This Privacy Policy describes how and when I collect, use, and share information when you purchase an item from my shop, contact me, or otherwise use my services or its related sites and services.

Your personal information is used only to fulfil your order, communicate about your purchase, and handle delivery. Your data is never shared with third parties except as necessary for providing these services (e.g., postal carriers).

What data is collected

To fulfil your order, you must provide me with certain information (which you authorised my website to provide to me), such as:

• Your name
• Email address
• Postal address
• Payment information
• Details of the product you’re ordering

You may also choose to provide me with additional personal information if you contact me directly for a custom order or inquiry.

How it’s used

I rely on a number of legal bases to collect, use, and share your information, including:

• As needed to provide my services, such as when I use your information to fulfil your order, settle disputes, or provide customer support.
• When you have provided your affirmative consent (e.g., by signing up for a mailing list — if applicable), which you can revoke at any time.
• If necessary to comply with a legal obligation or court order.
• As necessary for the purpose of my legitimate interests, provided those interests are not overridden by your rights or interests (such as providing and improving my services).

Who it’s shared with

I share your personal information for very limited reasons and in limited circumstances, as follows:

• Service providers: I engage trusted third parties to perform functions and provide services to my shop (e.g., delivery companies). I will share your personal information with these third parties, but only to the extent necessary to perform these services.
• Legal compliance: I may collect, use, retain, and share your information if I have a good faith belief that it is reasonably necessary to respond to legal process or enforce my agreements.

Customer rights regarding their data

If you reside in certain territories, including the EU or UK, you have a number of rights in relation to your personal information:

• Access: You may have the right to access and receive a copy of the personal information I hold about you.
• Change, restrict, delete: You may also have rights to change, restrict my use of, or delete your personal information (except where I am required to store data for legal reasons).
• Object: You can object to my processing of your data in certain cases.

To exercise these rights, contact me through the contact details below.

Contact

For purposes of EU data protection law, I, Rebecca Kate Woolley, am the data controller of your personal information. If you have any questions or concerns, you may contact me through my email: beccaembroidery@gmail.com