Privacy Policy

1. Introduction

I sell items online through Etsy, Facebook and in person at craft fairs and markets. I take payments via iZettle and PayPal. Occasionally I receive enquiries and take custom orders via email, Facebook/Messenger, and direct messaging on Instagram. This policy covers data collected through any of these platforms (and additionally section 5 shows where to find their privacy policies). I do not have my own website or mailing list. If I set up a website or mailing list in the future, I will update this policy accordingly.

2. What information will I use and how will I use it?

If you place an order on Etsy, I will have access to your name and postal address. I require these to fulfil your order. The legal basis for collecting this data is “contractual”. I do not download or store this data anywhere myself. It is held for me on Etsy and I do not have any control over how long it is held for. I do not use this data for anything other than fulfilling your order.

If you pay for an order, outside of Etsy, via my iZettle card reader, I may have access to your email address and/or mobile phone number. You can choose whether or not to provide these and they are used to email or text you a receipt for the transaction. The legal basis for collecting this data is “contractual”. I do not download or store this data anywhere myself. It is held for me on the iZettle system and I do not have any control over how long it is held for. I do not use this data for anything other than sending you a receipt.

If you purchase an item outside of Etsy, and pay for it via electronic invoice from my iZettle account, I will have access to your name, postal address and email address. This information is provided by you and is required to fulfil your order. The legal basis for collecting this data is “contractual”. I do not download or store this data anywhere myself. It is held for me on the iZettle system and I do not have any control over how long it is held for. I do not use this data for anything other than fulfilling your order.

If you purchase an item outside of Etsy, and pay for it using PayPal, I will have access to your name, postal address and email address. This information is provided by the PayPal system and is required to fulfil your order. The legal basis for collecting this data is “contractual”. I do not download or store this data anywhere myself. It is held for me on the PayPal system and I do not have any control over how long it is held for. I do not use this data for anything other than fulfilling your order.

If you contact me with an enquiry about a custom item, or for any other reason, you may provide me with some/all of the following: name, email address, postal address, phone number, as required to address your enquiry. The legal basis for collecting this data is “legitimate interest”. The data is held within the system used to make the enquiry. For email enquiries it will be held on the email server by my provider – BT – and also downloaded onto my laptop. My laptop is used only by me, and both my user account and the email account are password protected (with different passwords). For Facebook/Messenger enquiries, the data will be held on the Facebook/Messenger system and will not be downloaded or stored anywhere else by me. For enquiries received via Instagram direct messaging, the data will be held on the Instagram system and will not be downloaded or stored anywhere else by me. I would not normally delete these messages in case the enquiries are followed up at a later date, but I can do so, if requested. (see section 4 for how to request this). I will not use this data for any purpose other than addressing your enquiry.

3. Who do I share your data with?

I do not share your data with anyone, unless legally required to do so, e.g. by the police, or HM Customs and Excise.

4. Your choices and rights

You have the right to know what information I hold about you, to correct that information and to request that the information be deleted. You have the right to restrict how that information is used and shared. If you are concerned about how your information is used, please contact me – Elissabeth Brookes, owner of Printed In Wood – by phone on 07878218517, or by writing to me at Elissabeth Brookes, 5 Wellhouse Way, High Wycombe, HP14 4QP or by emailing me at hello@printedinwood.com.

You also have the right to complain to a supervisory authority if you think your data has been collected/used or shared inappropriately. In the UK, this is the ICO (ico.org.uk).

5. Links to privacy policies for third party data processors named within this document (all GDPR compliant)

Etsy – https://www.etsy.com/legal/privacy

iZettle – https://www.izettle.com/gb/privacy-policy

PayPal – www.paypal.com/uk/webapps/mpp/ua/privacy-full

BT – https://www.bt.com/dr-pages/privacypolicy/privacypolicy.htm

Facebook/Messenger/Instagram – https://www.facebook.com/about/privacy/update