Privacy Policy

---

Privacy Policy

Effective Date: 27th August 2024

1. Introduction

This policy outlines the approach of Crowzee Folk ("the Company") to comply with the General Data Protection Regulation (GDPR) as applicable in the UK.  ("The Company") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (Crowzeefolk.com), use our services, or interact with us.

Here is a simple summary of information that you probably most want to know:
We store your emails but only if you sign up. The provider we use for this is Godaddy and Microsoft. 

We have extra protection for our emails on those received and those being sent.  This extra protection is provided by Godaddy.
We don't sell your email addresses to anyone else.
You can unsubscribe at anytime.
We do not have access to or store any payment data as all purchases are made either through Etsy or Amazon. They too, have very strict privacy policies.

2. Data Protection Officer (DPO)

The Company has appointed a Data Protection Officer who is responsible for overseeing data protection activities and ensuring compliance with GDPR. Please refer to section 12 for contact information.

3. Data Collected

The Company may collect and process the following types of personal data:

• Personal Identification Information: Name      and email address.
• Account Information: We only collect      Name and email address. We do not      collect any payment details as we use Etsy and Amazon for selling products      and they have their own privacy policy which are linked below. 

Amazon: https://www.amazon.co.uk/gp/help/customer/display.html?nodeId=201909010&ref_=footer_privacy

Etsy:

https://www.etsy.com/uk/legal/privacy/?ref=ftr

Our website is powered by Godaddy and all marketing emails are provided through them using Microsoft 365, links to the Godaddy privacy policy and Microsoft terms are linked below.

Godaddy:

https://www.godaddy.com/en-uk/legal/agreements/privacy-policy

Microsoft:

https://www.godaddy.com/en-uk/legal/agreements/microsoft-office-terms-of-use

• Technical Data: IP address, browser      type and version, time zone setting, browser plug-in types and versions,      operating system and platform, etc.
• Usage Data: Information about how you      use our website, products, and services.
• Marketing and Communications Data: Your      preferences in receiving marketing from us and your communication      preferences.

4. How We Use Your Information

We use the information we collect in the following ways:

• To Provide Services:  provide customer      support, etc.
• To Improve Our Services: Understand user behavior,      improve our website, develop new products and services, etc.
• Marketing and Communications: Send you newsletters,      promotional materials, and other information that may interest you.
• Legal Obligations: Comply with applicable      laws, regulations, and legal processes.

The Company will only process personal data when there is a lawful basis for doing so, which may include:

• Consent      of the data subject
• Contractual      necessity
• Legal      obligations
• Vital      interests
• Legitimate      interests pursued by the Company

5. Data Subject Rights

Data subjects have the following rights under GDPR:

• Right      to be informed
• Right      of access
• Right      to rectification
• Right      to erasure (the right to be forgotten)
• Right      to restrict processing
• Right      to data portability
• Right      to object (The right to object allows individuals to object to the      processing of their personal data for specific purposes. This means they      can request that their data no longer be processed for those purposes).
• Rights      related to automated decision making and profiling
• If you don't want us to process your data anymore (for example sending out emails and newsletters to you), please use the "unsubscribe" link at the bottom of our emails that we send.

6. Data Security

The Company is committed to ensuring the security of personal data. This includes implementing appropriate technical and organizational measures to protect against unauthorized or unlawful processing, accidental loss, destruction, or damage, We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk associated with your personal data. We are not responsible for the content or privacy and security practices and policies of third party sites or services to which links or access are provided through our website or Social Media platforms.  We encourage you to learn about third parties’ privacy and security policies before providing them with information.

7. Data Breach Notification

In the event of a data breach, the Company will notify the Information Commissioner's Office (ICO) within 72 hours of becoming aware of the breach, unless the breach is unlikely to result in a risk to the rights and freedoms of individuals.

8. Data Retention

We will retain your personal data for as long as necessary to fulfill the purposes we collected for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

9. International Data Transfers

Any transfer of personal data outside the European Economic Area (EEA) will only be done in compliance with GDPR requirements.

10. Training and Awareness

The Company will provide training to staff and contractors regarding GDPR compliance and data protection best practices.

DISCLAIMER

We are not qualified in any way to give advice to anyone. We share our personal ideas about our printable crafts and products etc.  As such the information here is intended for informative purposes only.  If you need professional advice then please seek and consult a professional.

LIMITED LIABILITY

Under no circumstances, including but not limited to negligence, will we or any of our licensors or suppliers be liable for any special or consequential damages that result from the use of, or the inability to use, the materials on the site, or any products or services provided in conformance to the site, even if advised of the possibility of such damages. 

Use the information on this site at your own risk and discretion.

11. Review and Update

This policy will be reviewed and, if necessary, updated annually or in response to changes in applicable data protection laws.

12. Contact Information

For any questions or concerns regarding this policy or the Company's data protection practices, please contact:

• Email: hello@crowzeefolk.com