PRIVACY & GDPR
 

General Data Protection Regulation (GDPR) 

The EU General Data Protection Regulation (GDPR) includes rules on giving privacy information to data subjects in Articles 12, 13 and 14. These are more detailed and specific than in the DPA (Data Protection Act) and place an emphasis on making privacy notices understandable and accessible. In The Dip Pottery, as data controllers, are expected to take ‘appropriate measures’.

To cover all these elements I have considered the following issues when planning this privacy notice:

1. What information is being collected?

2. Who is collecting it?

3. How is it collected?

4. Why is it being collected?

5. How will it be used?

6. Who will it be shared with?

7. What will be the effect of this on the individuals concerned?

8. Is the intended use likely to cause individuals to object or complain?

1. For Orders, In The Dip Pottery will collect the item(s) ordered, your name, email address, delivery address, and where necessary for international delivery, telephone numbers. For e-mail subscriptions, In The Dip Pottery will collect your name and email address.

2. This information is collected when an order is placed and/or a subscription form is filled in.

 

 

1. This information is collected through the Wix website system used for inthedippottery.co.uk and transferred to a Google Sheets document for record keeping.

2. The personal details I collect are used to process orders and deliver news emails.

3. The order details are used to produce, package, and ship your order. The e-mail details are for news updates.

4. The order details are only shared with a courier (typically Royal Mail or Parcel2Go) where necessary.

5. There should be no negative results of the sharing of this data. The couriers used are large, respected companies who should keep their data secure, and will only use the data for the purpose for which it was provided.

6. If there are any concerns, please contact me by e-mail at    www.inthedippottery.co.uk 

 I confirm my policy on GDPR is robust and its sole aim is to reassure customers that I take GDPR seriously and data will be secure. 
 

Data Security Best Practice for GDPR compliance:

• Use unique, secure passwords for websites and devices containing sensitive data.

• Password protect computers and devices with access to the data.

• Use 2 factor authentication where possible.

 

​