I Lotti Brown am the data-controller of your personal information as it relates to my shop.

When you place an order from me, I will receive your name, delivery address and email address from Folksy. I will only use these details to process and deliver your order, or deal with any queries you have related to that order. If you send me a message using the contact button on Folksy, I will receive your username and email address.

The only circumstances in which I will share your data are in processing your order or complying with the law. I will never use or pass on your information to third parties for marketing purposes or any other purpose, other than the circumstances listed below, or add you to any mailing list without your explicit consent. The circumstances in which I may share your data are:

• With Folksy to comply with my obligations.

• With delivery companies to fulfil your order.

• To comply with legal or tax obligations.

If you send me a message and we have a conversation via email, our email correspondence will be handled through email services provider, Zoho. You can review the provider's privacy policy at https://www.zoho.com/privacy.html. Zoho has certified its compliance with the EU-U.S. Privacy Shield Framework with respect to transfer of data to the US. We will share information with them only to the extent necessary for the purposes only of communicating with you via emails about your order and dealing with any complaints and queries relating to such uses.

If you send me any requested photos for a custom pet portrait order through the WeTransfer file transfer service (for large/hi-res photos and files) you can be assured that your transfer will be GDPR compliant. Transfers uploaded from within the EU are stored in the EU, on GDPR compliant servers hosted by AWS. This includes the metadata attached to transfers, like your email address and IP address. WeTransfer holds data on an analytical database on their own internal server that only stores data in a pseudonymized form. That means there is no directly identifiable data stored in there. You can check out their privacy and security details at https://wetransfer.zendesk.com/hc/en-us/categories/201270873-Security-Privacy

I will only retain your details for as long as necessary in order to process the transaction and I will securely store any data collected during that period. I retain personal data related to orders or customer queries for six years. After this time I will delete your data from my records.

You have the right to know what personal data I hold about you, and to ask for that data to be changed or deleted. You also have the right to complain to the ICO if you believe there is a problem with the way I handle your data.

If you have any concerns about your personal data, please contact support@folksy.co.uk.

In addition to my own privacy policy, if you pay for your order with Paypal, your data will be protected by PayPal's privacy policy.

If you pay directly by card on Folksy, your personal data is protected by Stripe's Privacy Policy, which you can read here.

You can read Folksy's privacy policy here.