Crafty Trendz General Data Protection Regulation (GDPR) Policy Crafty Trendz is committed to complying with the latest rules and regulations regarding customer privacy and data protection. This document has been created in order to ensure Crafty Trendz's compliance with the General Data Protection Regulation (GDPR) May 2018, and to provide continued transparency to customers of Crafty Trendz in regard to the use and safe storage of personal data. Any use of 'us', 'our' and 'we' in this notice refers to Crafty Trendz directly. Use of terms such as 'individuals', 'customers' or 'clients' refers to any person/s who have provided personal information to Crafty Trendz. How We use Personal Information: In order for Crafty Trendz to provide accurate quotations, the delivery of goods and online invoices, individuals must provide personal information (name, address, email etc.). There is no obligation from the customer to provide this personal information, however, with the exception of face-to-face sales, Crafty Trendz would be unable to provide it's services without this information. Customers maintain the right to object to the use of their personal information by Crafty Trendz. An individual may contact Crafty Trendz at any time during or post a transaction to request Crafty Trendz cease using their personal information, at which point, Crafty Trendz will A.) immediately cease all use of the personal information and dispose of any and all sensitive materials in an appropriate manner B.) provide a full and detailed explanation as to why, at that time, Crafty Trendz is unable to cease use of personal information. Crafty Trendz offers a postal delivery service with all orders at an additional fee to the customer. Royal Mail PLC and Hermes Parcelnet Ltd are used as a third-party company to fulfil the postage orders from Crafty Trendz, thus Crafty Trendz must provide Royal Mail PLC and Hermes Parcelnet Ltd with certain details of a client’s personal information (name, address). The use of Royal Mail PLC and Hermes Parcelnet Ltd is made clear to the customer prior to any order and they must consent to the personal information being passed on from Crafty Trendz to Royal Mail PLC and Hermes Parcelnet Ltd in order to complete a transaction with Crafty Trendz. Crafty Trendz operates with a focus on online sales. Etsy Inc., Facebook Inc. Microsoft Corporation, Instagram, Ebay and Twitter are all companies that provide online platforms in which a customer may contact Crafty Trendz. Should a customer contact Crafty Trendz using one these methods, Crafty Trendz may request that personal information be sent via the platform in order to complete an order/quotation. The customer may choose to use one of these methods in order to provide the required information to Crafty Trendz, doing so gives consent for both Crafty Trendz and the chosen platform, unless otherwise stated in their own terms and conditions, to view and/or use the information provided. Using one of the mentioned companies to which Crafty Trendz has an online presence to contact Crafty Trendz opens a dialogue in which the customer gives consent to receive private messages within use of the given platform. All conversations between Crafty Trendz and the customer that may involve the use of personal information are done so in private. None of the information provided in these private messages will ever be shared publicly or with a third party, excluding government intervention (e.g. at the request of the police). Crafty Trendz may, on occasion, request that the customer provide pictures and/or feedback in regard to a completed order. Crafty Trendz will disclose any and all use for this material prior to the customer providing the information. Compliance to this request is optional on the part of the customer. Crafty Trendz provides a service in which a customer can personalise an item. This may lead to a customer providing the personal information of another party e.g. for a gift. Crafty Trendz will only contact the individual who initiates a transaction and/or provides payment for that particular order. It is the responsibility of the customer to ensure that they have received consent before providing another's personal information to Crafty Trendz. The Personal Information We Collect & Safe Storage of This Information As mentioned in the previous section, Crafty Trendz must collect certain pieces of personal information from a customer in order to provide their services. This information will include the customer’s name and address and/or the customer's email address and contact number. Paper copies of this information is stored in folders that is kept in a secure property and, within the property, an independently locked cabinet. Digital copies of this information are stored on a password protected laptop used by Crafty Trendz. Any digital folder/document containing potentially sensitive information will have further encryption in order to keep the information secure. All passwords protecting private information differ and only the Owner of Crafty Trendz is informed as to the passwords. Typically, Crafty Trendz will hold personal information of the customer for three years in order to fulfil repeat orders, track prior transactions and keep record of sales. After this time, Crafty Trendz will permanently destroy any personal information stored. In the case of paper copies, this information is shredded and separated and recycled at different times. In the case of digital files/documents, these are moved from the secure area of the computer to the recycle bin, where they are then permanently deleted from the computer system. Should an individual request that their personal information be destroyed before this time, Crafty Trendz will A.) Destroy the personal information thoroughly B.) give a detailed explanation as to why, at that time, Crafty Trendz is unable to destroy the information. Crafty Trendz collects any and all of the personal information directly from the customer. Sending Crafty Trendz this information shows direct consent from the customer that the information can be used and stored in the manner explained in the above information. Crafty Trendz does not collect outside information or information from third parties nor does Crafty Trendz send any personal information to third party companies without the consent of the customer (e.g. Royal Mail PLC and Hermes Parcelnet Ltd). Crafty Trendz may receive personal information from Paypal Holdings Inc. This information is needed to complete payment and to deliver the goods ordered. A customer gives consent for Crafty Trendz to view and/or use this information when sending payment. The same is applicable for Etsy Inc. Additional Notes & Customer Rights: Crafty Trendz is committed to protecting the personal information of its customers. To this end, Crafty Trendz will only use third party companies that adhere to the rules and regulations of Government Standards in regard to securing personal information. Any person/s whose personal information Crafty Trendz holds maintains the right to object to its use. Crafty Trendz will, as mentioned, cease use of the personal information immediately or, alternatively, provide a detailed explanation as to why this is not possible. Customers also maintain the right to view the personal information gathered by Crafty Trendz. Should this request occur, Crafty Trendz will provide any and all information regarding that particular customer, however Crafty Trendz will not provide anyone but the customer who has either contacted Crafty Trendz or the individual who made payment with information regarding that order, with the exemption of a Government Agency (e.g. Police). Customers may contact Crafty Trendz to update or correct contact details to which Crafty Trendz will oblige. Verification of identity may be required in this instance. Customers maintain the right to complain regarding the order or service received by Crafty Trendz. Crafty Trendz can be reached by means of the original method of contact prior to an order and will work to resolve any issue that arises. However, should a customer wish to make a complaint with the Information Commissioners Office (ICO) they are entitled to do so.