Last updated: 13 July 2026
This privacy policy explains how Heymish Handicrafts collects, uses, shares and protects personal information when you visit heymishhandicrafts.com, contact us or buy from our shop.
Who we are
The data controller is Tina Claxton, trading as Heymish Handicrafts, 8 Bobbin Road, Norwich, NR3 2AS, United Kingdom.
For privacy questions or requests, email heymish.handicrafts@gmail.com.
Information we collect
- Identity and contact details, such as your name, billing and delivery addresses, email address and telephone number.
- Order and transaction details, including products ordered, order value, delivery information, payment status, refunds and correspondence about an order.
- Account information, if you create a customer account, including your username and saved contact details. We do not have access to your password.
- Enquiries and correspondence, including information you provide in contact forms, emails, custom-order discussions, reviews, complaints or refund requests.
- Technical and usage information, such as your IP address, browser and device type, pages viewed, cart contents and cookies needed to operate and secure the shop.
- Marketing preferences, if you choose to subscribe to marketing communications.
We do not intentionally collect special-category information. Please do not send sensitive personal information unless it is genuinely necessary for your request.
How we use your information and our lawful bases
- To process and fulfil orders, take payment, arrange production or delivery, provide order updates, handle returns and respond to pre-contract questions. The lawful basis is performance of a contract or taking steps at your request before entering into one.
- To meet legal and regulatory duties, including tax, accounting, fraud-prevention, consumer-protection and record-keeping requirements. The lawful basis is legal obligation.
- To operate, secure and improve the website and customer service, prevent misuse, diagnose faults and keep appropriate business records. The lawful basis is our legitimate interests in running a safe and effective business.
- To send optional marketing. We rely on consent where required. You may unsubscribe at any time using the link in a message or by contacting us.
- To use non-essential cookies or similar technologies. We rely on consent where required. Necessary cookies operate because they are required for the website and shop to function.
Shopping, payments and fulfilment
Our shop is powered by WordPress and WooCommerce. While you browse, the shop may remember products viewed, your approximate location, IP address, browser type, delivery address and cart contents so that it can display products, calculate delivery or taxes, keep the cart working and protect the checkout.
Payments may be processed by Stripe or PayPal. These providers receive the information needed to authorise and support the payment, such as the purchase total, billing information, contact details and transaction identifiers. Heymish Handicrafts does not store your complete card number or card security code.
Where a product is made or fulfilled through Printify or another production partner, we share the order and delivery information needed to manufacture and deliver it. We may also share delivery details with postal, courier and shipping providers.
Other organisations we use
We share personal information only when it is necessary to run the business, fulfil your request or meet a legal duty. Recipients may include:
- payment providers, including Stripe and PayPal;
- production and fulfilment providers, including Printify where applicable;
- postal, courier and delivery providers;
- website hosting, backup, security, email and technical-support providers;
- Google services used for business email and, where permitted, externally supplied website fonts; see Google’s Privacy Policy;
- professional advisers, insurers, payment-dispute services, regulators or law-enforcement bodies when reasonably necessary or legally required.
We do not sell personal information.
Cookies
Necessary cookies keep the basket, checkout, security and account features working. Other cookies or external services are blocked until you make a choice where consent is required. You can change or withdraw your choice using the cookie settings on the website. Our separate Cookie Policy gives details of the cookies and services detected on the site.
International transfers
Some service providers may process information outside the United Kingdom. Where this happens, we rely on the provider’s appropriate safeguards or another lawful transfer mechanism required by UK data-protection law.
How long we keep information
We keep information only for as long as it is needed for the purpose collected and to meet legal, tax, accounting, fraud-prevention and dispute-handling requirements. Order and transaction records are normally retained for the period needed for business and tax records. Enquiries that do not lead to an order are deleted or anonymised when they are no longer reasonably needed. Customer-account information is retained while the account is active or while it is needed for related orders. Backup copies are held on a limited rotating schedule and are deleted as newer backups replace them.
Security
We use reasonable technical and organisational measures to protect personal information, including access controls, secure connections, website maintenance and backups. No internet service is completely risk-free, but we limit access to people and providers who need the information for the purposes described here.
Your rights
Depending on the circumstances, UK data-protection law may give you rights to request access to your personal information, correct inaccurate information, ask for deletion or restriction, object to certain uses, request portability and withdraw consent. Some rights have legal exceptions—for example, we may need to retain order records for tax or legal reasons.
To exercise a right, email heymish.handicrafts@gmail.com. We may need to confirm your identity before acting on a request.
If you are unhappy with how we handle your information, please contact us first so we can try to resolve it. You may also complain to the UK Information Commissioner’s Office through the ICO complaints service.
Children
The shop is intended for customers able to enter into a purchase contract. We do not knowingly collect personal information directly from children for marketing or profiling.
Changes to this policy
We may update this policy when our services, providers or legal obligations change. The latest version will be published on this page with its updated date.