1.1 I am committed to safeguarding the privacy of my customers and subscribers.
1.3 In this policy 'I' and 'me' refers to Anne Farmer as Data Controller and sole trader for the business 'Ditsy Pips'.
2. Information I collect
I collect and process some or all of the following information:
2.2 Username or Nickname
2.4 Email Address
2.5 Telephone Number
2.6 Payment Details
2.7 Order Details
2.8 You may also choose to provide me with additional personal information relating to your order or a service I am providing. I will never request any personal information from you that is not directly relevant to your order or contract or which is not needed to fulfill the service I am providing to you.
2.9 You may provide this data to me directly or the data may be collected by me from 3rd Party sites listed in section 6.2 who have shared it in accordance with their terms and conditions for the purposes of fulfilling a contract for goods or services, resolving a dispute, responding to a query by you or to comply with laws and regulations.
3. Lawful Basis for Processing and Retaining your Data
3.1 Any personal data retained and processed to keep you up to date with new posts, products, goods and services is processed on the lawful basis of Consent. This means you have consented to allow me to use your data for this purpose. Your consent for the processing of your data for this purpose can be withdrawn at any time, in writing or verbally to me and must be responded to by my within one month of the request being made.
3.2 Should you agree to purchase any goods or services from me, I will retain and process your data under the lawful basis of a Contract. The personal data you, or a 3rd party provide me to fulfil this contract shall only be used and processed in connection with the contract itself and will not be used for any future marketing purposes.
3.3 Information you provide to me for the purposes of any kind of transaction shall be retained and processed after the completion of the contract under the lawful basis of Legal Requirement. This means that any information relating to any transaction can be kept and processed to allow me to comply with all necessary laws and regulations (for example, but not limited to, tax purposes).
4. Data Retention Period
4.1 I will retain your data only for as long as is required to comply with all legal obligations and regulations and for the resolution of disputes. This will be a period of no more than 7 years.
4.2 For mailing list subscribers, your email address will be retained for the purposes of the mailing list until you unsubscribe or request that your information is removed. (See Your Rights 5.2 below)
5. Your Rights
5.1 Under Article 17 of the GDRP you have the right to have your data removed in some circumstances. You have the right to unsubscribe to the mailing list at any point you choose, for any reason. Please notify me of this request in writing or verbally to me. You will be removed from the mailing list and your data relating to your mailing list subscription will be deleted within one month from the data of your request being received.
5.2 You have the right to have your data removed when it is no longer required for any purpose listed under Section 3.
5.3 You have the right to have your data removed where I have processed your personal data unlawfully or where I have been legally obliged to remove it.
5.4 You have the right to request a restriction of the use of your personal data in some circumstances, as per Article 18 of the GDPR. You may request a restriction on the processing of your data where you believe the data is inaccurate, where it has not been processed lawfully or where the data is no longer needed but you would like me to retain it. Any request to restrict the processing of your data can be made in writing or verbally to me and will be responded to within one month of the request being received. A temporary restriction of processing will be put ion place while your request is being considered.
5.5 It is important that any data held by me is accurate and up to date. You have the right to have any errors in your data corrected. Please notify me in writing or verbally of any corrections required. Your request will be responded to within one month of the request being received.
6. Sharing Information With 3rd Party Sites
6.1 I use a number of 3rd Party sites to provide information about my business, to sell my products and services, and to complete transactions.
6.2 These 3rd Party sites and providers are as follows:
6.2 Your data is only shared with and by these sites for the provision of goods and services, the completion of transactions, the resolution of disputes, the provision of information to you about my business and the fulfilment of legal and regulatory requirements.
6.3 Where you have accounts with any of these 3rd Party sites, your data will be shared with or by them in accordance with the terms and conditions you agreed to when signed up for an account with them. The Privacy Policies for each of these 3rd Party sites can be found at the end of this policy.
6.4 I will not send you any communications via any of these 3rd Party sites unless you have specifically requested me to, you have chosen to follow me or subscribe to a mailing list or unless it is necessary for the completion of a contract for goods or services, or compliance with laws or regulations.
7. Buying and Selling of Personal Data
7.1 I do not buy or sell any personal data.
8. Contact Details
I can be contact by post at the following address:
23, The Wheatbutts,
or by email at firstname.lastname@example.org
9. 3rd Party Sites Privacy and Data Use Policies