The Personal information we collect:
Name, address, telephone number, email address, company name (if applicable), VAT number (if applicable)
How and why we collect:
For administrative and business purposes (particularly to contact you and process orders you place), to improve our business and website, to advertise our goods and services, and in connection with our legal rights and obligations.
Lawful basis for processing personal information:
Under the UK General Data Protection Regulation (UK GDPR), the lawful bases we rely on for processing this information are:
(A) Your Consent. You are able to remove your consent at any time. You can do this by contacting [esowistacraftworks@gmail.com or 07399 517266]
(B) We have contractual obligation.
(C) We have a legal obligation.
(D) We have vital interest.
(E) We have a legitimate interest.
How your personal information is stored:
Your information will be stored via the secure servers of our selling platforms and by using appropriate technical and organisational measures on our own secure system.
This information is stored for no longer than necessary, taking into account any legal obligations we have (e.g. to maintain records for tax purposes), any other legal basis we have for using your information (e.g. your consent, performance of a contract with you or our legitimate interests as a business).
Payment Processing
When you pay for goods and services on our selling platforms, if you select Stripe or PayPal, information about your order and the processing of your order may be transferred outside the European Economic Area.
Stripe
Information processed by Stripe is transferred outside the EEA and stored on Stripe’s servers. You can access Stripe’s privacy policy here
Country of storage: United States of America. This country is not subject to an adequacy decision by the European Commission.
Safeguard(s) used: Stripe has self-certified its compliance with the EU-U.S. Privacy Shield which is available here. The EU-U.S. Privacy Shield is an approved certification mechanism under Article 42 of the General Data Protection Regulation, which is permitted under Article 46(2)(f) of the General Data Protection Regulation. You can access the European Commission decision on the adequacy of the EU-U.S. Privacy Shield here
PayPal
PayPal may transfer information they process about your order outside the EEA. Where they do so, they will ensure appropriate safeguards are in place.
You can access PayPal’s privacy policy here
Your data protection rights:
Under data protection law, you have rights including:
Your right of access – You have the right to ask us for copies of your personal information.
Your right to rectification – You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing – You have the the right to object to the processing of your personal information in certain circumstances.
Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
Complaints Procedures:
If you wish to make a complaint about your data, please use the contact information previously provided. In accordance with Article 77 of the General Data Protection Regulation, you also have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or of an alleged infringement of the General Data Protection Regulation.
This section also includes contact details for the ICO. People have the option to complain directly to the regulatory body if they feel unfairly treated.
Esowista Craftworks