Privacy and Cookies 

ADHCrafts uses personal information only where there is a clear purpose and a lawful basis for doing so.

The main ways we use information collected through the online store are set out below.

To process and fulfil orders

We use your name, contact details, delivery or collection information and order details to:

-process your purchase;

-take and confirm payment;

-prepare and dispatch your order;

-arrange workshop or event collection where selected;

-send order confirmations and important updates; and deal with questions, cancellations, returns or refunds connected with your purchase.

Our main lawful basis for this processing is contract because the information is necessary to provide the products or services you have ordered, or to take steps you have requested before entering into a contract.

To manage workshop bookings

We use booking and contact information to:

-reserve your place;

-confirm the workshop details;

-provide joining information;

-communicate important changes;

-manage attendance;

-provide the workshop you have booked.

Our main lawful basis for this processing is contract. Information relating to accessibility or reasonable adjustments is treated separately because it may include more sensitive personal information. This is explained in the next section of this notice.

To meet legal and financial obligations:

We may need to keep or use some information in order to comply with legal requirements, including appropriate financial, tax and transaction records and responding to lawful requests from public authorities.

Where processing is required by law, our lawful basis is legal obligation.

To provide customer service:

We use information you provide when contacting us to answer questions, investigate problems, deal with complaints and provide appropriate customer support.

Where this relates directly to an existing or proposed order or workshop booking, our lawful basis will usually be contract.

For other general enquiries, we may rely on our legitimate interests in communicating with customers and operating ADHCrafts effectively, provided that those interests do not override your rights and interests.

To operate and protect the online store, we may use limited technical, transaction and security information where reasonably necessary to:

-keep the store functioning;

-maintain shopping baskets and checkout;

-identify technical problems;

-protect the store and customers from misuse or fraud;

-and maintain appropriate business and security records.

Depending on the particular activity, this may be necessary for fulfilling our contract with you, complying with a legal obligation or pursuing our legitimate interests in operating a secure and reliable online business.

Where we rely on legitimate interests, we consider whether the processing is necessary and proportionate and whether your rights or interests should take priority. We do not sell personal information. ADHCrafts does not sell your personal information to advertisers or other organisations.

Information is only shared where it is necessary for the purposes explained in this notice, where you have asked us to do so, or where the law requires or permits it.

Workshop accessibility and reasonable adjustments:

ADHCrafts aims to make workshops as accessible and inclusive as reasonably possible.

If you contact us to request a reasonable adjustment or practical support, we ask you to tell us only the information needed to understand what would help you take part.

This might include information about:

-access or mobility requirements;

-seating or positioning;

-communication preferences;

-sensory needs;

-support from a carer or companion; or

-another practical adjustment relevant to the workshop.

You do not need to provide a diagnosis or detailed medical history simply to request an adjustment. Health and disability information

Information about a person's health or disability may be classed as special category personal data under UK data protection law and receives additional protection.

Where information you voluntarily provide includes health or disability information, ADHCrafts will only use it where there is an appropriate lawful basis and an additional legal condition permitting the processing of special category data.

Where appropriate, we may ask for your explicit consent to use the information for the specific purpose of considering, arranging and providing the adjustment or support you have requested. We will not use information provided for a reasonable-adjustment request for unrelated purposes such as marketing.

Who may need to know:

Information about an adjustment will only be shared where reasonably necessary to arrange or provide the support requested.

For example, it may sometimes be necessary to tell a workshop facilitator, support person or venue contact about a practical requirement. Wherever possible, we will share only the information they need to make the adjustment rather than unnecessary medical or personal details.

We will not routinely share a diagnosis or detailed health information with other participants.

Keeping adjustment information:

Information relating to a reasonable-adjustment request will be kept only for as long as there is a genuine reason to retain it, taking account of the workshop, any necessary follow-up and any relevant legal or record-keeping requirements.

We will review whether sensitive information still needs to be retained rather than keeping it indefinitely.

Your choices:

You can ask questions about how adjustment information will be used before providing it.

Where we rely on your explicit consent to process special category information, you can withdraw that consent. This does not affect processing that was lawful before consent was withdrawn.

If withdrawing information means that we no longer have enough information to provide a particular adjustment safely or effectively, we will explain this and discuss any practical alternatives with you.

ADHCrafts does not sell or rent personal information:

We only share personal information where this is reasonably necessary to operate the online store, fulfil an order or workshop booking, meet a legal obligation, or provide a service you have requested.

Depending on how you use the store, information may be shared with the following types of organisations., such as E-commerce and website providers.

The ADHCrafts online store is operated using the Ecwid/IONOS e-commerce platform.

These services process information needed to operate the store, including customer details, order information, shopping basket and checkout data, and technical information required to keep the site functioning.

Payment providers:

Payments are currently processed through PayPal and any other payment services made available at checkout.

The payment provider receives the information needed to process and confirm your payment. Payment providers may process some information under their own legal responsibilities and privacy terms.

ADHCrafts does not receive or store your full payment-card details.

Postal and delivery services:

Where an order needs to be delivered, we may share the information necessary to complete that delivery with Royal Mail, a courier or another delivery provider.

This will normally include information such as your name, delivery address and any contact details reasonably required by the delivery service.

Workshop venues and facilitators:

Where reasonably necessary to organise or deliver a workshop, limited information may be shared with the relevant venue, facilitator or person assisting with the session.

We aim to share only the information they need for the particular purpose.

If information relates to an accessibility or reasonable-adjustment request, we will avoid sharing unnecessary medical or personal details and will normally share only the practical information needed to provide the requested support.

IT, email and administrative services:

ADHCrafts may use trusted providers for email, data storage, website hosting, administration and other business systems.

Where a service provider processes personal information on our behalf, we expect appropriate data-protection and security arrangements to be in place.

Professional advisers and authorities:

We may share personal information with professional advisers such as accountants, insurers or legal advisers where this is reasonably necessary.

We may also disclose information where required by law, court order or a lawful request from an appropriate public authority.

Other organisations involved in a workshop or community project

Some ADHCrafts workshops may contribute to or work alongside wider community projects.

Where another organisation will receive or use your personal information for its own purposes, we will aim to make this clear before the information is shared and explain the relevant role where appropriate.

We will not routinely transfer customer information from ADHCrafts to another organisation simply because the organisations are collaborating on a project.

International data transfers:

Some of the service providers used by ADHCrafts, such as e-commerce, payment, hosting, email or other technology providers, may process personal information outside the United Kingdom.

Where personal information is transferred to a separate organisation outside the UK and the UK GDPR international-transfer rules apply, ADHCrafts will take appropriate steps to ensure that the transfer is lawful.

Depending on the circumstances, this may include relying on:

UK adequacy regulations; approved contractual safeguards or other appropriate safeguards; or another lawful transfer mechanism permitted under UK data protection law.

ADHCrafts will take reasonable steps to use providers that maintain appropriate protections for personal information.

Where a provider processes personal information under its own privacy terms, you may also wish to review that provider’s privacy information for details of how and where it processes data.

How long we keep information:

ADHCrafts keeps personal information only for as long as there is a clear and lawful reason to retain it.

Different types of information may need to be kept for different periods depending on why the information was collected, whether an order or workshop has been completed, and whether there are legal, accounting, tax, insurance or dispute-related reasons for keeping a record.

We review information periodically and aim to delete or securely anonymise personal information when it is no longer reasonably required.

Orders, payments and financial records:

Information forming part of ADHCrafts' financial and business records may need to be retained for the period required by HM Revenue & Customs and other applicable legal requirements.

As a sole trader, ADHCrafts normally needs to keep relevant Self Assessment business records for at least 5 years after the 31 January submission deadline for the relevant tax year.

This may include information such as:

-order records;

-transaction information;

-invoices and receipts;

-refunds;

-delivery or collection records where relevant to the transaction;

-other information needed to support financial or tax records.

Only the information needed for these purposes will be retained as part of those records.

Customer enquiries and correspondence:

General enquiries and routine customer correspondence will be kept only for as long as reasonably necessary to respond to the enquiry, provide follow-up support or maintain an appropriate record of the interaction.

Correspondence connected with an order, complaint, refund, workshop booking or other transaction may need to be retained for longer where it forms part of the relevant business record or may be needed to resolve a dispute.

Workshop booking information:

Workshop booking records may be retained where needed for administration, financial records, attendance management, insurance, complaints or other legitimate business or legal purposes.

Information that is no longer needed after the workshop will not be kept simply because it might be useful at some point in the future.

Accessibility and reasonable-adjustment information

Information provided specifically to arrange a reasonable adjustment will normally be reviewed after the relevant workshop or activity.

Sensitive health or disability information will not normally be retained as part of a permanent customer profile simply because it has been provided once.

Where there is a genuine reason to keep particular information for longer, we will consider whether the full information is still necessary or whether a more limited record would be sufficient.

Marketing information:

Where you have chosen to receive marketing communications, the information needed to manage that preference may be kept while you remain subscribed.

If you unsubscribe, we may retain a minimal suppression record where necessary to make sure we respect your request not to receive further marketing.

Longer retention

In some circumstances, information may need to be kept for longer than our usual period, for example where:

-there is an ongoing complaint or dispute;

-there is a legal claim or reasonable prospect of one;

-an insurer or professional adviser reasonably requires the information;

-a legal or regulatory requirement applies;

-another clear and lawful reason requires continued retention.

Where information is retained for longer, ADHCrafts will keep the need for that retention under review.

Your data protection rights:

Under UK data protection law, you have a number of rights over your personal information.

These rights do not all apply in every situation, but depending on the circumstances you may be able to:

-ask what personal information ADHCrafts holds about you and request a copy;

-ask us to correct information that is inaccurate or incomplete;

-ask us to delete personal information in certain circumstances;

-ask us to restrict how personal information is used in certain circumstances;

-object to particular uses of your personal information;

-ask for certain information you provided to us to be transferred to you or another organisation, where the right to data portability applies;

-withdraw consent where we rely on your consent to use information.

You also have the right not to be subject to a decision based solely on automated processing where that decision has a significant legal or similarly important effect on you, subject to the limits and exceptions provided by law.

Accessing your information

You can ask ADHCrafts whether we hold personal information about you and request access to it.

Where appropriate, we may need to confirm your identity before providing information, particularly where a request involves sensitive information or could affect another person's privacy.

Correcting your information:

If information we hold about you is inaccurate or incomplete, please let us know so that we can correct it where appropriate.

Deleting or restricting information

You may ask us to delete personal information or restrict its use in certain circumstances.

These rights are not absolute. For example, we may still need to retain some transaction or financial information where this is required for tax, accounting, legal or dispute-resolution purposes.

Objecting to processing:

You may object to certain processing, including processing based on legitimate interests.

You can also object to direct marketing at any time. If you ask us to stop using your information for direct marketing, we will do so.

Withdrawing consent:

Where ADHCrafts relies on your consent, including explicit consent for particular sensitive information, you can withdraw that consent at any time.

Withdrawing consent does not affect processing that was lawful before the consent was withdrawn.

Making a rights request:

To exercise a data protection right, please contact ADHCrafts using the contact details on this page.

You do not normally need to use any particular wording or form.

We will respond within the timeframe required by data protection law and will let you know if we need further information to identify you or understand your request.

If a right does not apply in the particular circumstances, we will explain why.

Cookies and similar technologies:

The ADHCrafts online store uses cookies and similar technologies to help the website function, remember customer choices and support the shopping and checkout process.

Some of these technologies are essential for the store to work properly. Others, such as analytics or marketing technologies, may only be used where you have made an appropriate choice through the cookie controls provided on the site.

Essential cookies:

Some cookies are necessary for functions you have actively requested, such as:

-keeping products in your shopping basket;

-maintaining your checkout session;

-remembering your cookie preferences;

-supporting account or security functions;

-enabling the store to operate reliably.

These technologies may be used without separate consent where they fall within the legal exemptions for technologies that are strictly necessary to provide a service you have requested. We still aim to provide clear information about their use.

Analytics, personalisation and marketing technologies:

The store or services connected to it may also offer technologies used for purposes such as:

-understanding how visitors use the store;

-remembering non-essential preferences;

-measuring the effectiveness of website or marketing activity;

-supporting advertising or similar marketing functions.

Where consent is legally required, these technologies should not be activated until you have made an appropriate choice.

Cookie choices:

The ADHCrafts store provides cookie controls that allow visitors to manage their preferences.

Depending on the technologies currently enabled, you may be able to:

-accept cookies;

-accept only certain categories;

-decline non-essential cookies.

You can change your cookie preferences later using the controls provided by the store.

Declining non-essential cookies should not prevent you from using the core shopping functions of the website, although some optional features may work differently.

Cookies used by the e-commerce platform:

The ADHCrafts store is operated using the Ecwid/IONOS e-commerce platform.

Ecwid uses technologies required to maintain functions such as customer sessions, shopping baskets, checkout and cookie-consent choices. It may also provide optional analytics, personalisation or marketing technologies depending on the store settings in use.

The particular cookies and their duration may change as the platform is updated.

Payment and third-party services:

Services connected to the store, such as PayPal or other payment providers, may set or use their own cookies or similar technologies when you interact with those services.

Those providers may operate under their own privacy and cookie information.

Changes to cookie use:

The technologies used by the store may change as ADHCrafts adds, removes or updates website features and service providers.

We will review the information on this page and the store's cookie settings where there is a material change to how these technologies are used.