I have my own website on which I collect the emails of subscribers to my newsletter, but I do not currently sell on it. I sell items online through Etsy, I also receive requests for custom orders via Facebook’s Messenger and Instagram’s Direct Message. I take payments via Etsy’s Automated Payment service , bank transfers and PayPal. I also receive enquiries and take custom orders via email. This policy covers data collected through any of these platforms (and additionally section 5 shows where to find their privacy policies).
2. What information will I use and how will I use it?
If you decide to join the mailing list on my website I’ll only use your details to send you my newsletter, which will include information on what I’ve been up to, events I will be at, workshop details and dates, and from time to time competitions. I may also contact you to check you are happy to keep receiving this.. You can unsubscribe at any time by contacting me at email@example.com
When I run a competition winners names may be published on my website and social media pages. I will of course get your permission for doing so.
If you place an order on Etsy, I will have access to your name and postal address. I require these to fulfil your order. The legal basis for collecting this data is “contractual”. I do not download or store this data anywhere myself. It is held for me on Etsy and I do not have any control over how long it is held for. I do not use this data for anything other than fulfilling your order.
If you purchase an item outside of Etsy, and pay for it using bank transfer or PayPal, I will have access to your name, postal address and email address. This information is required to fulfil your order. The legal basis for collecting this data is “contractual”. I do not use this data for anything other than fulfilling your order.
If you contact me with an enquiry about a custom item, or for any other reason, you may provide me with some/all of the following - name, email address, postal address, phone number, as required to address your enquiry. The legal basis for collecting this data is “legitimate interest”. The data is held within the system used to make the enquiry. For email enquiries it will be held on the email server by my provider – Outlook– and also downloaded onto my laptop or accessed via my mobile phone. My laptop and mobile phone are used only by me, and both my user account and the email account are password protected. Both devices have Antivirus programs which are regularly updated.
For facebook/messenger enquiries, the data will be held on the facebook/messenger system and will not be downloaded or stored anywhere else by me. For enquiries received via Instagram direct messaging, the data will be held on the instagram system and will not be downloaded or stored anywhere else by me. I would not normally delete these messages in case the enquiries are followed up at a later date, but I can do so, if requested. (see section 4 for how to request this). I will not use this data for any purpose other than addressing your enquiry.
3. Who do I share your data with?
I take your personal privacy very seriously and have never, and will never, sell, distribute or disclose information about you unless approved by you or unless I am required to do so by law.
4. Your choices and rights
You have the right to know what information I hold about you, to correct that information and to request that the information be deleted. You have the right to restrict how that information is used and shared. If you are concerned about how your information is used, please contact me – Alison Whateley on 07816 172292 or by emailing me at firstname.lastname@example.org I am happy to supply my postal address on request.
You also have the right to complain to a supervisory authority if you think your data has been collected/used or shared inappropriately. In the UK, this is the ICO (ico.org.uk).
5. Links to privacy polices for third party data processors named within this document
(all GDPR compliant)
facebook/messenger/instagram - https://www.facebook.com/about/privacy/update
written by Alison Whateley of Alison Whateley Design
Last updated 22/3/2019