Crafty Cats are committed to being responsible and transparent about the information we collect from you, why we collect it, where we get it from, how it is used, and how it is shared.
Data protection
The General Data Protection Regulation (GDPR) was created to protect your ‘personal data’, which is defined as “any information which is related to an identified or identifiable natural person” and was brought into UK law on 25 May 2018 and sits alongside the Data Protection Act 2018, which is an update and replacement for the Data Protection Act 1998.
Under Article 6, our legal basis for processing personal information is that it is in our legitimate business interests to do so. This means we collect your information in order to provide you with the product(s) you have ordered.
We take all reasonable care to prevent any unauthorised access to your personal data and only process it where required to conduct our services. Please see below for a breakdown of our privacy notice.
If you require any further information, please do not hesitate to contact us using the details at the bottom of this page.
Collection of data
All of the data we have access to comes from you, or where it is publicly available. None of it is obtained against your will or without your knowledge. As a valued customer, we only hold contact information about you in order to fulfil orders that you have placed with us.
Any emails sent by Crafty Cats or any authorised third parties will only be in connection with the provision of agreed services or products. You will only be contacted for marketing purposes by Crafty Cats if you have requested to be.
Storage and use of data
At Crafty Cats we go to great lengths to protect your information and do everything we can to ensure that it is stored and processed securely and only as far as it is necessary to provide the high quality products and services that you expect from us.
Some of the security measures we operate as standard include, but are not limited to: password protection, encryption, physical locks, CCTV.
Data sharing
Crafty Cats only share your information with third parties that provide us with support services, each of which assist us in one way or another in providing the products you wish to purchase. Examples of these external parties are online marketplaces and website management.
Third parties
All third parties are bound by a contractual agreement to process your information within data protection guidelines and we will not sell, share or rent your personal information to any third party or use your email address for unsolicited mail. All contact we have with you will be in relation to the products you have purchased from us and can be stopped at any time.
Changes to our privacy notice
We keep our privacy notice under regular review and we will place any updates on this web page. This privacy policy was last updated on 15 May 2020.
Contact details
Julie Snushall, Owner, Crafty Cats Jewellery, Julie@craftycatsjewellery.co.uk
Know your rights
The Data Protection Act 2018 provides you, as an individual, with the following rights:
- The right to be informed: means that we have to be transparent about how and why we use your personal information.
- The right of access: you may access any of the personal information that we hold on you and be informed as to why we require it.
- The right to rectification: if any of the information we have on you is inaccurate or incomplete, we must modify it.
- The right to erasure: also known as ‘the right to be forgotten’ means you can request to have your information deleted or removed where we have no reason to keep it. In some instances, we have to keep a certain amount of information in case of auditing.
- The right to restrict processing: you can prevent us from processing your data, but we may continue to store it.
- The right to data portability: you can ask us to provide you with any data we hold on you in a ‘structured, commonly used and machine-readable format’.
- The right to object: you can object to direct marketing or processing for certain research and statistical purposes. Ours are only ever internal and we never share or sell your information for marketing purposes.
- Rights in relation to automated decision making and profiling: at Crafty Cats, we pride ourselves on ‘the human touch’ and do not use any automated software when dealing with our valued customers.
As well as these, you have the right to complain to a supervisory authority, in our case, the ICO (Information Commissioner’s Office), if you think we are handling any of your information in a way that threatens any of your rights.
If you would like more information about your rights and how you can invoke them, contact us at julie@craftycatsjewellery.co.uk or you can access the ICO’s guide here.
Information security
Crafty Cats is committed to protecting the rights of individuals’ privacy with regard to the processing of personal data, and the security of said data. The storage and processing of personal information will be in accordance with the Data Protection Act 2018. It is in our legitimate business interest to process all of the information we collect and store, and Crafty Cats adopt all necessary measures to ensure the protection of all information.
Key information about security at Crafty Cats
- All mobile devices shall be password, PIN, or biometrically protected, as well as encrypted and programmed with remote wiping facilities
- All office computers will be password protected, with individual employee logins
- All documents containing personal information on computers will be stored in password protected folders
- Access to the company’s customer database is password protected with individual employee logins
- All third parties will enter into agreements involving accessing, processing, communicating or managing personal information provided directly by, or indirectly through, Crafty Cats
- The building is locked and alarmed and CCTV monitors entry to the building
IT and cyber security
- Crafty Cats ensures the protection of information on networks and that any supporting infrastructure is suitably protected
- All portable devices shall be password protected, encrypted and enabled with remote wiping software to ensure security of equipment off-site
- Networks shall be adequately managed and controlled to protect from threats and to maintain security for the systems and applications using the network, including information in transit
- Crafty Cats endeavours to protect all electronic personal data by ensuring that anti-virus, spyware and system protection software is monitored closely and updated regularly
To request a list of all our third party suppliers, please email julie@craftycatsjewellery.co.uk