1. Introduction
Welcome to Clay de Joie. We respect your privacy and are committed to protecting your personal data. This policy explains how we collect, use, and handle your information when you visit our website or purchase our polymer clay tools and cutters.
As a UK-based business selling exclusively within the UK, we process your data in accordance with the UK General Data Protection Regulation (UK GDPR).
2. The Data We Collect
To fulfill your order and provide a great service, we collect the following information:
- Identity Data: Your first and last name.
- Contact Data: Your shipping address, billing address, and email address.
- Transaction Data: Details about the specific cutters and tools you have purchased from us.
- Technical Data: Your IP address and browser type (usually collected automatically via cookies when you browse the site).
3. How We Use Your Data (and our Lawful Basis)
Under UK GDPR, we must have a valid “lawful basis” for using your data. We use your information for the following reasons:
- To Fulfill Our Contract with You: We use your Identity, Contact, and Transaction data to print, pack, and post your order.
- To Comply with Legal Obligations: We keep records of sales to comply with HMRC’s tax and business record-keeping requirements.
- Legitimate Interests: We use your email to send order confirmations, shipping updates, or to contact you if there is an issue with your delivery.
4. Third-Party Sharing
We will never sell your personal data. However, we do share necessary information with trusted third parties solely to run our business:
- Payment Processors: (e.g., PayPal, Stripe) to securely process your payment. We do not see, collect, or store your full credit or debit card details.
- Delivery Services: (e.g., Royal Mail, Evri) to generate shipping labels and deliver your order.
- Website/E-commerce Platform: (e.g., WordPress, WooCommerce) the platform that hosts our store and manages our orders securely.
5. Data Retention
We will hold onto your personal data for exactly 5 years from the date of your last transaction. We retain this information for this specific duration to comply with our legal and regulatory obligations to HMRC regarding business tax records. Once this 5-year period has passed, your personal data will be securely deleted or anonymized.
6. Your Legal Rights
Under the UK GDPR, you have several rights regarding your personal data. You have the right to:
- Request access to the personal data we hold about you.
- Request correction of any incomplete or inaccurate data we hold about you.
- Request erasure of your personal data (though we may have to decline this if HMRC requires us to keep the sales record).
- Object to processing of your personal data, particularly regarding direct marketing.
- Request restriction of processing of your personal data.
If you wish to exercise any of these rights, please contact us using the email address: dejoieclay@gmail.com