Bedecked Beads Privacy and Cookie Policy

Bedecked Beads Jewellery is committed to protecting and respecting your privacy and fully compliant with GDPR 

Valerie Anderson T/A Bedecked Beads Jewellery is the data controller and Create (dot)net is data processor of your information, we use Paypal and World Pay to process your payments within a SSL encrypted website Our privacy policy covers personal data we collect and what we do with your personal data How we secure your personal data How you can change or delete your personal data Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it. 

Site - is the website www.bedeckedbeads.co.uk 

What Information We Collect We may collect and process various forms of information when you use our site: 

Personal Data When you use our website, you may provide personal data eg, name, email address, mailing address, and credit card or other billing information. We need your information/personal data to enable us to process your order, mail your order or to enable us to contact you directly if there is a query with your order or replying to your inquiries 

Information Sharing and Disclosure We only share your information in a limited capacity to comply with our obligations eg Payment processing via World Pay and Paypal via Create website With delivery companies (your name and address) to send your order, Accountant (to provide information for the Inland Revenue) Google Analytics, Email service provider (when signing up to our newsletter or providing order confirmation/processing/dispatch) 

Data Retention We retain your personal information only for as long as necessary to provide you with our services. However, we may also be required to retain this information to comply with our legal and regulatory obligations, to resolve disputes, and to enforce my agreements. We generally keep your data for the following time period: 6 years as required by the Inland Revenue    

Automatically Collected Information If you use our site, we may automatically collect information about your computer, including, where available, your IP address, operating system and browser type. We achieve this by using cookies and other forms of technology. All of the information that is automatically collected is statistical data about our Users browsing actions and patterns.  

Cookies A cookie is a small file that we store on your browser or the hard drive of your computer if you agree. Cookies contain information that is transferred to your computer's hard drive. They help us to improve our site and to deliver a better and more personalised service. By using our site, you agree to the use of cookies, which help us to improve our site and to deliver a better and more personalised service. We use the following cookies: 

Session: They expire when you close your browser (or if you stay inactive for a certain time). They’re used for example on e-commerce websites so you can continue browsing without losing what you put in your basket. Permanent: They persist even when the browser is closed. They have an expiration date though and by law, you can’t make them last more than 6 months. They’re used to remember your passwords and login info so you don’t have to re-enter them every time. Third-party: Cookies attributes usually correspond to the website domain they are on. Not for third-party cookies—as you probably gathered from the name, they are installed by … third-party websites, such as advertisers. They gather data about your browsing habits, and allow them to track you across multiple websites. Other websites using third-party cookies: Facebook, Flickr, Google Analytics, Google Maps, Google Plus, SoundCloud, Tumblr, Twitter and YouTube.

You can find out more information about cookies by visiting what are cookies?. Check the help section of the web browser you are using to adjust your cookie settings

Analytics We use Google Analytics to measure traffic to our site and understand how users move around and use our service. We use this information to enhance the site to ensure that users get the best experience possible. All of the information we collect from Google Analytics will not be disclosed with any other third parties. By agreeing to this Privacy Policy, you agree to the use of Google Analytics. Google may use the data collected to assess activity on our website and it has its own privacy policy. Further information specific to Google analytics and how they secure the data collected can be found here

How We Store Your Information  When your information is submitted to us, we use it to ensure that appropriate security measures are in place to ensure your information is protected. Our site and service have Secure Socket Layer (SSL) encryption present amongst other general security measures such as firewalls and password protection These measures are regularly reviewed to ensure that your personal data is being stored in the most secure way possible. The data we collect from you may be processed, transferred and stored using various services integral to our business operations. These services may be based in locations outside of the European Economic Area (EEA) and only the essential and necessary data will be provided to them for them to fulfill their purpose (usually for non UK purchases)

We have ensured that all services we use to transfer, store and/or process data, in or outside EEA, have been verified to ensure that they are compliant with the European Union’s General Data Protection Regulation (GDPR) and any other respective legal framework that applies to that particular service. We will, to the best of our knowledge, not process, store or transfer any data to any service that does not comply with the GDPR or have adequate security measures in place to protect your personal data. 

Disclosure Of Information We will only disclose your information to any third-parties as detailed in this Policy and under the following circumstances: To facilitate payment (for example, Worldpay). If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, this includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction. Our site may, from time to time, contain links to and from the websites of various social media sites. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these sites. 

Access To Information & Your Rights We are committed to protecting and respecting your privacy. Under the GDPR, you have several rights in relation to your personal data which include: 

Access - you have the right to know exactly what information we hold about you and how we process it. 

Correction - you have the right to have your personal data rectified if it is incorrect or incomplete. 

Deletion - You have the right to have your personal data removed or deleted without a specific reason for doing so The right to restrict processing - an individual's right to block or suppress processing of their personal data. You have the right to block your personal data from being processed. The right to data portability - you have the right to request the personal data we hold about you for your own use. You can access, change and delete certain types of data that we hold about you.If you wish to exercise any of your rights in accordance with the GDPR, please contact us with the specific request using the contact details located under the ‘Contact Us’ section of this policy. The action taken will be free of charge, provided in an easily accessible format (if applicable) and actioned within 30 days, where possible. If you have concerns about the way we handle your personal data, you can contact the ICO or raise a complaint by contacting us and we will investigate accordingly. 

Contact Us You can contact us at any time if you have any questions, comments or requests regarding this Privacy Policy below V Anderson, 12 Kirkhill Terrace, Broxburn, West Lothian EH52 6JG, via our contact page or email [email protected] 

Changes To This Policy Will appear in this section, as required Updated: 17/05/18