual whose personal information we hold has the right to:

•Object to us processing it. We will either agree to stop processing or explain why we are unable to (the right to object)

• Ask for a copy of their personal information we hold, subject to certain exemptions (a data subject access request)

• Ask us to update or correct their personal information to ensure its accuracy (the right of rectification)

• Ask us to delete their personal information from our records if it is no longer needed for the original purpose (the right to be forgotten)

• Ask us to restrict the processing of their personal information in certain circumstances (the right of restriction)

• Ask for a copy of their personal information, so it can be used for their own purposes (the right to data portability)

• Complain, if they feel their personal information has been mishandled. We encourage individuals to come to us in the first instance but they are entitled to complain directly to the Information Commissioner’s Office (ICO) www.ico.org.uk

•Ask us, at any time, to stop processing their personal information, if the processing is based only on individual consent (the right to withdraw consent).

If you wish to exercise any of these rights please contact us at:

Samantha Patnett Sam’s Crafty Corner 54 Bell Hill Rd St George Bristol BS5 7LU [email protected]

•Changes to our Fair Processing Notice

Occasionally it may be necessary to make changes to this fair processing notice. When this happens we will provide an updated version at the earliest opportunity.

•Third Party Fair Processing Policies

Third parties that i use to process orders, send emails, receive payments or advertise on will each hold their own GDPR policy of which can be found below:

https://www.facebook.com/about/privacy/update (Facebook)

https://privacy.microsoft.com/en-gb/privacystatement (Outlook)

https://www.izettle.com/gb/privacy-policy (Izettle)

https://www.royalmail.com/privacy-notice (Royal Mail)

https://www.myhermes.co.uk/privacy-policy.html (Myhermes)

https://www.paypal.com/uk/webapps/mpp/ua/privacy-prev (Paypal)

https://help.bigcartel.com/privacy-policy (Bigcartel)

https://help.instagram.com/519522125107875 (Instagram)

I am in no way responsible for the content within any of the above policies, cookies and other information that they may collect or any updates that may occur going forwards.