top of page

Privacy Policy – Mulloch.Art & Crafts

Last Updated: 16/11/2025

 

Mulloch.Art & Crafts ("I", "we”, “our”, "my", “us”) is committed to protecting your privacy and handling your personal information responsibly and transparently. This Privacy Policy explains how I collect, use, store, and protect your information in compliance with UK GDPR and the Data Protection Act 2018, applicable in Scotland.

If you have any questions, you can contact me at:
Email: mulloch.art@yahoo.com
Address: Burn O'Need Way, Catrine, KA5 6EP

 

1. What Information We Collect

 

I may collect the following types of personal data:

1.1 Information You Provide Directly

  • Name

  • Email address

  • Postal address

  • Phone number

  • Payment details (processed securely by third-party payment providers; we do not store card details)

  • Order details and purchase history

  • Enquiries and correspondence

​

1.2 Automatically Collected Information

When you use my website (if applicable), I may collect:

  • IP address

  • Browser type and device information

  • Cookies and usage analytics (see Section 8)

​

1.3 Social Media Interactions

If you contact mw via Facebook, Instagram, or other platforms, I may receive your public profile information and message content.

​

2. How We Use Your Information

I use your personal data to:

  • Process and fulfil orders

  • Communicate with you about purchases, deliveries, or enquiries

  • Manage accounts and customer service

  • Send marketing emails or newsletters (only with your consent)

  • Improve our services, website, and customer experience

  • Comply with legal obligations (tax, accounting, fraud prevention)

​

3. Lawful Basis for Processing

I process your personal data under one or more of the following lawful bases:

  • Contractual Necessity: to process and deliver your orders

  • Consent: for email marketing or optional communications

  • Legitimate Interests: improving services, preventing fraud

  • Legal Obligation: maintaining tax and accounting records

​

4. Sharing Your Information

I do not sell or rent your information.
I may share personal data with:

  • Payment processors (e.g., PayPal, Stripe, Square)

  • Delivery services (e.g., Royal Mail, courier companies)

  • Accountancy or bookkeeping services

  • Website hosting or analytics providers

All third parties are required to keep your data secure and process it only according to our instructions.

​

5. International Transfers

If any service providers store data outside the UK (for example, cloud services in the EEA or USA), I ensure adequate protection measures are in place, such as:

  • UK adequacy regulations

  • Standard Contractual Clauses (SCCs)

​

6. How Long We Keep Your Information

I retain personal data only as long as necessary:

  • Order and transaction data: 6 years (legal requirement for tax records)

  • Email enquiries: up to 12 months

  • Marketing data: until you withdraw consent

  • Website analytics: typically 12–24 months, depending on platform

​

7. Your Rights Under UK GDPR

You have the following rights:

  • Access – request a copy of the data we hold about you

  • Rectification – correct inaccurate information

  • Erasure – request deletion (in certain circumstances)

  • Restriction – limit how your data is used

  • Objection – stop processing for marketing or legitimate interest purposes

  • Data Portability – request a transfer of your data

  • Withdraw Consent – at any time, for marketing or optional data use

​

To exercise your rights, contact us at mulloch.art@yahoo.com​

If you are not satisfied with our response, you have the right to complain to the Information Commissioner’s Office (ICO): www.ico.org.uk

​

8. Cookies & Website Tracking (If Applicable)

My website may use cookies to improve functionality and analyse traffic. You can manage cookie preferences through your browser settings or consent banner.

Types of cookies used:

  • Essential cookies (required for the website to function)

  • Analytics cookies (e.g., Google Analytics)

  • Preference cookies (save settings such as language)

​

9. Security of Your Data

I take appropriate technical and organisational measures to protect your information, including secure hosting, encrypted connections (HTTPS), and restricted access controls.

​

10. Children’s Privacy

My services are not intended for individuals under 16 years old unless supervised by a parent or guardian. I do not knowingly collect children’s data.

​

11. Changes to This Privacy Policy

I may update this policy occasionally. The latest version will always be published on my website or provided upon request. Significant changes will be communicated directly where appropriate.

bottom of page