This website is run by Data Controller Clare Kiely trading as Suffolk Alpaca, located at 2 Rectory Cottages, Rectory Road, Great Waldingfield, Sudbury, Suffolk, CO10 0TL and with email address clare@suffolkalpaca.co.uk
We collect your full name, email address, billing address and contact number. We also collect some information specific to your device, such as your IP address and 'User-Agent' string.
Your personal information & card details (card number, card type, expiration date and CVV) are shared with our third party payments provider Braintree Payments (www.braintreepayments.com). In respect of your card details, these are sent directly to Braintree Payments.
If you would like to know the personal data that we have about you, please email admin@craftclasses.suffolkalpaca.co.uk with the email address used for your order and we will get back to you in a maximum of one month's time.
Your name, phone number, and email address are collected:
(a) in order to process your booking and to contact you in the event of any problem with that booking, and
(b) to give you details of the workshop(s) you have booked onto or to let you know if there is a cancellation.
Our third party payments provider Braintree Payments keeps a record of all transactions, including failed ones, for records purposes. Braintree Payments may share data with their sub-processors Kount Inc; Amazon Web Services, Inc; and CardinalCommerce Corporation.
We store the information you provide us when placing an order (except for your card details) on services provided by Google Cloud (cloud.google.com). In addition, we send automated emails (including order confirmation emails) through Amazon Simple Email Service (Amazon SES, aws.amazon.com/ses).
We process the information that you provide on the lawful basis of contractual obligation, as — to fufil a craft classes booking made by you via this website — we are required to process your personal information.
As mentioned above, we store the information you provide on services provided by Google Cloud. All the information stored by us directly is held within the "europe-west2" Google Cloud region (London).
Order confirmation pages (which display the workshops booked, the last 4 digits of the purchaser's card number, and the order total) are designed to be only accessible to the person that placed the order. As this website does not have accounts, this is achieved by order confirmation page URLs containing a large, randomly generated, string of characters designed to not be able to type in or guess. That being said, on the off-chance that somebody did manage to work out a correct URL, the page would be accessible to them.
When using Amazon SES, emails are sent via the "eu-west-2" Amazon Web Services region (London).
Information collected by/shared with Braintee Payments may be stored and processed in the United States of America, and/or in any other country where Braintree Payments or its sub-processors maintains facilities.
Most of your information may be stored indefinitely for records purposes, with the exception of server logs automatically generated by Google Cloud upon a request being made to craftclasses.suffolkalpaca.co.uk, which are deleted after 30 days.
If you wish to make a request for data erasure, you can do so by emailing admin@craftclasses.suffolkalpaca.co.uk.
Under data protection law, you have rights including:
(a) Your right of access — You have the right to ask us for copies of your personal information
(b) Your right to rectification — You have the right to ask us to rectify personal information you think is inaccurate, and to ask us to complete information you think is incomplete
(c) Your right to erasure — You have the right to ask us to erase your personal information in certain circumstances
(d) Your right to restriction of processing — You have the right to ask us to restrict the processing of your personal information in certain circumstances
(e) Your right to object to processing — You have the the right to object to the processing of your personal information in certain circumstances
(f) Your right to data portability — You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you. Please email admin@craftclasses.suffolkalpaca.co.uk if you wish to make a request.
If you have any concerns about our use of your personal information, you can make a complaint to us by emailing admin@craftclasses.suffolkalpaca.co.uk and/or clare@suffolkalpaca.co.uk.
You can also complaint to the Information Commissioner's Office (the ICO) if you are unhappy with how we have used your data. The ICO can be contacted via email at icocasework@ico.org.uk, via phone by calling 0303 123 1113, or by writing to Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. The ICO's website is available at www.ico.org.uk.
For further information, or if you wish to discuss the safety of your personal information, please email admin@craftclasses.suffolkalpaca.co.uk.