Michelle Gregory, trading as The Loveliest Yarn Company, is committed to protecting the privacy and security of your personal information. As a small business it is our policy that we gather your information on the website with your consent for the purpose of sending you yarn and other purchases and to allow us to meet our accounting and taxation requirements. We gather your email details for marketing details only with your specific agreement.
Last updated: May 21st 2018.
We comply with the European Union General Data Privacy Directive (GDPR). This says that the personal information we hold about you must be:
- 1. Used lawfully, fairly and in a transparent way
- 2. Collected only for valid purposes that we have expected to you and not in any way that is incompatible with those purposes
- 3. Relevant to the purpose we have told you about and limited only to those purposes
- 4. Accurate and kept up to date
- 5. Kept only as long as necessary for the purposes that we have told you about
- 6. Kept Securely
SECTION 1 - WHAT DO WE DO WITH YOUR INFORMATION?
When you purchase something from our store, as part of the buying and selling process, we collect the personal information that you give us including your name, address and email address. The purpose of this is to allow us to enter into a contract to provide you with the goods you purchase on the site.
The data is used to send you your goods, provide you with any downloadable products and, on the creation of a user account, determine when you have loyalty discounts available. We also use the data in our accounting process to allow us to accurately prepare accounts and pay tax. The data is held for 6 years.
When you register for an account you have the option to add wish list options and send these to friends and family. The data entered in the wish list is not considered personal information as it does not allow you to be identified. We do not view the information in your wish list.
When you browse our store, we also automatically receive your computer’s internet protocol (IP) address in order to provide us with information that helps us learn about your browser and operating system. We also use Google Analytics to monitor how people move through the site and as part of that we receive a town / city / country location. We do not receive any details about you as an individual even if you are logged into the site at the time.
Email marketing: With your permission, we may send you emails about our store, new products and other updates. We do not opt you in to receive this so it is your choice and you may opt out at any time by contacting us at firstname.lastname@example.org.
SECTION 2 - CONSENT
How do you get my consent?
For marketing purposes we use a two stage sign up process for our mailing list using MailChimp. Your specific consent is requested during this process. Following the implementation of the European General Data Protection Regulations we will not long offer newsletter sign up at shows.
How do I withdraw my consent?
If, after you opt-in, you change your mind, you may withdraw your consent for us to contact you, for the continued collection, use or disclosure of your information, at any time, by contacting Michelle Gregory, owner and data protection manager for the Loveliest Yarn Company. You can contact her via email at email@example.com or by mail at The Loveliest Yarn Company, 20 Norfolk Road, Long Eaton, Derbyshire, NG10 2BL, United Kingdom.
SECTION 3 - DISCLOSURE
We do not share your information with third parties unless required to do so by law and in order for third parties to provide services. See Section 5.
SECTION 4 - PAYMENTS
Payments are managed using Sage Pay and PayPal and The Loveliest Yarn Company has no access to payment card details.
SECTION 5 - THIRD-PARTY SERVICES
In general, the third-party providers used by us will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us.
However, certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies in respect to the information we are required to provide to them for your purchase-related transactions.
For these providers, we recommend that you read their privacy policies so you can understand the manner in which your personal information will be handled by these providers.
In particular, remember that certain providers may be located in or have facilities that are located a different jurisdiction than either you or us. So if you elect to proceed with a transaction that involves the services of a third-party service provider, then your information may become subject to the laws of the jurisdiction(s) in which that service provider or its facilities are located.
When you click on links on our store, they may direct you away from our site. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements.
SECTION 6 - SECURITY
To protect your personal information, we take reasonable precautions and follow industry best practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed.
SECTION 7 - COOKIES
A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us.
You can prevent the setting of cookies by adjusting the settings on your browser (see your browser Help for how to do this). Be aware that disabling cookies will affect the functionality of this and many other websites that you visit. Disabling cookies will usually result in also disabling certain functionality and features of the this site.
Third Party Cookies
This site uses Google Analytics which is one of the most widespread and trusted analytics solution on the web for helping us to understand how you use the site and ways that we can improve your experience. These cookies may track things such as how long you spend on the site and the pages that you visit so we can continue to produce engaging content.
For more information on Google Analytics cookies, see the official Google Analytics page.
We also use social media buttons and/or plugins on this site that allow you to connect with your social network in various ways. For these to work the following social media sites including; Instagram, will set cookies through our site which may be used to enhance your profile on their site or contribute to the data they hold for various purposes outlined in their respective privacy policies.
SECTION 8 - AGE OF CONSENT
By using this site, you represent that you are at least the age of majority in your state or province of residence and are able to enter into binding contracts.
SECTION 9 – GOOGLE ANALYTICS
We use Google Analytics software to collect information about how you use our website. We do this to help make sure the site is meeting the needs of its users and to help us make improvements, eg improving site search.
Google Analytics stores information about:
- - the pages you visit
- - how long you spend on each page
- - how you got to the site
- - what you click on while you’re visiting the site
We don’t collect or store your personal information (eg your name or address) so this information can’t be used to identify who you are
We don’t allow Google to use or share our analytics data
If our store is acquired or merged with another company, your information may be transferred to the new owners so that we may continue to sell products to you.
SECTION 11 - Yours rights under the European Union General Data Protection Regulations
Under the GDPR you have a number of rights
- 1. A right to withdraw you consent at any time
- 2. A right to obtain confirmation from us as to whether or not we process personal data relating to you
- 3. A right to rectification where the data we hold is inaccurate or incomplete
- 4. A right to erasure (right to be forgotten)
- 5. Restriction of processing
- 6. Obligation to notify the data subject
- 7. Right to data portability
- 8. Right to object to processing
- 9. A right not to be subject to a decision evaluating personal aspects that is based on automated profiling (we do not currently, nor plan to in the future, undertake such activities
- 10. Right to request delisting of search results
To exercise these rights, please contact Michelle Gregory via the details provided in the Contact Information section of this policy.
QUESTIONS AND CONTACT INFORMATION
If you would like to: access, correct, amend or delete any personal information we have about you, register a complaint, or simply want more information contact Michelle Gregory, owner and data protection officer at The Loveliest Yarn Company. You can contact her via email at firstname.lastname@example.org or by mail to The Loveliest Yarn Company, 20 Norfolk Road, Long Eaton, Derbyshire, NG10 2BL, United Kingdom. Please also contact us if you require any detail related to any of the points mentioned above.