Privacy Policy

GDPR Compliance and Privacy Policy – Sweet Pea Dolls 

In order to comply fully with the recently introduced General Data Protection Regulations (GDPR), we have produced the following document which details what data we collect, how we use it and on what legal basis, as well as your legal rights.  

We, Sweet Pea Dolls, 48 Waterside Drive, Ditchingham, Bungay, Norfolk, NR35 2SH, act as the data controller and are registered with the ICO for the purpose of compliance with GDPR.  

• We collect the personal data you provide to us when placing your order, such as name, address, email address and contact telephone numbers, for the purpose of being able to successfully send your parcel to you. 
• We accept orders across three online platforms – our website, Etsy store and Facebook. For orders placed on our website and Etsy, you will be asked to provide the above information so that we can complete your order and meet our legal obligations to ensure the goods reach you. For orders placed on Facebook, we will collect payments through use of a PayPal payment link, at which point you will be asked to provide a shipping address.  
• If deemed necessary, we may contact you via email in order to communicate about your purchase, particularly in order to resolve any disputes or queries you have with your order. We may also send an email to reply to any incoming email sent through a form on our website.  
• Our website provider, Etsy, PayPal and Facebook have all updated their policies to comply with GDPR so please feel free to contact these companies for further information. 
• Our website uses Google Analytics to measure and analyse data about the customers who visit our website. This allows us to gain valuable insight into our customer base and target market and hopefully improve the service and products we can offer to you. Use of this technology means that Google is able to collect data such as IP addresses, operating systems, browsers and device type. Google have updated their policies to comply with GDPR and further information can be found from them. 

• Any data stored on electronic devices, is kept very secure through use of encryption or password protected accounts such as emails confirming your order. We also use accounting software from QuickBooks from which we generate invoices.  
• We keep paper records of transactions for the purposes of accounting and any legal requirements for which this information may be required to comply with the law.  
• When you access our website, information is collected and stored on secure servers. We cannot guarantee that the transmission of information through the internet is completely secure, but we will do our utmost to ensure your data is protected. 

 
How long will we keep your data for?: 

• We will retain your data for as long as you remain to be an active customer, unless you specifically ask us to delete your information. Once you cease to be an active customer, we will retain your data unless you ask us to delete your information.  
• We will only contact you if we believe that in doing so we are communicating relevant information that may be of interest to you.  
• You have the right at any time to request that we delete your personal information.
• You also have the right to request access to the data we hold about you, and we have 30 days in which to provide this information. In such cases we will; a) let you know what information we hold, b) why we are holding it, c) provide a copy of the data, d) provide information about how this data is used.   

1. We will not, at any time, share, sell or otherwise provide your personal data to any other non-authorised third party.  
2. It is kept solely for the purpose of carrying out our legitimate business interests such as fulfilling orders, contacting you about an order, providing refunds if necessary, and analysis of our customer base in order to provide a better service to you. 
3. We may in future create an email marketing service for which you will have the option to opt-in to receiving these communications. No emails of this nature will be sent to those who have not opted-in to receive them, and you may opt-out at any time. 
4. Your name and postal address will be shared with Royal Mail, purely for the purpose of facilitating delivery of your parcel. 
5. If you have subscribed to our mailing list, we may contact you via email with the provision of news and special offers. You may unsubscribe at any time.  

Knowing your rights: 

1. You may, at any time request access to the personal data we hold about you. This should be done by sending a letter to Sweet Pea Dolls, 48 Waterside Drive, Ditchingham, Bungay, NR35 2SH.  
2. You may, at any time contact us to provide updated details such as a change of address, contact information etc. We would encourage you to do this in order to minimise any chances of parcels being sent to the wrong address.  

We may at any time make changes or updates to our privacy policy, and these changes will be updated here if they occur.  

We welcome any questions you have regarding our privacy policy and will be happy to provide assistance where possible.