Privacy Policy

Hello! This page gives you details on how I collect, use, and protect your data when you visit my blog (bugsandfishes.blogspot.com) or my shop (lupin.etsy.com), make a purchase from me, subscribe to my newsletter, or otherwise interact with my business.

I may update this privacy policy from time to time by posting the updated version to this page - please check this page occasionally to make sure you're happy with any changes. Whatever precise policies are listed here please rest assured that I take your privacy and the security of your personal data very seriously (this stuff is so important!) and will absolutely never ever sell your information to a third party.

If you have any questions about this policy or want to contact me (Laura Howard) about the use of your data, please get in touch at mail@bugsandfishes.com.


Data I collect and how I use it:

Data collected when you make a purchase from my shop:

If you make a purchase from my shop (lupin.etsy.com) I collect information (provided by you) in order to be able to complete that transaction: e.g. your name, email address, postal address, etc. I also use this data to keep necessary records for my business. My legal basis for processing this data is legitimate interests.

Please note: you may also submit financial information (such as your credit card details) during the payment process via Etsy or Paypal but I never have access to this information.

Data collected when you visit my shop or blog:

When you browse my blog (bugsandfishes.blogspot.com) or my shop (lupin.etsy.com), the third party services I use (Blogger and Google Analytics here on my blog; Etsy for my shop) automatically receive technical data about you and your visit. For example, they may detect your IP address and time zone, your browser, and whether you're viewing the sites on a mobile device. These services may use cookies to track your behaviour on my sites, for example what pages you visited and whether or not you're a returning visitor.

I use this information in aggregate to get an overview of how much traffic my sites are getting, which pages or items are most popular, etc, so I can better manage my websites and my business as a whole. My legal basis for processing this data is legitimate interests.

You can decline the cookies used on this site or my shop using your web browser if you wish, but it may affect your experience. You can learn more about cookies at www.allaboutcookies.org. You can opt out of Google Analytics here.

Data collected when you sign up for my newsletter:

When you sign up to my newsletter (sent via MailChimp) I collect the information you provide when you sign up, e.g. your name, email address, and the types of newsletters you want to receive from me. I will only store this information in MailChimp, and only use it to send you the newsletters you signed up for. My legal basis for processing this data is consent.

You may withdraw your consent at any time by updating your newsletter preferences or unsubscribing completely - just follow the links at the bottom of each email, or contact me directly at mail@bugsandfishes.com.

MailChimp also uses cookies and other tracking technology to record things like how many times the newsletters I send are opened, how often the links within them are clicked on, etc. This helps me see how popular (or not!) the content of my newsletters are so I can improve them. Click to read about how MailChimp uses cookies.

Data collected when you contact me:

If you contact me directly about my business - for example, by sending me an email or messaging me on social media - I will receive the information provided in the message format (e.g. your name, email address, social media username) and any additional info you include in the message itself. I will use this information to reply to your message(s) and to provide you with good customer service. My legal basis for processing this data is legitimate interests.

Please note:  If you leave a comment on my blog or social media feeds, remember that any personal information you provide is publicly visible and may be viewed by anyone. If there are any specific posts you would like me to remove your comments from just let me know and I'll be happy to help.


Data retention:

I am legally required to keep transaction-related data for six years for tax purposes. I will retain the contact information you submit when subscribing to my newsletter for as long as you remain a subscriber or until I discontinue sending newsletters. I will retain other data for as long as necessary for managing my business, giving good customer service, etc, and always for as little time as possible.


Cookies on my blog:

My blog and third party services I use to run my blog (see below) use cookies. Cookies are small text files that are placed on your computer (or other device used for browsing the internet) by most websites so the site can recognise you as a visitor. You can learn more about cookies at www.allaboutcookies.org.


Third party services:

I use various third party services to host my shop and blog, process transactions, manage my newsletter, back-up my data, etc. I will only share data with these services to the extent that this is required for the running of my business / the use of the services. For example, if you subscribe to my newsletter via MailChimp then that info will be stored by MailChimp so I can use their service to send and manage my newsletters.

Here's a list of the third-party services I currently use for my business and links to their privacy policies:

Paypal 
Etsy
Google (Blogger, Google Analytics & Gmail)
MailChimp
Dropbox
Facebook
Instagram
Twitter

Please note that I may very occasionally also be required to share data with third parties when I am legally required to do so, for example if I am contacted by the police investigating illegal activity.


Your rights: 

Recent data protection legislation has strengthened your rights in relation to your personal data. Your rights now include the right to be informed, the right of access to your data, the right to rectify errors, the right to erase your data, the right to restrict processing, the right to data portability, and the right to object. Visit the Information Commissioner's Office (ICO) website to read more about these rights and how they apply to different types of data processing.

There will be no fee to exercise any of these rights and I will carry out your request within a month. If your request is excessive or repetitive I reserve my right under the current data protection legislation to charge a reasonable fee, take a reasonable amount of additional time to carry out your request, or, in extreme circumstances, refuse to carry out the request.

You also have the right to complain to the ICO here in the UK (www.ico.org.uk) about my handling of your data. If you have an issue, please do contact me first so we can resolve things. You can also contact me (at mail@bugsandfishes.com) if you wish to exercise any of your rights - for example, if you would like me to delete certain data I hold, or update your contact information.


External Links:

Please note that this blog, my newsletter, and other web pages of mine include links to other websites. This privacy policy only applies to my websites and how I handle your data, I have no control over the privacy policies of other websites.


Affiliate Links:

I participate in the Amazon Associates programme and The Book Depository's affiliate programme. If you follow a link to Amazon or The Book Depository from this blog with my referral code in it and then make a purchase I receive a small percentage for the referral. If you click on an affiliate link from my blog Amazon or The Book Depository may install a cookie to track that your visit came from this site. "Laura Howard is a participant in the Amazon EU & Amazon Services LLC Associates Programmes, affiliate advertising programmes designed to provide a means for sites to earn advertising fees by advertising and linking to Amazon.co.uk & Amazon.com"

Follow the links to read Amazon's Privacy Notice: Amazon.co.uk, Amazon.com.
Click to read The Book Depository's Privacy Policy.


Reviews & Sponsored Posts:

These last couple of things don't have anything to do with privacy and your personal data but they're important to mention anyway!

Sometimes people send me free things like craft books to review. I will always disclose when I've been sent a product for review and (in the case of books) if I have a relationship with the publisher (e.g. if I've done freelance work for them in the past) or know the author personally.

Any sponsored posts on my blog will be clearly marked as such. I receive payments for these posts, but do not receive any commission if you follow any sponsor links and make a purchase.


This page was last updated on 23rd May 2018.