HandfordMade is a Sole Trader business that produces and sells a wide range of craft products. HandfordMade is committed to protecting your privacy and compliance with all relevant legislation, including the General Data Protection Regulation (GDPR), where this applies to EU citizens, in addition to the ePrivacy Directive (implemented in the UK as the Privacy and Electronic Communications Regulations) and other applicable legislation.
This Privacy Policy covers our treatment of information that is gathered by this website.
1. THE DATA WE COLLECT ABOUT YOU
Typically, the only personal data we will collect is what you provide through contacting HandfordMadevia the website. We use different methods to collect data from and about you, including the following:
Contact and Personal Details. You may give us your Contact and Personal Details by filling in the forms on our website or by purchasing goods. This will include information such as:
• Your name
• Your phone number
• Physical address
• Email address
• Contact preferences (for marketing purposes)
Financial Details. All our website financial transactions are handled by Wix. All information that is shared is only to the extent necessary for the purposes of processing payments you make via our website or refunding such payments.
Other Information. We may also collect information relating to an activity/complaint that is made.
2. HOW WE USE YOUR PERSONAL DATA
Generally, we use your personal data for the purpose for which we obtained it which include the following:
• To contact you following your interest or purchase of HandfordMade goods (e.g. through web enquiries or the purchase of goods). We may process Contact Details and Personal Details for this purpose.
• To collect information on complaints and feedback in relation to HandfordMade goods. We may process Personal Details, Contact Details and Other Information for this purpose.
• To ensure the security of our website and analyse visitor statistics. We may collect Technical Data for this purpose.
3. ON WHICH LEGAL BASIS DO WE PROCESS PERSONAL DATA
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:
Consent
This applies where you have given us consent to the processing. Typically, this will include where you have provided information to us, such as when you have given us consent to send marketing information to you. We will take active steps to collect your consent or to ensure our clients have collected it. Where you have given consent, you have the right to withdraw consent to marketing at any time by contacting us or opting-out. For more information, see the section on your Legal Rights.
Legitimate Interests
We may rely on our legitimate interests – including in the context of maintaining information on complaints from customers, where your interests and fundamental rights do not override those interests.
4. HOW LONG WE KEEP IT FOR
To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means.
We will retain the following data for the applicable periods below.
Type of data
Retention period
Justification
Contact and Personal Details
2 years since the last contact
To keep in contact with our customers and maintain accounts
Financial Details
N/a
N/a
5. WHERE WE STORE YOUR PERSONAL DATA
Cloud servers
We store personal data within our UK and EEA-hosted servers provided by Microsoft 365 Ondrive.
6. DISCLOSURES OF YOUR PERSONAL DATA
We may share your personal data with the parties set out below. This will typically include in the following circumstances:
• Professional advisers including lawyers, bankers, auditors and insurers who provide consultancy, banking, legal, insurance and accounting services.
Other disclosures
We may also be legally required to share information with the following third parties:
• HM Revenue & Customs, regulators and other authorities based in the United Kingdom, who require reporting of processing activities in certain circumstances.
• Public authorities who make lawful requests for the disclosure of information by HandfordMade, including to meet national security or law enforcement requirements
7. SAFEGUARDS FOR PERSONAL DATA TRANSFERS
Where we use such third-party providers as listed in Section 6, we take steps to enter into agreements to ensure that such third parties have the adequate safeguards in place, which include:
Generally, where data has been transferred from HandfrodMade to other third parties outside the EEA, we will ensure that any parties who receive such data have the appropriate measures to ensure secure transfers in place.
Alt HAN Co will not transfer any data or allow any access to such data to such third parties until these arrangements have been verified.
8. YOUR LEGAL RIGHTS
Under certain circumstances, you have rights under the GDPR in relation to your personal data, upon request:
• Request access to your personal data (commonly known as a “data subject access request”). This enables you to receive a copy of the personal data we or our Third Party Partners hold about you and to check that we are lawfully processing it.
• Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.
• Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully. However, you may not have the right to exercise this if we are required to process your data for legal or contractual obligations.
• Request the transfer of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
• Object to processing of your personal data where you feel it impacts on your fundamental rights and freedoms, by contacting us to inform us of this.
• Opt-out from any processing in the following situations:
o The right to opt-out from marketing communications or newsletters we may send to you. You should exercise this by contacting us at hello@handfordmade.co.uk
o The right to opt-out of any cookies we use, even to those you have consented to. For more information on this, please see the Cookies section above.
NO FEE USUALLY REQUIRED
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we could refuse to comply with your request in these circumstances.
WHAT WE MAY NEED FROM YOU
We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
TIME LIMIT TO RESPOND
We try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
9. COOKIES
At HandfordMade, we may use cookies to allow us to personalise your visits to this site, keep track of your preferences and learn about the way you use the site.
A cookie is a small text file that is downloaded onto your computer when you visit our website and allows us to recognise you as a user. Typically, these contain two pieces of information: a site name and unique user ID. All information these cookies collect is aggregated and anonymous. Cookies are essential to the effective operation of our website. Cookies make the interaction between you and the website faster and easier. Cookies may also be set by the website you are visiting (first party cookies) or they may be set by other websites who run content on the page you are viewing (third party cookies).
Cookies are generally collected across the following categories:
• Strictly Necessary: Cookies that are strictly necessary to enable you to move around our websites or to provide certain basic features
• Functional: Cookies that are used to enhance the functionality of the website, including by storing your preferences
• Performance: Cookies that track visitor statistics and user traffic that allow us to monitor the popularity of sections of our website (e.g. Google Analytics)
• Marketing: Cookies that are used to track users across pages or websites to build up a user profile and display advertisements relevant to them