Effective Date: 1st July 2025
1. Who We Are
We are Caroline Crewe Designs, an online shop specialising in bespoke handmade items for people with dementia. Our website address is www.carolinecrewedesigns.co.uk. We are committed to protecting your personal data and privacy.
If you have any questions, you can contact us at:
📍 Business Address Briarfield Road, Manchester M19 1BJ
📧 Email enquiries@carolinecrewedesigns.co.uk
2. What Data We Collect & Why
We may collect personal data when you interact with our website. This includes:
- Account Information – If you create an account, we store details such as your name, email, billing/shipping address, and order history.
- Transaction Data – Payment details processed via third-party providers (like Stripe, PayPal) are not stored on our site.
- Communication Data – If you contact us via email or forms, we keep records to respond effectively.
- Website Usage Data – Cookies and analytics tools may track interactions to improve your shopping experience.
3. Legal Basis for Processing
Under UK GDPR, we process data based on legitimate interest, contractual necessity, and consent when applicable. You have the right to withdraw consent at any time.
4. Cookies & Tracking
We may use cookies to enhance your experience. By continuing to browse, you accept their use.
However, you can manage cookie preferences via your browser settings. See our [Cookie Policy] for more details.
5. Who We Share Your Data With
We may share necessary data with trusted third parties:
🔹 Payment Providers – PayPal, Stripe, etc. for secure transactions.
🔹 Delivery Partners – Couriers like Royal Mail to fulfill orders.
🔹 Analytics & Marketing Tools – Google Analytics, Meta, etc. (only if you opt in).
🔹 Fraud Prevention Services – To ensure secure purchases.
We never sell your data.
6. Data Retention
We keep your data only as long as necessary:
- Account & order details: 6 years (for tax & legal compliance).
- Comments & messages: Indefinitely, unless deletion is requested.
7. Your Rights Over Your Data
As a UK resident, you have the right to:
✅ Access your personal data – Request a copy of the information we hold.
✅ Correct errors – If any data is inaccurate, we’ll update it.
✅ Request deletion – We’ll erase data unless required for legal reasons.
✅ Object to processing – For marketing or analytics, you can opt out.
To exercise these rights, email enquiries@carolinecrewedesigns.co.uk.
8. Data Breach & Security Measures
We take security seriously. If we experience a data breach, we will notify the ICO (Information Commissioner’s Office) within 72 hours and affected users as required.
9. Changes to This Policy
We may update this privacy policy periodically to comply with regulations or improve clarity. Any significant changes will be communicated via email or website updates.
📅 Last Updated: 1st July 2025.