💬 Mighties Message: If colourful handmade creations make you smile, favourite our shop to keep up with our latest handmade arrivals. 🌈 Bringing a little more colour to everyday life.
1.0 OUR CORE BELIEFS REGARDING USER PRIVACY AND DATA PROTECTION
User privacy and data protection are fundamental rights.
We have a duty of care to everyone whose data we hold.
Data is a liability – it should only be collected and processed when absolutely necessary.
We loathe spam as much as you do!
We will never sell, rent, or otherwise distribute or make public your personal information.
2.0 RELEVANT LEGISLATION
We comply with the following national and international legislation with regards to data protection and user privacy:
UK General Data Protection Regulation (UK GDPR)
Data Protection Act 2018 (DPA 2018)
Privacy and Electronic Communications Regulations 2003 (PECR)
This policy is designed to comply with UK law and covers any data we may collect about you when you shop with us.
3.0 PERSONAL INFORMATION WE COLLECT AND WHY
When you place an order via our shop we receive only the information required to process your order (your name, delivery address, and email address).
We never receive or store your card or bank details – these are handled securely by the payment processor for each platform.
4.0 HOW WE USE THE INFORMATION
Your information is used solely to fulfil your order and communicate with you about your purchase, under the legal basis of ‘contract’.
We will not add you to a mailing list or contact you for marketing unless you have explicitly opted in.
5.0 SHARING WITH THIRD PARTIES
We will never sell or rent your personal data. To process your order and fulfil our contract with you, your information may be shared with:
Delivery providers (Royal Mail, courier services)
Your data may also be shared if required by law, regulation, or law enforcement. Please note that we are not responsible for how these third parties process your data – you can read their own privacy policies on their websites.
6.0 HOW WE SECURE, STORE, AND RETAIN DATA
We use Mightie Makers to manage orders. Your data is stored by these platforms for the duration needed to process your purchase and maintain business and financial records (typically 7 years for tax purposes).
We do not store hard copies of your data.
7.0 YOUR RIGHTS
You have the right to:
Access the personal data we hold about you
Request correction or deletion of your data
Restrict or object to certain types of processing
To exercise your rights, please email our Data Controller (see Section 9.0). We will respond within 30 calendar days free of charge, unless a request is unfounded, excessive, or repetitive.
8.0 DATA BREACHES
If a data breach occurs that affects your personal information, we will notify the relevant authorities and affected individuals within 72 hours where legally required.
If you believe your data has been compromised, you have the right to contact the Information Commissioner’s Office (ICO).
9.0 DATA CONTROLLER
Data Controller: Hayley Rennie Registered & Operating Address: 8 Rosamond Close, Sheffield, S17 4LU, United Kingdom Email:lollygaggiftshop@gmail.com
10.0 CHANGES TO THIS PRIVACY POLICY
We may update this privacy policy from time to time to reflect changes in legislation or business practices. We recommend checking this page periodically for the latest version.
