Georgia Satchel - Privacy Policy
This privacy policy notice is served by Georgia Satchel, under the websites;
www.oops-arts.com <http://www.oops-arts.com> and www.georgiasatchel.com <http://www.georgiasatchel.com> . "I", "my",  or "me" refer to the business, Georgia Satchel. "You", "the user" refer to the person(s) using this website.
The purpose of this policy is to explain to you how I control, process, and protect your personal information through my business and websites. If you are asked to provide information when using these websites, it will only be used in the ways described in this policy.
Please read this policy carefully. By using my websites, you are agreeing to be bound by this policy. If you have any questions about this policy, please email
oops.arts@gmail.com <mailto:oops.arts@gmail.com> or write to Georgia Satchel, Linicro, Dervaig, Isle of Mull, PA75 6QR.
This policy may be updated from time to time, to ensure my privacy policy meets current legislation and internet best practice. You should revisit this page to ensure that you are happy with any changes. This policy was updated on 31/01/2019.
What information do I gather?
I may collect the following information if you contact me by email or make an online purchase:
Name
Email address
Postal address
Telephone number
Website statistics data
Financial transactions made through these websites are made via PayPal, a third party payment processor, who specialises in the secure online capture and processing of credit/debit card transactions.  This means Georgia Satchel will not receive or store any of your financial information.
How I use this data
The lawful basis for processing this data is contractual necessity. The data I gather in this way is used specifically to:
Fulfil orders in my online shop
Contact you in response to a specific enquiry
Carry out my obligations arising from any contracts entered into by you and me.

Who has access to your information?
Georgia Satchel is the only person who has access to your data.
I will not sell or rent your information to third parties.  I will not share your information with third parties for marketing purposes.
Third Party Service Providers working on my behalf: I may pass your information to my third party service providers for the purposes of completing tasks and providing services to you on my behalf (for example PayPal to process payments). However, when I use third party service providers, I disclose only the personal information that is necessary to deliver the service.
Where do I store and process personal data?
Names, email addresses and messages are stored in my gmail account
oops.arts@gmail.com <mailto:oops.arts@gmail.com> which is accessible through my pc and mobile devices, all of which are password protected.
Names and addresses are retained in spreadsheets to create invoices, these are stored on a password protected pc and backed up by Dropbox. Dropbox is a personal cloud storage service (sometimes referred to as an online backup service) and its servers are located in the U.S.. The dropbox privacy policy can be viewed here https://www.dropbox.com/en_GB/privacy
Names, email addresses, postal addresses and credit/debit card details collected through online purchases are processed and held by PayPal. To read more about how PayPal stores and uses your information, click here for the full
PayPal Privacy Policy <https://www.paypal.com/gb/webapps/mpp/ua/privacy-full>

How long do I keep your personal data for?
I retain your personal information only for as long as necessary to provide you with my goods and services. However I may also be required to retain this information to comply with my legal and regulatory obligations, to resolve disputes and to enforce my agreements. I retain the data in my invoices for 6 years in line with HMRC guidelines.
How to contact us?
You have the right to have personal data erased. This is also known as the ‘right to be forgotten’. If you wish to request a copy of the personal information that Georgia Satchel holds about you, or have that information erased, or have any inaccuracies rectified please email oops.arts@gmail.com or write to Georgia Satchel, Linicro, Dervaig, Isle of Mull, PA75 6QR.
Cookies and how we use them
What is a cookie?

A cookie is a small file placed on your computer’s hard drive. It enables my websites to identify your computer as you view different pages on our website. Cookies allow websites and applications to store your preferences in order to present content, options or functions that are specific to you. They also enable me to see information such as how many people use the website and what pages they tend to visit.
How I use cookies
Cookies do not provide me with access to your computer or any information about you, other than that which you choose to share with me.
Cookies may be used in the following ways:
To analyse my web traffic using an analytics package. Aggregated usage data helps me improve the website structure, design, content and functions. This information is not shared with any third parties.
To remember what is in your shopping basket and where you are in the order process.
Third-party cookies from services such as Facebook and Youtube where photos and videos are hosted.
Controlling cookies
I use cookies on my websites. If you do not want my websites to store cookies on your computer or device, you should set your web browser to refuse cookies. However, please note that doing this may affect how my websites functions - “necessary cookies” enable core functionality and some pages and services may become unavailable to you. Unless you have changed your browser to refuse cookies, my websites will issue cookies when you visit it.
To learn more about cookies and how they are used, visit
All About Cookies <http://www.allaboutcookies.org/>.
Links from my sites
My websites contain links to other websites. Please note that I have no control of websites outside oops-arts.com and georgiasatchel.com domains. If you provide information to a website to which I link, I am not responsible for its protection and privacy. Always be wary when submitting data to websites. Read the site’s data protection and privacy policies fully.