Privacy Notice

Who is collecting it?
This Privacy Notice applies to personal data collected by "Kaleidoshop Craft" in connection with the services and products we offer. References to "Kaleidoshop Craft" in this Notice means Kaleidoshop Craft, 124 Old Mill Lane, 71 1LH, Barnsley, UK.

What personal data is being collected?
Personal data means any information that can be used to identify directly or indirectly a specific individual: 
- Your name, address, e-mail address, credit card number (necessary for the correct course of the transaction), optional telephone number.
Data submission is voluntary, but without providing it will not be possible to perform the contract and the implementation of the order, including the proof of sale (receipt or VAT invoice) and shipment of products ordered in Kaleidoshop Craft.

How is your personal information collected?
After placing the order and completing the purchase form in the Kaleidoshop Craft store, on the etsy.com platform, your personal data is automatically saved on the internal server etsy.com, and then the seller Kaleidoshop Craft receives the data to fill the order and send the product to the correct address.
Kaleidoshop Craft does not collect your personal data for marketing purposes or for sale to third parties.

What purpose do we use your data for?
Kaleidoshop Craft collect, process and disclose your personal data only for specific and limited purposes. For example, only for the purpose of performing the order, to process your payments, in the case of complaints or the need for tax settlement.
Kaleidoshop Craft also process your personal data when has a legal obligation (e.g., tax or social security obligations) to perform such processing. For example, a court order or a subpoena may require us to process personal data for a particular purpose, or we may be compelled to process personal data to report suspicious transactions under the local anti-money laundering rules.

Who will it be shared with?
As a online-shop, Kaleidoshop Craft shares your personal data internally and with selected third-parties. For example, we share your personal data with third-party service providers, as well as in case of business transfers or legal disclosure.
As a online-shop, Kaleidoshop Craft shares your personal data internally and with selected third-parties in the following circumstances:
In order to properly deliver your order, Kaleidoshop Craft must provide your personal data (name, address, optional phone number) only to the company that delivers the ordered products, in this case, Royal Mail is such a company in UK.
They have access to personal data needed to perform their functions but may not use it for other purposes. Further, they must process this personal data in accordance with this Privacy Notice and as permitted by applicable data protection laws and regulations.

Legal disclosure. Kaleidoshop Craft may transfer and disclose your personal data to third-parties:
- To comply with a legal obligation;
- At the request of governmental authorities conducting an investigation.

How long do we keep your personal data for?
Kaleidoshop Craft will keep your personal data for as long as need it for the purpose it is being processed for. For example, where you make a purchase online with us Kaleidoshop Craft will keep the data related to your purchase, so we can perform the specific contract you have entered and after that, we will keep the personal data for a period which enables us to handle or respond to any complaints, queries or concerns relating to the purchase.

Kaleidoshop Craft retain the identifiable data we collect directly for targeting purposes for as little time as possible, after which we employ measures to permanently delete it.
Kaleidoshop craft reserves the right to refuse to delete customer data if their behavior is necessary for the purpose of realizing claims, or if required by applicable law.

What are your rights?
- Your rights in relation to your personal data how it is processed. - You can exercise these rights at any point. We have provided an overview of these rights below together with what this entails for you. You can exercise your rights by sending an email or submitting a request through the “Shop owner” form on website.
- The right to be informed. You have the right to be provided with clear, transparent and easily understandable information about how we use your personal data and your rights. Therefore, we’re providing you with the information in this Notice.
- The right to access and rectification. You have the right to access, correct or update your personal data at any time. We understand the importance of this and should you want to exercise your rights, please contact us.
- The right to data portability. The personal data you have provided us with is portable. This means it can be moved, copied or transmitted electronically under certain circumstances.
- The right to be forgotten. Under certain circumstances, you have right to request that we delete your data. If you wish to delete the personal data we hold about you, please let us know and we will take reasonable steps to respond to your request in accordance with legal requirements. If the personal data we collect is no longer needed for any purposes and we are not required by law to retain it, we will do what we can to delete, destroy or permanently de-identify it.
- The right to restrict processing. Under certain circumstances, you have the right to restrict the processing of your personal data.
- The right to lodge a complaint with a Supervisory Authority. You have the right to lodge a complaint directly with any local Supervisory Authority about how we process your personal data.
- The right to withdraw consent. If you have given your consent to anything we do with your personal data (i.e., we rely on consent as a legal basis for processing your personal data), you have the right to withdraw your consent at any time (although if you do so, it does not mean that anything we have done with your personal data with your consent up to that point is unlawful). You can withdraw your consent to the processing of your personal data at any time by contacting us with the details provided below.
- Rights related to automated decision-making. You have the right not to be subject to a decision which is based solely on automated processing and which produces legal or other significant effects on you. In particular, you have the right:
- to obtain human intervention;
- to express your point of view;
- to obtain an explanation of the decision reached after an assessment; and
- to challenge such a decision.
Further information and advice about your rights can be obtained from the data protection Regulator in your Country.

How to contact Kaleidoshop Craft?
If you have any questions or concerns about the Kaleidoshop Craft privacy policy or data processing or you want to make a complaint regarding a possible violation of local privacy laws, please do so by sending an email kaleidoshopcraft@gmail.com or sending a request via the shop „owner - contact”.
All such substantive contacts receive a response. If you are not satisfied with the received response, you can refer your complaint to the appropriate supervisory authority in your country.

Date of publication: 24.05.2018 r.