Privacy Policy
DRAFT. Placeholders are in [square brackets]. Update the list of providers if the tech stack changes. This is a template, not legal advice.
Last updated: [DATE]
1. Who we are
ifitscreations.co.uk is run by Samantha Eley-Kemp, a sole trader trading as If It's Creations, 53 Redwald Road, Rendlesham, IP12 2TA. We are the "data controller" for the personal information described here. Contact: hello@ifitscreations.co.uk.
[ICO registration number: [NUMBER] — or delete this line if exempt.]
2. What we collect
| What | When |
|---|---|
| Name, email, delivery address, phone (optional) | When you place an order or create an account |
| Order details (what you bought, when, delivery status, pattern downloads) | When you order |
| Account login details (your password is stored securely and encrypted; we can't see it) | When you create an account |
| Reviews you write, including any photos | When you leave a review |
| Enquiry details and reference photos | When you send a commission or contact enquiry |
| Technical information (IP address, browser, approximate country) | When you visit the site, for security and to check you're in the UK |
Payment card details are collected and processed by SumUp. We never see or store your full card number.
3. Why we use it, and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Processing and delivering your order, providing pattern downloads, customer service | Contract: we need it to fulfil your order |
| Running your account | Contract |
| Keeping financial records for HMRC | Legal obligation |
| Responding to enquiries and commission requests | Legitimate interests (or steps before entering a contract) |
| Publishing your review (shown with your first name and last initial) | Legitimate interests |
| Preventing fraud, misuse of pattern files and keeping the site secure | Legitimate interests |
We do not send marketing emails, and we never sell your data.
4. Who we share it with
We only share what is needed with trusted service providers who process data on our behalf:
- SumUp: payments (online and in person)
- Vercel: website hosting
- Neon: database hosting
- Cloudflare: security, content delivery, file storage and email routing
- Resend: sending order and account emails
- Royal Mail / [COURIER]: delivering your parcel (name and address only)
- [Behold / Meta]: displaying our Instagram feed (no customer data is shared)
Some of these providers are based in, or store data in, the USA. Where data is transferred outside the UK, it is protected by the UK–US Data Bridge or by the UK's International Data Transfer Agreement / Addendum.
5. How long we keep it
- Order and financial records: at least 5 years after the 31 January Self Assessment deadline for the tax year concerned, as HMRC requires.
- Accounts: until you ask us to delete your account. We'll keep order records as above.
- Enquiries that don't lead to an order: 12 months.
- Reviews: as long as the product is listed, or until you ask us to remove yours.
- Security logs: up to 90 days.
6. Your rights
You have the right to:
- access the personal information we hold about you
- have it corrected if it's wrong
- have it deleted (where we don't need to keep it by law)
- object to or restrict how we use it
- receive a copy in a portable format
Email hello@ifitscreations.co.uk to use any of these rights. We'll reply within one month.
If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office: ico.org.uk, 0303 123 1113.
7. Cookies
We use only the cookies needed for the website to work, such as keeping you logged in and remembering your basket. We don't use advertising or tracking cookies. See our Cookie Policy.
8. Changes
We may update this policy. The current version will always be on this page.