In compliance with the new General Data Protection Regulations (GDPR) coming into force on 25th May 2018, all companies that collect personal information about their customers must safeguard this information to protect the privacy rights of said customers. Buyers are also entitled to request certain information held by companies and to ask for what purposes their information is collected and used.

In order to fulfil your order, certain personal information you provide via the Etsy site will be used by us. This includes your name, postal address, email address, payment information and the details of the product you have ordered (including any personalised information for custom orders). There are a number of legal bases we rely on to collect, use and potentially share this information. This includes the ability to physically fulfil your order, contact you regarding your order, settle any disputes and provide customer support as needed. Collected information will also be used to comply with any legal obligations we have as a company, including HMRC tax law and to comply with our obligations under the Etsy Seller Policy and Terms of Use.

Currently, we do not collect email addresses for marketing use and if we choose to do so in the future, we will ensure you have provided your affirmative consent which can be revoked at any time as per GDPR policy.

Personal information will only be shared with third parties when it is necessary to complete your order or comply with law. This includes service providers such as the delivery companies we currently use - Royal Mail and Hermes. This will involve disclosing your name and postal address to them in order to fulfil your order. We may collect, retain and share your information if reasonably necessary to respond to government requests, enforce terms and conditions, prevent and investigate illegal activity and protect the rights and safety of customers.

Your personal information will only be retained for as long as necessary to provide you with our services and fulfil your order. To comply with UK tax law, information collected from customers will be kept for 5 years.

EU customers have several rights regarding the use of their personal information. You have the right to access and receive a copy of the personal information we hold, the “right to be forgotten” by deleting your personal information on request (not including data stored for legal reasons) and object to receiving marketing messages even after providing express consent.

If you wish to raise concern about our use of your information, you have the right to do so by contacting your local data protection authority.

For the purposes of EU data protection law, Melina Stephens is the data controller of your personal information for the company Linen and Lace. If you have any privacy questions or concerns, please email linenandlace.shop@gmail.com.