Heritage Crafts Ltd is committed to ensuring that your privacy is protected. Should we ask you to provide certain information by which you can be identified when using this website, then you can be assured that it will only be used in accordance with this privacy statement. We may change this policy from time to time by updating this page. You should check this page from time to time to ensure that you are happy with any changes. This policy is effective from 24th May 2018.
We collect, store, and process the following types of information
If you place an order on our site, in writing or by telephone:
First and Last name
Company Name (if applicable)
When you sign up for our newsletter
First and Last name
We do not collect or store Credit/debit card details provided when making a payment on this site.
https://www.worldpay.com/uk/privacy-policy Your card number/details are not retained following processing of payment.
How we collect personal data
The personal data is collected by you inputting the data when you either place an order or sign up for our newsletter or marketing emails. By doing so you are granting us consent/the right to process that personal data in order to provide the service you have requested.
Providing your data is voluntary. However, due to the nature of services offered through our site it is necessary in order to provide those services.
What we do with the information we gather
We require this information to process your order and to provide you with a better service, and in particular for the following reasons :
Internal record keeping.
We may use the information to improve our products and services.
We may periodically send promotional emails about new products, special offers or other information relating to Heritage Crafts Ltd which we think you may find interesting or useful, using the email address which you have provided when you place an order.
We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure or information we collect, we have put in place suitable electronic, physical, and managerial procedures to safeguard and secure the information we collect online.
With whom data may be shared
We use third party processor services to ensure the highest possible quality of service. Your data can be transferred to the following categories (depending on what services you use) :
Electronic payment processor (PayPal)
Credit/debit card payment processor (WorldPay)
Website shopping cart provider (RomanCart)
We use the services of entities located outside the EU. Your data may be transferred to a third country. We make sure that your data is safe.
You have the option of obtaining a copy of the data. To do this, contact us at email@example.com
Controlling your personal information
You may choose to restrict the collection or use of your personal information in the following ways :
Whenever you are asked to fill in a form on the website, look for the box that you can click to indicate that you do not want to be contacted with special offers and site news.
If you have previously agreed to the use of your personal information for direct marketing purposes, you may change your mind at any time by writing to or emailing us at firstname.lastname@example.org or by clicking the 'unsubscribe' link at the foot of any marketing email you receive from us.
We will not sell, distribute or lease your personal information to third parties unless required by law to do so.
You may request details of personal information which we hold about you under the Data Protection Act 1998 and General Data Protection Regulation (GDPR). If you would like a copy of the information held on you please email email@example.com
If you believe that any information we are holding on you is incorrect or incomplete, please write to or email us as soon as possible. We will promptly correct any information found to be incorrect.
Control of your data
Your data is processed on the basis of your consent, you have the right to withdraw your consent at any time. This does not affect processing until you withdraw your consent.
Consent is provided by our users explicitly when proceeding an action or task (e.g. when they provide user data, place an order, sign up for the newsletter).
The only source of data we have is when a user explicitly provides it.
You can always contact us at firstname.lastname@example.org to withdraw any consent and/or to request to delete your account or provide you with the information that we have on you.
Our customers' rights regarding GDPR are considered and enforced, including:
The right to be informed:
The right of access:
Our users can access all their data by contacting us, either verbally, in writing or by Email.
The right of rectification:
If you wish to change anything in your data just contact us at email@example.com, we'll process all your rectification queries.
The right of erasure:
If you wish to have your information deleted, please contact us at firstname.lastname@example.org, we'll process your erasure query within the lawful timescales.
The right to restrict processing:
We only process the data of our customers as detailed on this page.
The right to data portability:
Our users may contact us anytime at email@example.com if they wish to get an export of their personal data as defined under GDPR.
The right to object:
We handle all requests on this matter from our users. Our users may contact us anytime at firstname.lastname@example.org