Druid and the Witch GDPR Compliant Privacy Policy.

Druid and the Witch is committed to complying with the latest rules and regulations regarding customer privacy and data protection. This document has been created in order to ensure Druid and the Witch's compliance with the General Data Protection Regulation (GDPR) May 2018, and to provide continued transparency to customers of Druid and the Witch in regard to the use and safe storage of personal data.
Any use of 'us', 'our' and 'we' in this notice refers to Druid and the Witch directly. Use of terms such as 'individuals', 'customers' or 'clients' refers to any person/s who have provided personal information to Druid and the Witch.
How We use Personal Information.
In order for Druid and the Witch to provide accurate quotations, the delivery of goods and online invoices, individuals must provide personal information (name, address, email etc.). There is no obligation from the customer to provide this personal information, however, with the exception of face-to-face sales, Druid and the Witch would be unable to provide it’s services without this information.
Customers maintain the right to object to the use of their personal information by Druid and the Witch. An individual may contact Druid and the Witch at any time during or post a transaction to request Druid and the Witch cease using their personal information, at which point, Druid and the Witch will A.) immediately cease all use of the personal information and dispose of any and all sensitive materials in an appropriate manner B.) provide a full and detailed explanation as to why, at that time, Druid and the Witch is unable to cease use of personal information.
Druid and the Witch offers a postal delivery service with all orders at an additional fee to the customer. Royal Mail PLC is used as a third-party company to fulfil the postage orders from Druid and the Witch, thus Druid and the Witch must provide Royal Mail PLC with certain details of a client’s personal information (name, address). The use of Royal Mail PLC is made clear to the customer prior to any order and they must consent to the personal information being passed on from Druid and the Witch to Royal Mail PLC in order to complete a transaction with Druid and the Witch.
Druid and the Witch operates with a focus on online sales. Etsy Inc., Facebook Inc. Microsoft Corporation and Twitter are all companies that provide online platforms in which a customer may contact Druid and the Witch. Should a customer contact Druid and the Witch using one these methods, Druid and the Witch may request that personal information be sent via the platform in order to complete an order/quotation. The customer may choose to use one of these methods in order to provide the required information to Druid and the Witch, doing so gives consent for both Druid and the Witch and the chosen platform, unless otherwise stated in their own terms and conditions, to view and/or use the information provided. Using one of the mentioned companies to which Druid and the Witch has an online presence to contact Druid and the Witch opens a dialogue in which the customer gives consent to receive private messages within use of the given platform. All conversations between Druid and the Witch and the customer that may involve the use of personal information are done so in private. None of the information provided in these private messages will ever be shared publicly or with a third party, excluding government intervention (e.g. at the request of the police).
Druid and the Witch may, on occasion, request that the customer provide pictures and/or feedback in regard to a completed order. Druid and the Witch will disclose any and all use for this material prior to the customer providing the information. Compliance to this request is optional on the part of the customer.
Druid and the Witch provides a service in which a customer can personalise an item. This may lead to a customer providing the personal information of another party e.g. for a gift. Druid and the Witch will only contact the individual who initiates a transaction and/or provides payment for that particular order. It is the responsibility of the customer to ensure that they have received consent before providing another's personal information to Druid and the Witch.
The Personal Information We Collect & Safe Storage of This Information.
As mentioned in the previous section, Druid and the Witch must collect certain pieces of personal information from a customer in order to provide their services. This information will include the customer’s name and address and/or the customer's email address and contact number. Paper copies of this information is stored in folders that is kept in a secure property and, within the property, a independently locked room. Digital copies of this information are stored on a password protected laptop used by Druid and the Witch. Any digital folder/document containing potentially sensitive information will have further encryption in order to keep the information secure. All passwords protecting private information differ and only the Director of Druid and the Witch is informed as to the passwords.
Typically, Druid and the Witch will hold personal information of the customer for three years in order to fulfil repeat orders, track prior transactions and keep record of sales. After this time, Druid and the Witch will permanently destroy any personal information stored. In the case of paper copies, this information is shredded and separated and recycled at different times. In the case of digital files/documents, these are moved from the secure area of the computer to the recycle bin, where they are then permanently deleted from the computer system. Should an individual request that their personal information be destroyed before this time, Druid and the Witch will A.) Destroy the personal information thoroughly B.) give a detailed explanation as to why, at that time, Druid and the Witch is unable to destroy the information.
Druid and the Witch collects any and all of the personal information directly from the customer. Sending Druid and the Witch this information shows direct consent from the customer that the information can be used and stored in the manner explained in the above information. Druid and the Witch does not collect outside information or information from third parties nor does Druid and the Witch send any personal information to third party companies without the consent of the customer (e.g. Royal Mail PLC).
Druid and the Witch may receive personal information from Paypal Holdings Inc. This information is needed to complete payment and to deliver the goods ordered. A customer gives consent for Druid and the Witch to view and/or use this information when sending payment. The same is applicable for Etsy Inc.
Additional Notes & Customer Rights.
Druid and the Witch is committed to protecting the personal information of it's customers. To this end, Druid and the Witch will only use third party companies that adhere to the rules and regulations of Government Standards in regard to securing personal information.
Any person/s whose personal information Druid and the Witch holds maintains the right to object to it's use. Druid and the Witch will, as mentioned, cease use of the personal information immediately or, alternatively, provide a detailed explanation as to why this is not possible. Customers also maintain the right to view the personal information gathered by Druid and the Witch. Should this request occur, Druid and the Witch will provide any and all information regarding that particular customer, however Druid and the Witch will not provide anyone but the customer who has either contacted Druid and the Witch or the individual who made payment with information regarding that order, with the exemption of a Government Agency (e.g. Police). Customers may contact Druid and the Witch to update or correct contact details to which Druid and the Witch will oblige. Verification of identity may be required in this instance.
Customers maintain the right to complain regarding the order or service received by Druid and the Witch. Druid and the Witch can be reached by means of the original method of contact prior to an order and will work to resolve any issue that arises. However, should a customer wish to make a complaint with the Information Commissioners Office (ICO) they are entitled to do so.
It may be necessary to amend and/or update this notice. Should the need arise, an updated version of this notice will be provided by Druid and the Witch.
Should you wish to contact Druid and the Witch, or to view the terms and conditions of any third-party companies mentioned in this notice, please follow the correct link provided below:
Emma Kemp
Email: info@druidandthewitch co.uk.
https://www.paypal.com/va/webapps/mpp/ua/legalhub-full