I TheLavenderAttic am the data-controller of your personal information as it relates to my shop.

When you place an order from me, I will receive your name, delivery address and email address from Folksy. I will only use these details to process and deliver your order, or deal with any queries you have related to that order. If you send me a message using the contact button on Folksy, I will receive your username and email address.

The only circumstances in which I will share your data are in processing your order or complying with the law. I will never use or pass on your information to third parties for marketing purposes or any other purpose, other than the circumstances listed below, or add you to any mailing list without your explicit consent. The circumstances in which I may share your data are:

• With Folksy to comply with my obligations.

• With delivery companies to fulfil your order.

• To comply with legal or tax obligations.

I will only retain your details for as long as necessary in order to process the transaction and I will securely store any data collected during that period. I retain personal data related to orders or customer queries for six years. After this time I will delete your data from my records.

You have the right to know what personal data I hold about you, and to ask for that data to be changed or deleted. You also have the right to complain to the ICO if you believe there is a problem with the way I handle your data.

If you have any concerns about your personal data, please contact support@folksy.co.uk.

In addition to my own privacy policy, if you pay for your order with Paypal, your data will be protected by PayPal's privacy policy.

If you pay directly by card on Folksy, your personal data is protected by Stripe's Privacy Policy, which you can read here.

You can read Folksy's privacy policy here.