Privacy Policy

Here at No Frills Knitting, I respect your privacy and want to protect your personal data. Everything below is intended to inform you on how I look after your personal data.

 

Who Am I? (Data Controller)

No Frills Knitting is the controller and responsible for your personal data (I will refer to myself as I or No Frills Knitting in this privacy notice). My contact details are:

nofrillsknitting@gmail.com

+44 (0)7540481190

For all data matters contact Meg Winter via nofrillsknitting@gmail.com

Third Party Links

This website may include links to third-party websites, plugins and applications. Clicking on those links or enabling those connections may allow third-parties to collect or share data about you - I do not control these third websites and are not responsible for their privacy statements. When you leave my website, I encourage you to read their individual privacy notes.

What data do I collect about you?

I may collect, use, store and transfer different kinds of personal data about you which I have grouped together as follows.

  • Identity Data - First name, last name
  • Contact Data - Billing address, delivery address, email address, telephone numbers
  • Technical Data - IP address

I also collect use and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data may be derived from your personal data but is not considered personal data in law - as it does not directly or indirectly reveal your identity.

I do not collect any Specific Categories of Personal Data about you, nor do I collect any information about Criminal Convictions and offences.

Note that this website is not intended for children and I do not knowingly collect data relating to children.

Failure to Provide Personal Data

If I need to collect your personal data under the terms of a contract I have with you and you fail to provide that data when requested, I may not be able to perform the contract I have or am trying to enter into with you. For example to provide you with goods and services. In this case I may have to cancel delivery of a product or service you may have requested from me - but I will notify you in this case.

How I collect your Data

I will collect your Data in the following ways:

  • When you purchase goods or services via my web shop or by phone.
  • When you sign up for my mailing list - via my sign up form.
  • When you request a quote or estimate for a project via email or phone.
  • When you sign up for a workshop via an online form.
  • When you request information directly by submitting a contact form.

How I use your Data

Performance of contract

This means processing your data where it is necessary for the performance of a contract to which you are a party. Or to take steps at your request before entering into such a contract.

Legitimate interest

This means the interest of my business in conducting and managing my business to enable me to give you the best possible service / product and the most secure experience. I make sure I consider and balance any potential impact on you and your rights before i process your personal data for my legitimate interest. I will not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise permitted to by law). 

I would also use your data when you have given me your consent.

This means you have opted to receive emails by contacting me directly with an enquiry, or have provided my with your personal data by signing up for my mailing list on a sign up form.

Purposes For Which I use Your Data

I have set out below the ways in which I am using your data and the legal basis for which I am using your data.

  • Via my web shop - For the performance of a contract with you.
  • To send marketing information via email - With your consent via my mailing list sign up form.
  • Via my website - To monitor and improve the quality of my website platform. This is classed as Legitimate interest.

Marketing and Opting Out

I will always try to provide you with choices with regard to my marketing. You can ask me to stop sending you marketing messages at any time by following the opt-out links on any marketing message that has been sent to you or by contacting me directly on nofrillsknitting@gmail.com.

When you do opt out of receiving these marketing messages this will not apply to the personal data provided to us as a result of a product or service purchase.

Cookies

My website uses cookies to distinguish you from other users of my website. This helps me to provide you with a good experience when you browse my website and also allows me to improve my site. When arriving on my site you will be asked to agree to this use of cookies and so by continuing to browse the site, you are agreeing to the use of cookies.

Who I Share Your Data With

I sometimes share your data with third parties, e.g.

  • Internal third parties, such as contractors or freelancers engaged by me to enable me to complete work upon a project.
  • Professional advisers acting as processors, including my accountant.
  • HM Revenue and Customs, regulators and other authorities acting as processors based in the UK who may require reporting of processing activities in certain circumstances.
  • Business tools that I might use to run my business in which case they act as the Data controller (listed in the next section).

I require all third parties to respect the security of your personal data and to treat it in accordance with the law. I do not allow our third party service providers to use your personal data for their own purposes and only permit them to process your personal data for their specified purposes and in accordance with my instructions. If you would like more information on the third parties we use and a copy of their privacy polices please contact the data controller.

Third party business tools I use to process your data

Shopify

  • to host and run my website and online shop
  • to collect orders via my online shop
  • they collect: Name, email, sometimes your postal address

Shopify Analytics

  • to collect data that will improve my website services
  • they collect: Your location, I.P address Google Analytics to collect data that will improve my website services They collect: Your location, I.P address

PayPal

  • to take payments in store
  • they collect: Name, email, card details, postal address

Stripe

  • to take payments via my online shop
  • they collect: Name, email, card details, postal address

Mailchimp

  • to organise and contact my mailing list and collect the emails of interested parties.
  • you will always have consented to be added to my mailing list.
  • they collect: Name, email

Gmail

  • to answer your enquiries
  • they collect: Name, email

Eventbrite

  • to sell tickets for events
  • they collect: Name, email, card details, postal address

Instagram

  • to answer your enquiries via the messenger section of the app
  • They collect: Name, email

Facebook

  • to answer your enquiries via the messenger section of my page
  • they collect: Name, email

Data Retention

I will only retain your personal data for as long as it is necessary for me to fulfil the purposes I collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for your personal data, I take into consideration the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which I have processed your personal data and whether I can achieve those purposes through other means, and the applicable legal requirements.

Your Legal Rights

Unless subject to an exemption under the data protection laws, you have the following rights with respect to your personal data:

  • The right to request a copy of the personal data which I hold about you
  • The right to request that I correct any personal data if it is found to be inaccurate or out of date
  • The right to request your personal data is erased where it is no longer necessary to retain such data
  • The right to withdraw your consent to the processing at any time, where consent was the lawful basis for processing your data
  • The right to request that I provide you with your personal data and where possible, to transmit that data directly to another data controller, (known as the right to data portability), where applicable i.e. where my processing is based on consent or is necessary for the performance of my contract with you or where I process your data by automated means
  • The right, where there is a dispute in relation to the accuracy or processing of your personal data, to request that a restriction is placed on further processing of your data
  • The right to object to my processing of your personal data, where applicable i.e. where processing is based on my legitimate interests (or in performance of a task in the public interest/exercise of official authority), direct marketing or processing for the purposes of scientific/historical research and statistics

If you wish to exercise any of the rights set out above, please contact me directly via nofrillsknitting@gmail.com.

No fee required – with some exceptions

You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, I may charge a reasonable admin fee if your request is clearly unfounded, repetitive or excessive. Alternatively, I may refuse to comply with your request in these circumstances.

What I may need from you

I may need to request specific information from you to help me confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. I may also contact you to ask you for further information in relation to your request to speed up my response to you.

Time limit to respond

I will try to respond to all legitimate requests within one month. Occasionally it may take me longer than a month if your request is particularly complex or you have made a number of requests of me. In this case, I will notify you and keep you updated on my progress.

Changes to this notice and your duty to inform us of changes

This version was last updated on 31st December 2020.

Please keep me informed if your personal data changes during your relationship with No Frills Knitting. It is important that the personal data I hold about you is accurate and also current.

Queries, requests or concerns

To exercise all relevant rights, queries or complaints in relation to this policy or any other data protection matter between you and No Frills Knitting, please in the first instance contact the data controller Meg at nofrillsknitting@gmail.com.

If this does not resolve your complaint to your satisfaction, you have the right to lodge a complaint with the Information Commissioners Office on 03031231113 or via email https://ico.org.uk/global/contact-us/email/ or at the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, England, UK.