Privacy Policy
Privacy Policy
Maintaining your privacy is really important to me. You entrust us with your information, and
we take that responsibility seriously.
I may modify or update this Privacy Policy from time to time to reflect the changes in my
business and practice, therefore you should review this page periodically. When I change
the policy in a material manner I will let you know and update the ‘last updated’ header as
below.
This Privacy Policy was last amended on 23.08.2022
This policy was last updated on 23.08.2022 in line with GDPR requirements. It may be
updated in the future and we will post the new version here on our website. I will never
deviate from my overall philosophy of maintaining your privacy, though.
1. General Information
Cards by Kathie takes security and privacy seriously. This Privacy
Policy explains how I collect, store and use personal data when you browse Cardsbykathie.co.uk or otherwise provide your personal data to me. Please read this Privacy Policy
carefully to understand how I will treat your personal data.
2. What informationI collect about you
Your personal data
When I say your "personal data", I mean any information that identifies any person that
you provide to me.
Your "personal data"; may also be contained in information that I collect about you in
connection with your order or otherwise interact with me for example by email.
When it comes to your personal data, I comply with our obligations under the General
Data Protection Regulation and any other applicable data protection legislation from time to
time.
Your personal data includes the information you provide, on the Cardsbykathie.co.uk
website (including any forms you complete), or during an email enquiry about you.
Examples of this personal data include your name, your email address, address including
postcode which you provide to me when you set up an account and subsequently amend in
the My Account section when you go to checkout; and any correspondence when you
contact me.
I do not knowingly collect or solicit any personal data from anyone under the age of
sixteen or knowingly allow such persons to purchase goods from me without parental consent. Cardsbykathie.co.uk is not directed at children under the age of sixteen. In the event that I learn that I have collected personal data from a child under age sixteen without verification of parental consent, I will delete that information as quickly as possible.
Information I collect - I collect information about your website usage, to improve my
service and to understand trends to enhance and customize our website. Some of this data
may be "personal data", where it identifies a person. Here's the information that I collect
and how I use it:
- I monitor patterns of usage, such as abandoned cart data, so I can understand how what people are interesting in buying from Cardsbykathie.co.uk to develop and improve my products and understand customer behaviour.
- Cardsbykathie.co.uk does not store any credit card data. When payments are processed via credit card, Cardsbykathie.co.uk uses third-party vendors that are PCI-DSS compliant. At no point does Cardsbykathie.co.uk have access to your credit card information. For further information on how I meet industry standards for credit card information security visit https://freewebstore.com/PCI_compliance.html.
3. How we use the information we collect I use your personal data for legitimate business reasons, for example email you when your order has been received. It will also enable me to contact you by email, SMS, social media or telephone where necessary concerning Cardsbykathie.co.uk or an order you ,have placed; to record your personal preferences; to personalise my services to you (such as by pre-populating fields to make it easier for you to provide information when you return to the Cardsbykathie. It will also enable me to produce reports you request as part of the services I provide.
Contacting you for Marketing Purposes - I may use your personal data to contact you
by email, social media to let you know about Cards by Kathie offers or product ranges which may be of interest to you. I will only use your data in this way where you have provided consent,
I have legitimate business reasons for doing so, or where I am otherwise entitled by law
to do so. If you would like me to stop providing you with such notifications, just contact me
using the details in Section “How to Contact Us” at the end of this policy. Please note, this
may take up to one working day to take effect. To stop receiving emails from Cardsbykathie.co.uk itself, you should cancel your Cardsbykathie.co.uk account or unsubscribe from my mailing list.
Legal Requirements – I may use your personal data to comply with any legal obligations
to which I am subject.
4. Why do I use your personal data? I collect and use your personal data for a variety of reasons. I need some data to enter into and perform my contract with you. The lawful basis for processing your personal data is Consent as you have consented to provide your personal details to me to allow me to provide a service to you. If you fail to provide such data I will be unable to provide my service to you.
Other information I collect because I have legitimate business interests, for example, in:
- Fulfilling your order and providing updates on the order.
- Understanding how my customers use my products, services and websites;
- Understanding and responding to customer feedback;
- Researching and analysing the services my customers want;
- Improving my product and better understanding how my customers use it.
5. How I share information I collect Except as described in this policy, Cardsbykathie.co.uk does not divulge any personal information gathered via its services to third parties.
I may share your personal data with third parties in certain circumstances:
- if I am under a duty to disclose or share your personal in order to comply with any legal obligation; to cooperate with law enforcement officials in the investigation of unlawful activities of Cardsbykathie.co.uk website users or relating to Cardsbykathie.co.uk users; or in order to enforce or apply any contract with you; or to protect my rights, property, or safety of myself, customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection or unlawful activity.
you. Examples of these functions include website creation and hosting, email, Royal Mail, providing marketing assistance and data analysis, data management, handling credit card transactions and providing customer service. In choosing to work with any such third parties, I will always ensure that the security policies and confidentiality arrangements of those third
parties adhere to the same requirements I myself impose and expect, as a minimum.
No ownership rights to the data will be transferred to any third party.
Sub-processors we use:
| Name | Service Provided | Link |
freewebstore |
eCommerce provider for website design, hosting and data storage. |
https://freewebstore.com/privacy.htm |
| Gmail |
email provider | https://www.google.co.uk › intl › en-GB › policies › privacy |
| Royal Mail | Postage of items | https://www.royalmailgroup.com › en › site › privacy-notice |
6. How long do I store your data for? I only store your data for as long as necessary for the purposes of processing set out in this policy.
Data Retention Policy
| Category | What personal information is kept? |
How long is it kept for? |
| Order Data | Name, email, address | 6 weeks from the order date |
| Invoice’s | Name, email, address | These are kept for tax purposes if required by HMRC |
| My Account | Name, email, address | Active until user unsubscribes or makes an individual request |
| Newsletter subscriptions | Email address | Active until user unsubscribes |
7. How to access and control your information You are free to change your personal details in the My Account section of your account at any time, if you have set up an account with me.
You can also ask me for a copy of your personal data that I hold. I will ask for proof of
your identity before providing any information and reserve the right to refuse to provide
information requested if identity is not established. Please see “Your Individual Rights”
below. Generally, I will retain your personal data for a reasonable period, or for as long as
the law requires.
Your individual rights
7.1. Access to your personal data: You can ask me to confirm if I am processing your
personal data and you may request a copy of your personal data by contacting me.
See Section “How to Contact Us” at the end of this policy.
7.2. Right to change or withdraw your consent: Where you have given me consent to
make use of your personal data for any of the purposes outlined in this policy, you
may withdraw that consent at any time by contacting me using the details located at
Section “How to Contact Us” at the end of this policy. If you wish to change your
contact preferences or no longer wish to be contacted for marketing purposes, use
the Unsubscribe link in the email or get in touch. See Section “How to Contact Us” at
the end of this policy.
7.3. Right to Rectification: You may ask us to update out of date or inaccurate
information I hold about you. To do so, please log on to your Cards by Kathie
account and update your information or get in touch using the details at Section “How
to Contact Us” at the end of this policy.
7.4. Right to Erasure: In certain circumstances you may ask us to erase your Personal
Data. If you would like me to erase the personal data I hold about you, please get in
touch using the details at Section “How to Contact Us” at the end of this policy
7.5. Right to Data Portability: In certain circumstances you may ask me to provide you
with the personal data that I hold about you in a structured, commonly used,
machine readable form, or ask for me to send such personal data to another data
controller.
7.6. Right to object: In certain circumstances you may object to my processing of your
personal data. Please get in touch using the details at Section “How to Contact Us” at
the end of this policy.
7.7. Right to restrict processing: You can ask me to restrict the processing of personal
data I hold about you in certain circumstances. Please get in touch using the
details at Section “How to Contact Us” at the end of this policy.
7.8. Make a complaint: You may make a complaint about my data processing activities,
please contact us. See Section “How to Contact Us” at the end of this policy.
7.9. Getting in touch: To make enquiries and/or to exercise any of your rights in this
privacy policy please contact me. See “How to Contact Us” at the end of this policy.
8. Data security I take security and privacy seriously. I will endeavour to take all reasonable steps to keep your personal data secure once it has been transferred to my system. I adopt
appropriate, industry standard data collection, storage and processing practices and security
measures to protect against unauthorised access, alteration, disclosure or destruction. For
more information how I keep my online data safe, visit https://freewebstore.com/privacy.html.
10. How to Contact Us If you have any queries relating to this Privacy Policy or Cards by Kathie use of your personal or financial data, please contact cardsbykathie@gmail.com or alternatively use the Contact us form
