Hessian Shack products are offered by me, Jenny Cook. I am based in Chudleigh, Devon, UK.
I take your privacy seriously – collecting only the data I need to be able to process your order and deliver your chosen items. I do not share your data with any other organisations, and make every effort to ensure that the data I hold is kept secure.
What personal data I collect and why I collect it
When you submit an order, I collect your order details, and any other contact details or information that you provide me with. This information is collected solely for the purposes of fulfilling your order.
I do not store card or bank account details on any of my systems. If you make a card payment via this website, the payment is processed externally by PayPal (https://www.paypal.com/uk/webapps/mpp/ua/privacy-full).
If you have an account and you log in to this site, it will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, it will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
When you visit this site, Google Analytics sets a cookie to enable it to distinguish individual users, which expires after 2 years. It also sets a temporary cookie, which expires after 1 minute, to control the rate of exchange of data with its servers. The cookies do not contain any personally identifiable data.
I use Google Analytics to collect information about the number of visits to my site. I use a standard implementation of Google Analytics, which does not store any personally identifiable information. Visitors’ IP addresses are used, where possible, to determine the area in which their device is located but the IP address itself is not data that can be accessed through Google Analytics. All data in Google Analytics is aggregated and anonymised.
My site does not directly set any marketing cookies. However, Third Party content embedded within my site may set additional cookies for their own marketing purposes. Pages on my site may include embedded content (such as Google Maps, YouTube videos and Facebook feeds). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
When you complete the contact form on this site, your name and email address (together with any information you include in your message) will form part of the content of an email to me at: email@example.com
If you leave a review on the site the data shown in the review form is collected, and also your IP address and browser user agent string to help spam detection.
Security and Spam Protection
This site employs software to protect against unauthorised login, spam and other malicious activity. Where malicious activity is detected, the IP address from which it originated will be stored.
How long I retain your data
If you provide me with your contact details or other information, I will retain it indefinitely, unless you have specifically requested otherwise or until such time as you request that it is removed. During the time that I retain your details, I will use them only for the purpose(s) for which you gave your consent – such as corresponding over a question or request, receiving news updates, or for processing orders.
What rights you have over your data
You can request full details of any information that I hold about you. You can also request that I erase any personal data I hold about you. This does not include any data I am obliged to keep for administrative, legal, or security purposes.
Where I send your data
This website hosted on a secure server situated within the UK. Your contact information, and any other information provided for fulfilling your order will also be held securely in my own computer records systems or cloud storage (see below).
How I protect your data
This website uses the https protocol and, as such, any data you exchange with the site is transmitted over a secure, encrypted connection – details of the security certificate can be viewed by clicking on the symbol to the left of our website address in your browser address bar. Access to data held within the sites, or within my own computer systems and cloud storage is password-protected and subject to additional layers of security.
Data breach procedures
If I suspect that there has been any unauthorised access to, or disclosure of, the personal data that I hold, I will immediately inform anyone who I believe may have been affected.
For any matter related to privacy or the storage and processing of personal data, please contact me at: firstname.lastname@example.org