GDPR Compliance Statement for Miraculous Crafts

At Miraculous Crafts, we are committed to protecting your personal data and respecting your privacy. This statement outlines how we collect, use, and safeguard your information in compliance with the General Data Protection Regulation (GDPR).

 1. **We are a small business creating bespoke candles, unique artificial flower arrangements and a ever growing range of handmade crafts. **

 2. **Personal Data We may Collect**

We may collect the following personal data:

- Name

- Email address

- Phone number

- Shipping address

- Payment information

 3. **Purpose of Data Collection**

We collect your personal data for the following purposes:

- To process and fulfill your orders

- To communicate with you regarding your orders

- To provide customer support

- To send promotional materials (with your consent)

4. **Legal Basis for Processing**

We process your personal data based on the following legal grounds:

- Your consent (for marketing communications)

- The necessity for the performance of a contract (to fulfill your orders)

- Compliance with legal obligations

 5. **Data Retention**

We retain your personal data only as long as necessary to fulfill the purposes for which we collected it, or as required by law.

 6. **Your Rights**

You have the following rights under GDPR:

- The right to access your personal data

- The right to rectify inaccurate data

- The right to request erasure of your data

- The right to restrict processing

- The right to data portability

- The right to withdraw consent at any time

To exercise any of these rights, please contact us at melanie.c@miraculouscrafts.co.uk.

7. **Data Security**

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, or misuse.

 8. **Sharing Your Data**

We do not sell or rent your personal data to third parties. We may share your data with trusted third-party service providers who assist us in operating our business, subject to strict data protection agreements.

 9. **Changes to This Statement**

We may update this GDPR Compliance Statement from time to time. We will notify you of any significant changes via email or through our website.

 10. **Contact Us**

If you have any questions or concerns about our data protection practices, please contact us at:

MR D Cole

dc.miraculouscrafts@gmail.com

Thank you for trusting Miraculous Crafts with your personal data.