The General Data Protection Regulation (GDPR) came into effect on 25th May 2018. It created a crucial change in data protection law this page explains how I collect your data and what I do with it.

I Emily Thompson am the data-controller of your personal information as it relates to my shop.

When you place an order from me, I will receive your name, delivery address, email address and possibly a mobile or telephone contact number. I will only use these details to process and deliver your order, or deal with any queries you have related to that order.  I do not receive your payment details through sales.  All transactions are processed by Etsy & Sum Up providers and I never have access to this information.

If you send me a message using the any of the contact email buttons or forms on this site, I will receive your Name and email address.  

The only circumstances in which I will share your data are in processing your order or complying with the law. I will never use or pass on your information to third parties for marketing purposes or any other purpose, other than the circumstances listed below.
 The circumstances in which I may share your data are:
• With delivery companies to fulfil your order.
• To comply with legal or tax obligations.

​I will only retain your details for as long as necessary in order to process the transaction and I will securely store any data collected during that period. I retain personal data related to orders or customer queries for six years. After this time I will delete your data from my records.

​You have the right to know what personal data I hold about you, and to ask for that data to be changed or deleted. You also have the right to complain to the ICO if you believe there is a problem with the way I handle your data.


UK Government Guide to GDPR 
ICO Guide to Data Protection