CMF Designs – GDPR Privacy Notice
Please find below our GDPR Privacy Notice. This document was created in May 2018 in line with the new regulations that come into force on 25 May 2018 across Europe. If you have any questions please do not hesitate to get in touch.
Contact Forms and newsletter sign ups
If you contact us via a contact form on our website or sign up to our mail list the only information we ask for is first and last name and email address. This is so we can respond to your enquiry by email or send you our newsletter. We do not collect any special types of information or location based information.
We store the information from a contact form enquiry within our email system and on the emails we have communicated with. This contact information is only accessible by Caroline Francis and it will only be used to contact you with regards to an enquiry.
Our newsletter communications are sent using the MailChimp email system. We will send you a welcome email to confirm your sign up and then a maximum of 1 email a week. This contact information is only accessible by Caroline Francis and it will only be used to contact you with updates on CMF Designs.
The personal data we process for our newsletter is processed by MailChimp and includes your name and email address. MailChimp holds this information on a Subscriber list. Each newsletter gives the option to “unsubscribe”.
We do not use this information for any purpose other than our newsletter.
The information we use for our newsletter will be kept until you notify us that you no longer wish to receive this information or your choose the “unsubscribe” option from the newsletter.
You can email us to notify us that you no longer wish to receive the newsletter by using this email address and putting “Unsubscribe from Newsletter” in the email subject.
When you place a jewellery order we will need your name, address, email address and phone number to process your order, contact you with updates or queries if needed and to send your order. We will only use your information with regards to your order. Order information will be required for accounts and tax purposes and so we have a legal requirement to keep this for 7 years. After this time the information will be shredded.
Payments through the website are made via paypal and is encrypted by their system, we have no access to your payment information. In person we can also take card payments via paypal. Again they encrypt the details and we can not access your information. We can not take payments on card over the phone so will never ask for your details.
What are your rights?
If at any point you believe the information we process on you is incorrect you can request to see this information and have it corrected or deleted. If you wish to raise a complaint on how we have handled your personal data, you can contact us to have the matter investigated and we will respond to you within 28 days.
If you are not satisfied with our response or believe we are processing your personal data not in accordance with the law you can complain to the Information Commissioner’s Office https://ico.org.uk/