Information I collect & why
White Stitch Lane takes privacy seriously and will only use your personal information to complete your transaction and to provide the products you have requested. Data will be adequate, relevant and limited to fulfilling a specific purpose. i.e. to fulfil your order, to settle disputes, or to provide customer services. Personal data collected includes, but not limited to; name, email address, postal address, payment information.
Personal Data shall be processed lawfully, fairly and in a transparent manner. Personal data is collected for specified, explicit, legitimate purposes, and not further processed in a manner that is incompatible with those purposes.
I use a number of legal bases to collect, use and process personal data. Including Etsy, Instagram, Facebook and Mail Chimp. I will only use your data for marketing purposes, such as by signing up for my mailing list, when you have provided your affirmative consent, which you may revoke at any time.
Compliance with laws. I may collect, use, retain, and share your information if I have a good faith belief that it is reasonably necessary to: (a) respond to legal process or to government requests; (b) enforce my agreements, terms and policies; (c) prevent, investigate, and address fraud and other illegal activity, security, or technical issues; or (d) protect the rights, property, and safety of my customers, or others.
I will ensure appropriate security of personal data, including protection against unlawful processing and accidental loss, using appropriate technical software.
Access. You have the right to access and receive a copy of the personal information I hold about you by contacting me using the contact information below.
Change, restrict, delete. You may also have rights to change, restrict my use of, or delete your personal information. Absent exceptional circumstances (like where I am required to store data for legal reasons) I will generally delete your personal information upon request.
Object. You can object to (i) my processing of some of your information based on my legitimate interests and (ii) receiving marketing messages from me after providing your express consent to receive them. In such cases, I will delete your personal information unless I have compelling and legitimate grounds to continue using that information or if it is needed for legal reasons.
Complain. If you reside in the EU and wish to raise a concern about my use of your information (and without prejudice to any other rights you may have), you have the right to do so with your local data protection authority.
How to Contact Me
For purposes of EU data protection law, I, Helen White, am the data controller of your personal information. If you have any questions or concerns, you may contact me at firstname.lastname@example.org.