I CadaBayDesigns am the data-controller of your personal information as it relates to my shop.

When you place an order from me, I will receive your name, delivery address and email address from Folksy. I will only use these details to process and deliver your order, or deal with any queries you have related to that order. If you send me a message using the contact button on Folksy, I will receive your username and email address.

The only circumstances in which I will share your data are in processing your order or complying with the law. I will never use or pass on your information to third parties for marketing purposes or any other purpose, other than the circumstances listed below, or add you to any mailing list without your explicit consent. The circumstances in which I may share your data are:

• With Folksy to comply with my obligations.

• With delivery companies to fulfil your order.

• To comply with legal or tax obligations.

I will only retain your details for as long as necessary in order to process the transaction and I will securely store any data collected during that period. I retain personal data related to orders or customer queries for six years. After this time I will delete your data from my records.

You have the right to know what personal data I hold about you, and to ask for that data to be changed or deleted. You also have the right to complain to the ICO if you believe there is a problem with the way I handle your data.

- Data protection complaints - If you have a complaint about how I have handled your personal data, please contact me using the email address or contact form shown below. Please include your name, contact details, order number if relevant, a brief description of the issue, dates, and any supporting evidence such as screenshots or messages. This includes complaints made under the Data Use and Access Act 2025. I will acknowledge your complaint within 30 days and aim to respond without undue delay.

Title: Data Protection Complaint Form

For complaints under: UK GDPR and the Data Use and Access Act 2025

Instructions:

Please complete this form if you wish to make a complaint about how I have handled your personal data or responded to a data protection request. You can submit it electronically.

1. Your details

Full name:

Email address:

Phone number:

Postal address:

Relationship to the organisation:

2. Who the complaint is about

Is this complaint about you or someone else?

If someone else, please state your relationship and authority to act on their behalf:

3. Complaint details

Date of incident or issue:

Department/service involved:

What happened?

What personal data was involved?

When did you first raise this?

What response, if any, have you already received?

4. Type of complaint

Tick all that apply:

Unlawful processing.

Inaccurate personal data.

Data breach.

Failure to respond to a data subject request.

Excessive or unnecessary data collection.

Sharing data without proper authority.

Other:

5. Evidence

Please upload or attach any relevant emails, screenshots, letters, or documents.

If you have no evidence, please state that here:

6. What outcome are you seeking?

Correction of data.

Deletion of data.

Explanation.

Apology.

Further action.

Other:

7. Declaration

I confirm that the information provided is true and correct to the best of my knowledge, and that I am authorised to make this complaint if acting on someone else’s behalf.

Name:

Signature or typed name:

Date:

I will acknowledge receipt of your complaint within 30 days and respond without undue delay.

If you have any concerns about your personal data, please contact support@folksy.co.uk.

In addition to my own privacy policy, if you pay for your order with Paypal, your data will be protected by PayPal's privacy policy.

If you pay directly by card on Folksy, your personal data is protected by Stripe's Privacy Policy, which you can read here.

You can read Folksy's privacy policy here.