Privacy & GDPR
v1 20th Aug 2020
Review by 20 Aug 2021.
I try my best to only collect the bare information necessary to run the site, run a shop and a mailing list, because I respect your data rights. I do however, use some services which may need to use some information to help run their services: the website is hosted by Squarespace, payments are taken by Paypal, my email list is managed by Mailchimp and I have a backup service run by LiveDrive.
No data is passed on to marketers, resold or sent to a supplier who is not GDPR compliant.
The information collected depends on how you use the site.
All visitors to the website:
This website is hosted by Squarespace. Squarespace collects personal data when you visit this website, including:
Information about your browser, network and device
Web pages you visited prior to coming to this website
Your IP address
Squarespace needs the data to run this website, and to protect and improve its platform and services. Squarespace analyzes the data in a de-personalized form. This data is necessary for the purposes of Squarespace’s legitimate interests in creating and improving website services. Squarespace is based in the US, but manages data transfers in a way that meets the European Commission on Standard Contractual Clauses.
Charming Badger does not use optional cookies.
If you make a purchase:
The information you share if you make a purchase is collected on the basis that it is necessary for the performance of a contract.
Squarespace generates and stores a record of your name, email, billing and shipping addresses and the items you have purchased. That information is shared with Charming Badger to my UK based email account. I review these records every year and delete any records which have not been used in that time.
Your payment is typically made through Paypal. Paypal have their own privacy policy, it is worth knowing that they are based in the EU and do not share data with others. I obtain no additional information from Paypal, other than you have paid.
If you sign up to my mailing list:
I will ask you for your name, email address and country so that I can send emails and ensure that I’m not sending misleading information based on location. MailChimp also collects your IP address. The data is collected on the basis that you consent to me using this data to send you no more than 6 emails per year.
The mailing list is hosted by MailChimp with MailChimp acting as a processor while Charming Badger acts as controller. MailChimp is based in the US and processes data in compliance with the Standard Contractual Clauses.
An unsubscribe link is present in all emails you receive through this channel.
Records held locally by Charming Badger
In addition to outputs from the services above, I may also hold information which has been emailed to me directly. I strongly recommend that people who email me on charmingbadger@outlook.com do not include personal information, as email privacy is about that of a postcard rather than a sealed letter.
My Etsy sales are managed entirely through the Etsy app and no data are stored by me during the process. However, it is sometimes necessary to export a list of sales for the sake of making my tax calculations.
Charming Badger uses a single computer which has password protection and I am based in the UK.
My back up service is based in the UK and GDPR compliant in that processing is only untaken in order to ensure legal obligations are performed and that data are available for retrieval.
Non-active records are anonymised once a year so that they are no longer identifiable (to enable me to keep records for taxation and legal purposes) the anonymised data are deleted after 6 years (as per the Limitation Acts)
All users have the right to be forgotten, or to request a copy of data held by me.
Data controller: Jo Wathan
Jo.wathan@knottedthreads.co.uk
Or write to Charming Badger, 70 Berlin Rd, Stockport, Cheshire, SK3 9QF