•             Contact details

•            What information is collected, used, and why

•            How personal information is stored

•            Lawful bases and data protection rights

•            Where Rosicraft gets personal information from

•            How long information is kept

•            Who information is shared with

•            Sharing information outside the UK

•            How to complain

Contact details

Post - 1 Townfield Cottages, Townfield, Consett, Co Durham, DH8 9UP, GB

Telephone – 07944 599471

Email – rosicraft2025@gmail.com

What information is collected, used, and why

Rosicraft collects or uses the following information to provide services and goods, including delivery:

•            Names and contact details

•            Addresses

•            Payment details (including card or bank information for transfers)

•            Information relating to compliments or complaints

How personal information is stored

Digital information is stored at my premises on a password protected computer.

Paper records are stored at my premises in a lockable steel document container.

Lawful bases and data protection rights

Under UK data protection law, Rosicraft must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website: https://ico.org.uk/

Which lawful basis Rosicraft relies on may affect your data protection rights, which are set out in brief below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website: https://ico.org.uk/

Your right of access - You have the right to ask me for copies of your personal information. You can request other information such as details about where Rosicraft gets personal information from and who personal information is shared with. There are some exemptions which means you may not receive all the information you ask for.

Your right to rectification - You have the right to ask me to correct or delete personal information you think is inaccurate or incomplete

Your right to erasure - You have the right to ask Rosicraft to delete your personal information.

Your right to restriction of processing - You have the right to ask Rosicraft to limit how  your personal information can be used.

Your right to data portability - You have the right to ask that Rosicraft  transfer the personal information you gave to another organisation, or to you.

Your right to withdraw consent – When Rosicraft uses consent as our lawful basis, you have the right to withdraw your consent at any time.

If you make a request, Rosicraft must respond to you without undue delay and, in any event, within one month.

To make a data protection rights request, please contact Rosicraft using the contact details at the top of this privacy notice.

Lawful bases for the collection and use of your data

Rosicraft’s lawful bases for collecting or using personal information to provide services and goods are:

•            Contract – Rosicraft has to collect or use the information so a contract can be  

              entered into or carried out.               

•            Legitimite Interests – Rosicraft has to collect or use the information to deal with

              enquiries.

•            Legal Obligation – Rosicraft has to collect or use the information to keep the 

              financial records required by law. 

All of your data protection rights may apply except the right to object.

Where Rosicraft gets personal information from

Directly from you via:

• Checkout and Order Processing (Name, billing address, shipping address, email address, phone number and payment information)
• Contact Forms and Customer Support (Written messages and phone calls)
• Cookies
• Payment Processors (Stripe, Sum Up)

How long information is kept

Your data will be retained for 7 years, in line with tax and statutory requirements.

For more information on how long Rosicraft stores your personal information, or the criteria we use to determine this, please contact us using the details provided above.

Who is information shared with

Data processors

IONOS

This data processor does the following activities for Rosicraft: They host the website and online store

Sum Up (In person payments)

This data processor does the following activities for Rosicraft: They process my ‘in person’ card payments

Stripe 

This data processor does the following activities for Rosicraft: They process online store card payments

HMRC

This data processor does the following activities for Rosicraft: They assess and impose  business tax obligations

Others personal information is shared with

Accountant – If required - not yet appointed

Royal Mail – For deliveries

Sharing information outside the UK

Where necessary, Rosicraft’s data processors may share personal information outside of the UK. When doing so, they comply with the UK GDPR, making sure appropriate safeguards are in place.

For further information, or to obtain a copy of the appropriate safeguard for any of the transfers below, please contact me using the contact information provided above.

Organisation name: Sum Up

Category of recipient: Payment Processing

Country the personal information is sent to: EEA

How the transfer complies with UK data protection law: Addendum to the EU Standard Contractual Clauses (SCCs)

Organisation name: Stripe

Category of recipient: Payment Processing

Country the personal information is sent to: EEA & US

How the transfer complies with UK data protection law: Addendum to the EU Standard Contractual Clauses (SCCs)

How to complain

If you have any concerns about Rosicraft’s use of your personal data, you can make a complaint using the contact details at the top of this privacy notice.

If you remain unhappy with how your data has been used after raising a complaint with Rosicraft, you can also complain to the ICO.

The ICO’s address:         

Information Commissioner’s Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

Helpline number: 0303 123 1113

Website: https://www.ico.org.uk/make-a-complaint        

Cookie Policy

What are cookies?

Cookies are small text files that the browser stores on your device (computer, smartphone, tablet, etc.) when you visit a website. The advantage of cookies for you is that it can improve your browsing experience, because your habits and needs can be identified. Cookies help to provide, keep up to date, and constantly improve services. This website uses only essential cookies.

 Essential Cookies (Technically Required) 

These cookies are mandatory for my website to function. They are set automatically and do not require user consent under GDPR, as they allow you to use basic features. 

Shopping Cart (SessionID): Remembers items you add to your basket so they don’t disappear when navigating to a new page.

Security (DPX): Protects the site from malicious traffic, such as DDoS attacks.

Browser Compatibility (ShopInit): Tests if the browser allows cookies so the store can function.

Language/Currency: Stores the your selected language and currency preferences.

Last Updated – 5/5/2026