At Crafty Monkey Ltd, we are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you interact with us through our website, www.craftymonkeypotterypainting.com, or any other means. It also outlines your rights under the General Data Protection Regulation (GDPR) and UK data protection laws.

1. Who We Are

Crafty Monkey Ltd is a pottery painting studio and craft business located at 12 Moores Walk, St. Neots, Cambs. PE19 1AG, United Kingdom. For the purposes of the GDPR, Crafty Monkey Ltd is the "data controller" of your personal information.

• Contact Email: hello@mycraftymonkey.com

• Website: www.craftymonkeypotterypainting.com

2. Information We Collect

We may collect and process the following personal information about you:

• Personal Identification Information: This includes your name, email address, postal address, phone number, and any other details you provide when you contact us, create an account, make a purchase, or sign up for our newsletter.

  
  

• Payment Information: Payment details, such as your credit/debit card information or payment method details, are collected when you make a purchase. Note that we do not store full payment card details on our servers; payments are processed by secure third-party providers.

  
  

• Technical Data: This includes your IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access our website.

  
  

• Usage Data: Information about how you use our website, products, and services, including your browsing actions and patterns.

  
  

• Marketing and Communications Data: Your preferences in receiving marketing from us and your communication preferences.

  
  

3. How We Use Your Information

We use your personal information for the following purposes:

• To Provide Our Services: Processing your orders, managing your bookings, and providing customer support.

  
  

• To Improve Our Services: Understanding how our customers use our website and services to enhance user experience and develop new features.

  
  

• To Communicate with You: Sending you important updates about your orders, changes to our services, or other relevant communications.

  
  

• For Marketing Purposes: With your consent, we may send you newsletters, promotions, and other marketing materials that may interest you. You can opt out of marketing communications at any time by clicking the "unsubscribe" link in our emails or contacting us directly.

  
  

• To Comply with Legal Obligations: We may process your personal information to comply with applicable laws, regulations, and legal processes.

4. Legal Basis for Processing Your Information

Under GDPR, we rely on the following legal bases for processing your personal data:

• Consent: When you have provided your consent for us to process your personal data for specific purposes, such as marketing communications.

  
  

• Contractual Necessity: Processing necessary to perform a contract with you, such as fulfilling an order.

  
  

• Legal Obligation: Processing necessary to comply with a legal obligation, such as retaining records for tax purposes.

  
  

• Legitimate Interests: Processing based on our legitimate interests in conducting and managing our business, provided these interests do not override your rights and freedoms.

  
  

5. Sharing Your Information

We do not sell, trade, or rent your personal information to third parties. However, we may share your data with trusted third parties for the following purposes:

• Service Providers: We may share your information with service providers who assist us with payment processing, order fulfillment, website hosting, email delivery, and other services necessary for our business operations.

  
  

• Legal Compliance: We may disclose your personal information if required by law, such as in response to a court order or legal process.

  
  

• Business Transfers: In the event of a merger, acquisition, or sale of all or part of our business, your personal information may be transferred to the new owners.

  
  

6. Data Security

We take the security of your personal information seriously and have implemented appropriate technical and organisational measures to protect it against unauthorised access, loss, or misuse. These measures include encrypted connections, secure servers, and regular security assessments.

Despite our efforts, please note that no method of data transmission or storage is 100% secure. We cannot guarantee the absolute security of your personal information, and you should take steps to protect your information when using the internet.

7. Data Retention

We will retain your personal information only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

When your information is no longer required, we will securely delete or anonymise it.

8. Your Rights

Under GDPR, you have the following rights regarding your personal information:

• Right to Access: You have the right to request access to the personal information we hold about you.

  
  

• Right to Rectification: You have the right to request that we correct any inaccuracies in your personal data.

  
  

• Right to Erasure: You have the right to request that we delete your personal data under certain conditions.

  
  

• Right to Restrict Processing: You have the right to request that we limit the processing of your personal data under certain circumstances.

  
  

• Right to Data Portability: You have the right to request the transfer of your personal data to another organisation or directly to you, where technically feasible.

  
  

• Right to Object: You have the right to object to our processing of your personal data in certain situations, including where we process your data based on legitimate interests or for direct marketing purposes.

  
  

• Right to Withdraw Consent: Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time.

  
  

To exercise any of these rights, please contact us at hello@mycraftymonkey.com. We will respond to your request within one month, as required by law.

9. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience, analyse website traffic, and personalise content. For detailed information about the cookies we use and how to manage your preferences, please see our Cookie Policy.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these websites. We encourage you to read the privacy policies of any third-party sites you visit.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. Any changes will be posted on this page, and the "Effective Date" at the bottom of the policy will be updated. We encourage you to review this Privacy Policy periodically.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or how we handle your personal data, please contact us.