GDPR/Privacy Policy

I, Rachel Soley,  am the data-controller of your personal information as it relates to my shop.

​

When you place an order from me, I will receive your name, delivery address and email address. I will only use these details to process and deliver your order, or deal with any queries you have related to that order.  I do not receive your payment details.  All transactions are processed by my website provider and I never have access to this information.

If you send me a message using the contact button on this site, I will receive your username and email address.  If you join as a member, I do not have access to your account and your account password is maintained by my website provider.

​

The only circumstances in which I will share your data are in processing your order or complying with the law. I will never use or pass on your information to third parties for marketing purposes or any other purpose, other than the circumstances listed below.  I will add you to by email list so that I can send you occasional emails to notify you about shop updates.  If you wish to be removed from this  list at any time please email rachel@prettylittlemosaics.com. The circumstances in which I may share your data are:

• With delivery companies to fulfil your order.
• To comply with legal or tax obligations.

​

I will only retain your details for as long as necessary in order to process the transaction and I will securely store any data collected during that period. I retain personal data related to orders or customer queries for six years. After this time I will delete your data from my records.

​

You have the right to know what personal data I hold about you, and to ask for that data to be changed or deleted. You also have the right to complain to the ICO if you believe there is a problem with the way I handle your data.