This document outlines the information we collection on visitors to craftcreations.com and the ways in which we use this information.
As set out below you have a number of rights over any personally identifiable information we may collect. If you wish to exercise any of these rights please email firstname.lastname@example.org with details of your request. We will respond to the majority of requests within one month, however complicated requests may take up to three months to process. If this is the case we will notify you within the first month. Please note that depending on the nature of the request we may need to contact you to verify your identity.
To Access Your Data
You have the right to see any personal data we may hold on you.
To Correct Your Data
If we hold information about you that is either incorrect or incomplete then you have the right to have this data corrected. If this data has been shared with third parties (as outlined in this document) we will ensure that any corrections are passed on.
To Erase Your Data
You have the right to remove data we may hold on you. In some cases we may be legally required to retain some information (for example details of past orders), but if requested we will delete everything we can, and restrict access to everything else.
To Restrict Processing Of Your Data
If you believe we hold inaccurate information about you, or if you object to some aspect of how we process your data then you have the right to restrict us from processing your data while your claims are assessed. This may also arise in cases where we are legally required to retain data which you do not wish us to process.
To Transfer Your Data
In addition to having the access your data, you also have the right to receive this data in a machine readable format, potentially allowing you to transfer your data elsewhere. In most cases your data will be supplied in CSV (comma-separated values) format.
The Right To Object To Processing Of Your Data
In most cases we will only use your data to fulfil our contractual obligations to you (i.e. to fulfil your orders), however if we continue to process your personal data, for example if you have opted-in to our email marketing list, then then you have the right to ask that we stop.
What Information Do We Collect?
We collect information when you browse craftcreations.com, register for an account, place an order or sign up to our email marketing list. In some cases your information may be shared with a a third party, for example to accept a credit card payment or handle email marketing, where this is the case you still have the same rights as outlined in the previous section. If you are unhappy with how your data is processed you have the right to complain to the Information Commissioner's Office
When Browsing craftcreations.com
As you navigate around the Craft Creations website you may perform a number of actions that will need to be remembered as you move from page to page. For example, you may add items to your basket, log into, or log out from an account. To achieve this we first store a record of these actions (your session) on our web server, then store a session cookie on your device to record which record is yours. Old information is deleted after 28 days.
IP Address Logs
We maintain a log of IP addresses accessing craftcreations.com. This data is only used for diagnostic purposes in case of technical problems, and is deleted after seven days.
When Creating An Account
Your Email Address
We ask you to provide an email address when creating an account. This is stored on our web server and used for two purposes:
- To verify your identity. You will be asked to enter your email address when logging in, and we will also send password reset emails to this address.
- To process orders. When you order items from us we will send shipping and confirmation emails to this address, and we may email you with any enquiries that arise while processing your order.
When creating an account you may also opt-in to our email marketing list. See below for more details.
Your password will be stored on our web server and used to verify your identity when logging in. All passwords are stored in a hashed and salted state, meaning that your saved password can not be accessed by anyone, including us.
When Placing An Order
When you place an order we collect the following information. Except where noted below the details will only be used to fulfil your order, and will not shared with other companies or used for marketing purposes.
Your Name and Address
As well as being used to dispatch your order this information will be shared with our payment processing company (SagePay or PayPal) in order to verify your identity and help prevent fraudulent transactions.
Your Email Address (guest checkout only)
Your email address will be used to update you on the status of your order and to handle any enquiries that may arise during processing. You may opt-in to our email marketing list at this point (see below).
Phone Number (Optional)
If you provide a phone number it will only used to handle enquiries that may arise while processing your order.