Sue Jenkins is the controller for all your personal information processed on this website and all other personal data collected at craft markets, events and any other occasion where you share your personal data with me.
You can contact me via email if you have any queries about how I’m processing your data.
All of the personal information I process is provided by you directly to me for the following reasons:
- You have bought an item from me.
- You have made an enquiry.
- You have given me a commission
the type of personal data I process
I only process enough data in order to fulfil your order or to send you the item you have purchased. This will normally be your name, address, email address and phone number. I do not process any financial information such as bank account or credit card details these are all handled via PayPal or third-party payment providers.
the purpose and legal basis for processing your personal data
Under the Data Protection Act 2018 I must have a lawful basis for processing your data for different purposes. In most instances I will be processing your data under a contract to provide you with the item you have purchased. Once this process is concluded I’ll then process your data (basically keeping sales records) under a legal obligation for tax and accounting purposes.
how long I keep your data
Your personal data is only retained to fulfil the purposes stated above. Under tax and accounting law I am required to keep details of sales, which may include personal data on invoices and other documentation, for a maximum of 7 years.
who your data is shared with
I will not share your information with any third parties for the purposes of direct marketing.
Where I provide links to websites of other organisations, this privacy notice does not cover how that organisation processes personal information. I encourage you to read the privacy notices on the other websites you visit.
your right of access
You have the right to ask me for a copy of your personal information. This right always applies. There are some exemptions, which means you may not always receive all the information I process. You can read more about this here.
your right to rectification
You have the right to ask me to rectify information you think is inaccurate. You also have the right to ask me to complete information you think is incomplete. This right always applies. You can read more about this here.
your right to erasure
You have the right to ask me to erase your personal information in certain circumstances. You can read more about this here.
your right to restriction of processing
You have the right to ask me to restrict the processing of your information in certain circumstances. You can read more about this here.
your right to object to processing
You have the right to object to processing if I process your information under my legitimate interests. You can read more about this here.
your right to data portability
This only applies to information you have given me. You have the right to ask that I transfer the information you gave me from one organisation to another, or give it to you. The right only applies if I am processing information based on your consent or under, or in talks about entering into a contract and the processing is automated. You can read more about this here.
You are not required to pay any charge for exercising your rights. I have one month to respond to you.
Please contact me at firstname.lastname@example.org if you wish to make a request.
If you remain dissatisfied, you can make a complaint about the way I process your personal information. Please follow this link to see how to do that.
updating this privacy notice
I keep this privacy notice under regular review to make sure it is up to date and accurate.
Last updated February 2021
Thanks for reading and if you have any questions about this privacy notice please contact us at: