PRIVACY POLICY

This Privacy Policy does not apply to the practices of third parties that I do not own or control, including Stripe, PayPal, Etsy or any third party services or social media links I use or you access through my site.

This Privacy Policy describes how and when I collect, use, and share information when you use my site, purchase something from my shop, contact me, or otherwise use my services through https://www.hannahadamsdesigns.co.uk or its related sites and services. This means that I, Hannah Adams, am termed a data controller under the terms of data protection legislation.

 

DEFINITIONS

  • Personal Data – refers to any and all data that relates to an identifiable person who can be directly or indirectly identified from that data. In this case, it means personal data that you give to Us via Our Site. This definition shall, where applicable, incorporate the definitions provided in the EU Regulation 2016/679 – the General Data Protection Regulation (“GDPR”)
  • Order Data/Order Details/Payment Details – refers to any and all data given when placing an order in my shop that relates to an identifiable person who can be directly or indirectly identified from that data
  • Site – refers to hannahadamsdesigns.co.uk
  • Shop – refers to hannahadamsdesigns.co.uk/shop
  • I/My/Me – refers to Hannah Adams, the owner of Hannah Adams Designs
  • You/Your – refers to the customer and site visitor

 

YOUR RIGHTS

As a data subject, you have the following rights under the GDPR, which this Policy and my use of personal data have been designed to uphold:

  • The right to be informed about my collection and use of personal data;
  • The right of access to the personal data I hold about you;
  • The right to rectification if any personal data I hold about you is inaccurate or incomplete (please contact me using the details at the end of this policy);
  • The right to be forgotten – i.e. the right to ask me to delete any personal data I hold about you. Please contact me using the details at the end of this policy to request this;
  • The right to restrict (i.e. prevent) the processing of your personal data;
  • The right to data portability (obtaining a copy of your personal data to re-use with another service or organisation);
  • The right to withdraw consent and object to me using your personal data for particular purposes (although if you do so, it does not mean that anything I have done with your personal data with your consent up to that point is unlawful); 

If you have any cause for complaint about my use of your personal data, please contact me using the details provided below and I will do my best to solve the problem for you. If I am unable to help, you also have the right to lodge a complaint with the UK’s supervisory authority, the Information Commissioner’s Office.
For further information about your rights, please contact the Information Commissioner’s Office or your local Citizens Advice Bureau.

 

COOKIES

We use the following browser cookies to allow us to process online orders through our shop correctly:

wp_woocommerce_session_
This cookie contains a unique code for each customer so that it knows where to find the shopping basket data in the database for each customer. No personal information is stored within this cookie and it will automatically expire after 48 hours.

woocommerce_items_in_cart and woocommerce_cart_hash
These cookies contain information about the shopping basket as a whole and helps WooCommerce know when the cart data changes. No personal information is stored within this cookie and it will automatically expire when the browser session ends (session cookies).

__stripe_sid and __stripe_mid
These cookies are assigned by our third party payment processor Stripe, and assist with the payment process. No personal information is stored within these cookies. __stripe_sid will expire when the browser sends and __stripe_mid is retained for 1 year to help with fraud detection and prevention. For more information, please visit the Stripe cookie policy. 

As with all cookies, if you are concerned in any way about the retention of cookies in your browser, you can completely clear your browser history including the removal of all cookies by following the instructions found on the pages returned by searching Google for ‘How to delete cookies‘.

 

WHAT DATA DO I COLLECT?

I may collect some or all of the following personal and non-personal data:

  • Your name
  • Your business/company name
  • Your contact information such as email addresses and telephone numbers
  • Your business/postal address
  • Your demographic information such as post code
  • Your IP address
  • Your web browser type and version
  • Your operating system
  • Information relating to orders placed through my ordering system such as image references, products ordered, prices and special requirements.
  • Images relating to the building or house you wish to use for any bespoke/commissioned designs
  • Any business details pertinent to any branding/logo commissions

Should you find that any information I hold is not correct, please contact me and I’ll change it for you.

 

HOW YOUR DATA IS USED

All personal data is processed and stored securely, for no longer than is necessary in light of the reason(s) for which it was first collected. I will comply with my obligations and safeguard your rights under the GDPR at all times.
My use of your personal data will always have a lawful basis, either because it is necessary for my performance of a contract with you, because you have consented to my use of your personal data (e.g. by subscribing to emails), or because it is in my legitimate interests. Specifically, I may use your data for the following purposes:

  • Supplying my products and services to you – to fulfill my contract with you
  • Delivering your order – to fulfill my contract with you
  • Sending service emails (e.g. order updates and dispatch updates) – to fulfill my contract with you
  • Receiving payments and allowing refunds – to fulfill my contract with you
  • Personalising and tailoring my products and services for you – to fulfill my contract with you
  • Replying to emails from you and other customer service support – to fulfill my contract with you
  • Prevent fraud – to help keep you and me safe
  • Understand what customers like – to improve products in the future
  • Supplying you with emails that you have opted into (you may unsubscribe or opt-out at any time by following the unsubscribe links provided in the footer of the email);
  • To adhere to all relevant UK regulations and laws

I will not use your information for any other purposes unless I am required to do so by law, in connection with any legal proceedings, or in order to establish, exercise or defend my legal rights.

Where I have relied on legitimate interests to process your personal data, you may contact me to obtain more information.

You have the right to withdraw your consent to me using your personal data at any time, and to request that I delete it.

I do not keep your personal data for any longer than is necessary in light of the reason(s) for which it was first collected. Data relating to purchases and orders will therefore be retained for a minimum of seven years to allow me to maintain accurate historical records of transactions through my website and ordering systems.

 

THE LEGAL BASES

The law on data protection sets out a number of reasons for which a company may collect and process your personal data including:

  • Consent – for example, where you have ticked a box to receive emails
  • Contractual obligations – for example, where your data is required to fulfil a contract with you
  • Legal compliance – for example, where the law requires it
  • Legitimate interest – where I require your data to pursue legitimate interests in a way which might reasonably be expected as part of running my business and which does not impact your rights, freedoms or interests

 

BESPOKE DESIGNS

When ordering a bespoke design for a building commission, I may need a photo of the building or house to create the design. The photos you provide will be stored for 2 weeks after payment has been received, then will be deleted. The design itself will be kept indefinitely, in case you wish to order another copy. Your order data will be held indefinitely or until you wish for me to delete it.

I hold the copyrights to use the designs for marketing purposes, but I will always ask your permission before using them and the designs will only include example information (for example, ‘The Smith Family, The Avenue 2020’) , they will never include real information.

I will never share the details of your bespoke order with any third party, unless it is completely necessary to fulfilling your order.

 

BRANDING CONFIDENTIALITY

When working on a commercial branding and/or packaging commission, I will never share the personal data of your business. The exception to this is when I have to contact third parties in order to supply products to you on my behalf. Whenever this occurs, I will always inform you of who the third party company is and what I intend to enlist the third party company for.

I will share only the final designs and mockups for marketing purposes after the final payment and only with your permission.

Any data relating to commercial branding and/or packaging commissions, purchases and orders will be retained for a minimum of seven years to allow me to maintain accurate historical records of transactions through my website and ordering systems.

 

STORING YOUR DATA

I only keep your personal data for as long as I need to in order to use it and/or for as long as I have your permission to keep it.

I personally do not hold any payment details, as this is done externally through Stripe or PayPal Payments; however, I do hold basic personal and delivery details in order to carry out your order and keep the site functioning for you. 

Some or all of your data may be stored outside of the European Economic Area (“the EEA”) (The EEA consists of all EU member states, plus Norway, Iceland, and Liechtenstein). You are deemed to accept and agree to this by using my site and submitting information. If I do store data outside the EEA, I will take all reasonable steps to ensure that your data is treated as safely and securely as it would be within the UK and under the GDPR.

Where I use providers based in the United States (like Google), data may be transferred to them if they are part of the EU-US Privacy Shield, which requires them to provide similar protection to personal data shared between the EU and the US.

Data security is very important to me, and to protect your data I have taken suitable measures to safeguard and secure data collected through my site.

 

SHARING DATA

I do not sell any personal information to any third parties, but may sometimes contract with third parties to supply products and services to you on my behalf. These may include printing manufacturers (e.g. InstantPrint), payment processing (e.g. Stripe Payments) and delivery of goods (e.g. Royal Mail). In some cases, the third parties may require access to some or all of your data. Where any of your data is required for such a purpose, I will take all reasonable steps to ensure that your data will be handled safely, securely, and in accordance with your rights, my obligations, and the obligations of the third party under the law.

I may sometimes use third party data processors that are located outside of the European Economic Area (“the EEA”) (The EEA consists of all EU member states, plus Norway, Iceland, and Liechtenstein). Where I transfer any personal data outside the EEA, I will take all reasonable steps to ensure that your data is treated as safely and securely as it would be within the UK and under the GDPR including:

In certain circumstances, I may be legally required to share certain data held by me, which may include your personal data, for example, where I am involved in legal proceedings, where I am complying with legal requirements, a court order, or a governmental authority.

 

YOUR RIGHT TO WITHOLD INFORMATION

You may be able to use my site without providing any data at all. However, to use my site and and complete any order, you will be required to submit or allow for the collection of certain data.

 

ACCESSING YOUR DATA

You have the right to ask for a copy of any of your personal data held by me (where such data is held). Under the GDPR, no fee is payable and I will provide any and all information in response to your request free of charge. Please contact me using the contact details below.

 

CHANGES IN PRIVACY POLICY

I may change this Privacy Policy from time to time (for example, if the law changes). Any changes will be immediately posted on my site and you will be deemed to have accepted the terms of the Privacy Policy on your first use of my site following the alterations. I recommend that you check this page regularly to keep up-to-date.

 

CONTACT

If you have any questions about my site or this Privacy Policy, please contact me by email at hello@hannahadamsdesigns.co.uk

Instagram
PRIVACY POLICY
COPYRIGHT HANNAH ADAMS 2024, ALL RIGHTS RESERVED.