PRIVACY POLICY

Introduction

On 25 May 2018, the new European General Data Protection Regulations (GDPR) came into effect. These regulations have been introduced to help protect people’s personal data and require all businesses to show how they collect and use that information when, for example, a person shops online or signs up to receive a newsletter.

This privacy notice has been written to explain how I collect and use your personal information and to let you know how you can choose what information I hold about you.

Amanda Brawn Jewellery is run by me, Amanda Brawn (referred to as ‘I’ ‘my’ and ‘me’), as a sole trader. As a sole trader, I am the data controller responsible for your personal information. 

This privacy notice may be updated from time to time, and you should check this page occasionally to make sure that you are happy with the changes. I may also notify you of any changes via email if you have elected to receive these.

What personal information I may collect from you

Personal data means any information capable of identifying an individual. For example, your full name, postal address, email address, phone numbers, IP address, bank account and payment card details. It does not include anonymised data.

I may process certain types of personal information about you, including:

  • Identity Data may include your name, title, date of birth and gender

  • Contact Data may include your billing address, postal address, email address and contact telephone numbers

  • Financial Data may include your bank account and payment card details

  • Technical Data may include your IP address, internet browser details, location and operating system on the devices you use to access my website

How I collect your data and where it is kept

You may provide me with your data when you access my website. For example, when you:

  • sign up to receive my newsletter

  • send me an email via the contact form on my website

  • purchase something from my occasional website shop openings

  • enter a competition or prize draw

  • send me a direct email, or message me via my social media accounts on Facebook or Instagram

I collect your name and email address when you opt in to my email list via my website. This data is held in Mailchimp – a third party mailing list provider. Mailchimp is fully GDPR compliant and your information is securely stored. For the Mailchimp privacy policy, you can read it here.

Occasionally, I may collect your personal information directly from events that I attend or if you send me a direct email or social media enquiry. 

If you make a purchase via my occasional website shop openings, I collect your name, billing address, postal address, email address and IP address. 

When you use my site, I also receive certain automated technical data about your equipment, such as browsing activity and usage patterns. This data is collected and stored in Google Analytics.

How I use your data

I will only use your information where the law allows me to. When you opt in my newsletter, make a purchase, or send/reply to an email or direct message, I understand that you consent to my collecting your information and using it for that specific purpose only. By providing me with your personal information, you also warrant to me that you are over 13 years of age.

If you are on my mailing list, you will receive my newsletters and be notified about forthcoming shop openings and relevant dates of shows and events that I will be attending.

When you make a purchase via my website, or in person at events, or directly via email, my social media or over the telephone, I will collect personal information about you including your name, address, telephone number and email address. In order to fulfil your order, your information may also be shared with a third-party service provider as follows:

My website and online shop are hosted by Squarespace.Inc. (Squarespace). They provide me with an online e-commerce platform which enables me to sell my products to you. Your information is stored securely by Squarespace. For the Squarespace privacy policy, you can find it here.

Squarespace use third-party payment providers to assist in processing your personal information in order to complete your order via my online shop. They only collect such information as is required in order to process the transaction. This will be done via either Paypal or Stripe. You can read the Paypal privacy policy here, and the Stripe privacy policy here.

In order to fulfil your order, I also share your information with other service providers such as Royal Mail and other courier services. This is only to the extent necessary to perform these services.

When you buy something from me face to face at an event, I use a third-party payment service iZettle. Your personal information will be collected to the extent necessary in order to process the payment transaction. You can read the iZettle privacy policy here.

Except where the law allows me to, or where I am required to share your information for legal or accounting reasons, I will not give, sell or rent your personal data to another third party.

How long I keep your information

When you sign up to my newsletter, your information will be on my records unless and until you ask me to delete it. You can unsubscribe at any time using the ‘unsubscribe’ button at the bottom of every newsletter, or by sending me an email to amandabrawnjewellery@gmail.com

Where you have made a purchase from me, I am required by law to keep certain information about you, for legal and accounting purposes, for a period of six years.

Cookies

When you visit my website www.amandabrawn.co.uk hosted by Squarespace, cookies are used to collect certain information. Cookies are small pieces of data that websites store on a device. Cookies can enhance your browsing experience because they help websites to remember your preferences and understand how people use different features of the websites they visit. Squarespace use some necessary cookies because they allow visitors to navigate my site. For more information, you can read the Squarespace cookie policy here.

Your rights

You have the right to request a copy of the information that I hold about you. You can also ask me to correct or amend any of your personal information. To request a copy of the information I hold about you, or to request a correction or amendment, please contact me by email at amandabrawnjewellery@gmail.com

You also have the right to be forgotten. If you no longer wish me to retain the personal information I hold about you, and subject to my legal and accounting obligations, you have the right to request me to destroy such information. If you would like to request this, please contact me via email at amandabrawnjewellery@gmail.com

 

Updated 08 August 2018