Privacy Policy
Last updated: 11 October 2026
This policy explains how babsbrennanhanmades.uk collects and uses your personal information when you browse my blog or buy from my shop.
Who we are
The data controller is Barbara Brennan, 19, Dawley Ride, SL30QE, contact: ba************@********co.uk
What we collect
- Orders: name, delivery and billing address, email, phone number (if provided), and order details, collected through our shop (powered by SureCart).
- Payments: processed by PayPal. We receive confirmation of payment and your PayPal-provided details (such as name and email), but never your full card or bank details. PayPal handles your data under its own privacy policy.
- Enquiries and comments: anything you send by email or contact form, or post as a blog comment, including your name and email.
- Technical data: IP address, browser type and pages visited, collected through cookies and similar technologies.
How we use it, and why
| Purpose | Legal basis |
|---|---|
| Processing and delivering orders, handling returns | Contract |
| Keeping accounting and tax records | Legal obligation |
| Replying to enquiries and moderating comments | Legitimate interests |
| Sending marketing emails | Consent (withdraw anytime) |
| Analytics and improving the site | Consent or legitimate interests |
| Preventing fraud and keeping the site secure | Legitimate interests |
Who we share it with
Only those who help us run the business: PayPal (payments), SureCart (shop software), our web host [hosting provider], couriers [e.g. Royal Mail / Evri]. We do not sell your data. Where a provider processes data outside the UK, we rely on safeguards such as the UK International Data Transfer Agreement or an adequacy decision.
Cookies
We use essential cookies (for example, to keep your basket and checkout working) and, with your consent, analytics or marketing cookies. You can change your choices via our cookie banner or your browser settings.
How long we keep it
Order and accounting records are kept for 6 years for tax purposes. Enquiries are kept for up to 6 months unless they lead to an order.
Your rights
Under UK data protection law you can ask to access, correct or delete your data, restrict or object to its use, request a portable copy, and withdraw consent at any time. Contact me at ba************@********co.uk and I’ll respond immediately.
Complaints
You can complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113, though we’d appreciate the chance to put things right first.
Changes
I may update this policy from time to time; the date above shows the latest revision.
