Why we need your information and how we use it – We rely on a number of legal bases to collect, use and share your information including the following:

• As needed to contact you to advise of completed work or postage details and to settle any disputes or to provide customer support
• When you have provided your affirmative consent, which you may revoke at any time, such as asking to be added to our mailing list.
• If necessary to comply with a legal obligation, court order or relating to a legal claim and information required by tax law.
• As necessary for the purpose of our legitimate interests if these are not overridden by your rights & interests eg to provide and improve our services.

Information sharing and disclosure – We only share information with third parties as is essential to our business.  In our case this is with our accounting system provided, Xero, our accountant, red Shoes Accounting Services and our staff who will collect or deliver your equipment.

Data retention – We only retain your information for as long as is necessary to provide you with our services, we may also be required to retain the information to comply with legal & regulatory obligations or to resolve disputes.  We will therefore keep your data for 2 years after the payment of your final invoice.

Transfer of personal information outside of the EU – We do not transfer personal information outside of the EU in a direct manner, however our third party accounting system may share information on servers outside of the Eu and will therefore follow appropriate legal rules.

Your Rights – If you reside within territories including the EU covered by GDPR, you have rights in relation to your personal information as detailed below:

• Access – you have the right to access and receive a copy of the personal information I hold about you by contacting us using the contact information below.
• Change, restrict, delete – You may also have rights to change, restrict my use of or delete your personal information. Other than for legal reasons I will generally delete your personal information upon request, only keeping the minimum as required by tax laws.
• Object – You can object to our processing some of your information based on our legitimate interests or receiving marketing messages after providing your express consent to receive them. In such cases we will delete your personal information unless there are legal reasons to continue using that information.
• Complain – If you reside in the EU and wish to raise a concern about our use of your data (without prejudice to any other rights you may have), you have the right to do so with your local data protection authority.

How to contact us – For the purposes of GDPR, Carol Palmer director of Anvil Cottage Crafts, is the data controller of your personal information.  If you have any questions or concerns you may contact us at www.anvilcottagecrafts.co.uk or by post at 28 Ten Mile Bank, Littleport, Cambs CB6 1EE.