Privacy Policy
Who we are
This website is operated by Nicola Davis Crafts.
Website address: https://www.nicoladaviscrafts.co.uk/
For the purposes of UK and EU data protection law, Nicola Davis is the data controller of your personal information.
What Personal Data We Collect and Why We Collect It
Contact Forms, Email & Phone
If you contact us through the website form, by email, by phone, via social media, competitions, workshops, or direct messages, we collect the personal information you choose to provide. This may include:
- Name
- Email address
- Phone number
- Billing and shipping address
- Payment-related information
- Order details
- Messages or custom order details
We use this information solely to:
- Respond to your enquiries
- Process and dispatch orders
- Provide the services or products you request
- Communicate regarding workshops, competitions, or custom orders
We do not use your information for marketing purposes without your explicit consent.
Orders & Payments
When you purchase an item, we collect personal information necessary to fulfil your order, including your name, billing/shipping address, email address, and order details.
- Card payment details are not stored by us
- Payments are processed securely by third-party payment processors specialising in secure online transactions
We may disclose information to credit reference agencies or fraud prevention agencies if required by law.
Email Marketing
Email subscriptions are captured through a third-party provider (such as MailChimp) to allow us to communicate with you and share updates such as new products or services.
- Your consent is always obtained before email marketing
- You can unsubscribe at any time
Workshops & Events
When booking workshops, we may collect additional information such as your mobile number to manage bookings and communicate relevant information.
Server & Security Logs
Like most websites, our servers automatically collect technical information, including:
- IP address
- Browser type
- Operating system
- Date and time of visits
This data is used for security, performance monitoring, troubleshooting, and site functionality. It is not used to personally identify visitors unless required for legal or security purposes.
Embedded Content from Other Websites
Pages on this site may include embedded content (such as videos, images, articles).
Embedded content behaves in the same way as if you visited the other website directly. These third-party websites may:
- Collect data about you
- Use cookies
- Embed additional tracking
- Monitor your interaction with embedded content
Who We Share Your Data With
We do not sell or trade your personal information.
We may share your data only where necessary, including with:
- Delivery providers such as Royal Mail
- Payment processors
- Website hosting platforms (including Weebly and Etsy, where applicable)
- Security, performance, and fraud-prevention services
- These third parties only receive information necessary to perform their services.
Data Retention
We retain personal data only as long as necessary to provide our services and comply with legal obligations.
- Enquiry and contact form data: retained only as long as necessary
- Server and security logs: retained for a limited period
- Order records: retained for a minimum of 6 years to comply with UK tax law
After this period, data is securely deleted or destroyed.
Your Rights
You have the following rights under UK GDPR and EU GDPR:
- The right to access your personal data
- The right to request correction of inaccurate or incomplete data
- The right to request erasure of your data where it is no longer required
- The right to withdraw consent at any time
- The right to data portability
- The right to restrict processing
- The right to object to processing
- The right to lodge a complaint with the Information Commissioner’s Office (ICO)
To exercise these rights, please contact us using the details below.
Where Your Data Is Sent
Visitor traffic may be processed through security, hosting, and performance systems to protect the website and ensure reliable operation.
Contact Information
If you have any questions about this Privacy Policy or how your data is handled, please contact:
