PRIVACY AND COOKIE POLICY

We take great care to protect and preserve the privacy of all visitors to our website. Unless it is expressly provided to us, we do not collect personal data from any visitor. We do not sell, share or otherwise provide personal data to third parties in any way. We do not send you communications unless you give us permission to do so.

Anonymous aggregate information relating to site usage may be collected to evaluate the performance of the website. This does not include any personally identifiable information.

We have a legal duty under the Data Protection Act to protect any information we collect from you. We therefore use appropriate technologies to safeguard your data, and have rigorous security standards to prevent any unauthorised access to it.

This site contains external links to other websites. This privacy policy only applies to this website. We therefore advise visitors to read the privacy statement of any site they move to, especially those which collect personal information. Craft House HQ does not accept responsibility, or liability, for the consequential actions of a user choosing to access any third party website listed.

The Craft House HQ website uses cookies, which is standard practice on most websites. Without them we cannot deliver a high quality online experience. Some cookies collect anonymous information about your visit, which we use for monitoring purposes and to help us with future developments by understanding how our visitors use our website.

By using Craft House HQ website you consent to cookies being used. If you do not consent you must disable cookies but accept that your visit will be restricted to only browsing the public pages, and certain features will not work correctly.

Provider: Google Analytics

Purpose: These cookies are used to collect information about how visitors use this website. We use the information to compile reports and to help improve the website. The cookies collect information in an anonymous form, including the number of visitors to the website, where visitors have come from, and what pages they visited. This is a performance cookie.

More information: Google privacy policy

A cookie is a text file stored on your computer which contains information that can be used to track your movement between pages on a website. Without them, every page you visit would behave as if it was your first time on the website and not take into consideration any actions on previous pages. Cookies fall into four categories:

• Strictly necessary
• Performance
• Functionality
• Targeting/Advertising

Craft House HQ uses strictly necessary and performance cookies.

You can choose to disable cookies in your browser options. Below are instructions on how to do this in the most popular browsers.

Microsoft Internet Explorer

• Click ‘Tools’ and then ‘Internet Options’ (If you don’t see ‘Tools’, press the ‘Alt’ key on your keyboard and it will show)
• Click on the ‘Privacy’ tab
• Select the appropriate setting

Mozilla Firefox

• Click ‘Tools’ and then ‘Options’ (If you don’t see ‘Tools’, press the ‘Alt’ key on your keyboard and it will show; on a Mac you need to click ‘Firefox’ and then ‘Preferences’)
• Click on the ‘Privacy’ tab
• Next to ‘Firefox will:’ choose ‘use custom settings for history’
• Select the appropriate setting

Safari

• Click ‘Edit’ and then ‘Preferences’ (If you don’t see ‘Edit’, press the ‘Alt’ key on your keyboard and it will show; on a Mac you need to click ‘Safari’ and then ‘Preferences’)
• Click on the ‘Privacy’ tab
• Select the appropriate setting
• Google Chrome
• In the address bar type: chrome://chrome/settings/content
• Select the appropriate setting

Microsoft Edge

• Press the three dot ‘More Actions’ button
• Select Settings and then Advanced Settings at the bottom of the page
• In the dropdown menu for Cookies select preferred setting
• 
  

WHO WE ARE?

This privacy policy relates to Craft House HQ.

Craft House HQ (“We/us”) treat the privacy of our customers and website users very seriously and we take appropriate security measures to safeguard your privacy. This policy explains how we protect and manage any personal data you share with us and that we hold about you, including how we collect, process, protect and share data. This privacy policy has been written to comply with the new privacy laws better known as General Data Protection Regulation (GDPR).

*Personal data means any information that may be used to identify a living individual, including, but not limited to Company name, a first and last name, a home or other physical address and an email address or other contact information, whether at work or at home.

We may collect your personal information directly from you, or from another source, including: -

Information provided by you
You may provide us with personal data either via email, via an online application or over the telephone, as well on show enquiry forms and business card exchange. This includes name, trading details, contact numbers, email address and may include bank details. We use this information in order to manage and administer your financial transactions with us and for quotation purposes and marketing.

We may also keep information contained in any correspondence you may have with us by post or by email.

The lawful basis for us holding and processing your personal data may be based on one or more of the following: -

• You have given us consent to send you information about products and services offered by us and our group companies;
• It is necessary to provide the quote or product or service you have requested, e.g. if you wish to purchase goods from us, we will need to take details of some personal information (for example details of your name, address, date of birth, bank details);
• If we have a legal or regulatory obligation to process your personal data for example, if we updated our Terms and Conditions, we would be obliged to send you information regarding this change;
• If we have legitimate interests for holding your personal data.
• 
  

A legitimate interest is established when we have a business or commercial reason to use your information and your rights and interests do not outweigh this.

What do we use your information for?

• To ensure compliance with business policies such as, security or internet use.
• Operational reasons, such as improving efficiency, training and the standard of our products/services;
• To ensure commercially sensitive information is kept confidential;
• To collate statistical information in relation to our business e.g – number of customers;
• To update our customer records and; internal record keeping;
• To ensure safe working practices, staff administration and assessments;
• To market our services.

Our reasons for using your personal information

• To perform a contract or to provide a product or service to you;
• To ensure we are following our own internal procedures to ensure we deliver the best service to you;
• To ensure we deliver services to you in the most efficient way;
• To protect your commercially valuable information;
• To comply with our legal and regulatory obligations;
• To ensure we can keep in touch with our customers;
• To comply with our legal and regulatory obligations to manage our employees;
• To promote our business to past, existing and future customers;

We will only ever process special categories of your personal data with your explicit consent and if we feel it is necessary to do so.
If you do not wish us to collect and use your personal information in these ways, it could mean that we are unable to deliver the products and services to you.

Information we collect from other sources

We only obtain information from third parties if this is permitted by law. We may also access other sources of information relating to you from public sources, for example, to verify your identity. This information (including your name, address, email address etc.), as relevant to us, will only be obtained from reputable third-party companies that operate in accordance with the GDPR. You will already have submitted your personal data to these companies and specifically given permission to allow them to pass this information to other companies that provide similar or complementary products and services to those we offer.

How we use your personal data

We will only use your personal data to the extent that it is necessary, fair and lawful to do so. We will only use that information to the extent it is required. We will take reasonable steps to protect your personal data, including any financial details, in a way which meets the requirements of the GDPR. concerning data protection.

Keeping your data secure

We take your privacy seriously and have put steps in place to keep your data secure. We use the following measures to safeguard your personal data:

• Storing all forms of your personal data in a secure environment;
• Providing staff training on the importance of keeping your data safe;

These steps help minimise the risk of your personal information being accidentally lost or used or accessed in an unauthorised way.

Furthermore, we and all our staff are required to respect the personal data and privacy of others. We therefore have a policies and procedures in place to deal with any suspected data breach so that we can quickly act to minimise any potential damage caused.

We will keep information about you confidential and we will from time to time share your personal data (to the extent required only) for the purposes of audit and compliance monitoring. We will only disclose your information with third parties with your express consent when it is required to fulfil your requirements. We may also disclose information to law enforcement agencies or regulatory bodies for the purposes of crime prevention and detection.

We will only retain your personal data for as long as reasonably necessary considering the length of time we need to perform our services or meet your requirements. We will also retain your data for as long as we may be required for us to meet any legal, statutory and regulatory obligations.

We will not retain your data for longer than reasonably necessary. These reasons can vary from one piece of information to the next. In all cases our need to use your personal information will be reassessed on a regular basis and information which is no longer required will be disposed of securely.

When data held in accordance with this policy is destroyed, it must be destroyed securely in accordance with best practice at the time of destruction.

Information about third parties
Information we process may also include information about third parties such as your employees whose details you supply to us. If you provide us with information on behalf of someone else, you confirm that the other person has agreed that you can:
give consent on his or her behalf to the processing of his or her personal data;
receive on his or her behalf data protection notices and;
give consent to the processing of his or her potentially sensitive data.

We process information about you for the following reasons:

To provide services to you; to undertake analysis of purchasing preferences; marketing purposes; to improve our customer service; to provide you with feedback; analysing customer feedback; to deal with complaints; tracking website activity; to contact customers if products or services become unavailable; to improve your experience on our website; to personalise communication with you; compliance with legal, regulatory and corporate governance obligations and good practice and; gathering information as part of investigations by regulatory bodies or in connection with legal proceedings or requests.

We gather information from you, from our website and from other systems such as, our computer networks and connections; our email; internet facilities; our telephones and voicemail.

Our site uses cookies to distinguish you from other site users. This provides you with a good experience when you browse our site. When you use our website, we may gather information about you through Internet access logs, cookies and other technical means. ‘Cookies’ are text files on your computer to collect Internet log information and user behaviour information. They track website usage and monitor website activity. Most web browsers (Firefox, Google Chrome, Internet Explorer, Opera and Safari) allow you to block cookies. Mobile handsets may have different setting explaining how to block cookies. Restricting cookies may impact on the functionality of our website.

Right of access
GDPR grants you (hereinafter referred to as the “data Subject”) the right to access personal data that we hold on you. This is referred to as a subject access request. We shall respond promptly and no later than one month after receiving your request unless we notify you otherwise explaining why we cannot meet your request within that timescale.

We will process the access request in line with the GDPR.

Right to rectification
You, the data subject, shall have the right to obtain from us, without undue delay, the rectification of inaccurate personal data we hold relating to you. Considering the purpose of the processing, you shall have the right to have incomplete personal data completed, including replacing that information. You should let us know what information it should be replaced with.

Right to ask us to stop contacting you with direct marketing
You can request for us to stop contacting you for direct marketing purposes at any time. If you wish to do so, you should contact us and notify us of the method (or all methods) you are unhappy with.

Right to erasure
You shall have the right to obtain from us the erasure of personal data concerning you (except where we are legally obliged to retain such information) without undue delay.

Right to restriction of processing
Subject to exemptions you shall have the right to obtain from us restriction of processing where one of the following applies:

• You do not agree that the data held relating to you is accurate and your data will be restricted until the accuracy of the data has been verified.
• The processing is unlawful, and you oppose the erasure of the personal data and instead request the restriction in its use
• We no longer need the personal data for the purpose of processing, but it is required by you for the establishment, exercise or defence of legal claims
• You have objected to the processing of your personal data pending the verification of whether there are legitimate grounds for us to override theses objections.

Notification obligation regarding rectification of erasure of personal data or restriction of processing
We shall communicate any rectification or erasure of personal data or restriction of processing as described above to each recipient to whom the personal data has been disclosed unless this proves impossible or causes excessive cost. We shall provide you with information about those recipients if you request it (subject to any data protection restrictions concerning such disclosure)

Right to data portability
You shall have the right to receive your personal data, which you have provided to us, in a structured commonly used and machine-readable format and have the right to transmit this data to another controller, without hinderance from us.

Right to object
You shall have the right to object at any time to the processing of personal data concerning you; unless this relates to processing that is necessary for the purpose of a task carried out in the public interest or an exercise of official authority vested in us. We shall no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of you, the data subject, or for the establishment, exercise or defence of legal claims.

Should you wish to exercise any of these rights, please write to us at the address below and provide us with enough information so that we can clearly identify you. We may also require some proof of identity such as, a driving licence, passport together with a recent utility bill or bank statement. This is to ensure we do not release any of your personal data to anyone other than you.

Accuracy of information
In order to provide the highest level of customer service possible, we need to keep accurate personal data about you. We take reasonable steps to ensure the accuracy of any personal data or sensitive information we obtain. We ensure that the source of any personal data or sensitive information is clear, and we carefully consider any challenges and you can help us by informing us of these changes when they occur.

This privacy policy was first published on 29 January 2021 and last updated on that date.

This privacy Policy is regularly reviewed. This is to make sure that we continue to meet the highest standards and to protect your privacy. We reserve the right, always, to update, modify or amend this Policy. We suggest that you review this Privacy Policy from time to time to ensure you are aware of any changes we may have made; however, we will not significantly change how we use information you have already given us without your prior agreement.

If you have any questions, concerns or complaints about this Privacy Policy or our handling of your personal data, you can contact us by email: 

craft-house-embroidery@outlook.com

This website is published by Craft House HQ. Unless stated otherwise the website and all the materials it contains are protected by copyright and may not be reproduced other than when downloaded and viewed for private, non-commercial purposes only. It is not to be otherwise copied, reproduced, republished, downloaded, posted, adapted, broadcast or transmitted without the prior written consent of Craft House HQ or that of the copyright owner. All other rights reserved.