Privacy policy.

This Privacy Policy describes how and when I collect, use, and share information when you purchase an item from me, contact me, or otherwise use my services. This Privacy Policy does not apply to the practices of third parties that I do not own or control.

Why I need your information and how I use it I rely on a number of legal bases to collect, use, and share your information, including: as needed to provide my services, such as when I use your information to fulfil your order, to settle disputes, or to provide customer support; when you have provided your affirmative consent, which you may revoke at any time, such as by signing up for my mailing list; if necessary to comply with a legal obligation or court order or in connection with a legal claim, such as retaining information about your purchases if required by tax law; and as necessary for the purpose of my legitimate interests, if those legitimate interests are not overridden by your rights or interests, such as providing and improving my services. I use your information to provide the services you requested and in my legitimate interest to improve my services.

Information sharing

Information about my customers is important to my business. I share your personal information for very limited reasons and in limited circumstances, as follows:

Etsy. Where products are sold via my Etsy shop, I share information with Etsy as necessary to provide you my services and comply with my obligations under both the Etsy Seller Policy and Etsy Terms of Use.

Service providers. I engage certain trusted third parties to perform functions and provide services to my shop, such as delivery companies. I will share your personal information with these third parties, but only to the extent necessary to perform these services.

Business transfers. If I sell or merge my business, I may disclose your information as part of that transaction, only to the extent permitted by law.

Compliance with laws. I may collect, use, retain, and share your information if I have a good faith belief that it is reasonably necessary to: (a) respond to legal process or to government requests; (b) enforce my agreements, terms and policies; (c) prevent, investigate, and address fraud and other illegal activity, security, or technical issues; or (d) protect the rights, property, and safety of my customers, or others.

Data Retention I retain your personal information only for as long as necessary to provide you with my services and as described in my Privacy Policy. However, I may also be required to retain this information to comply with my legal and regulatory obligations, to resolve disputes, and to enforce my agreements. I generally keep your data for the following time period: 4 years.

Your rights

If you reside in the EU you have certain rights in relation to your personal information, including rights to access, change, delete, object or complain about the information I hold. For the purposes of EU data law I, Hannah Cleaton-Roberts am the data controller of your personal information. You may contact me at hannah@peckhamcloth.co.uk.