Privacy Policy

Use of private information policy (GDPR)

Last updated: 28 November 2022

Summary 

We respect the EU’s General Data Protection Regulations (GDPR) and this policy explains how we collect and treat any information you give us. You won’t find any complicated legal terms or long passages of unreadable text. We’ve no desire to trick you into agreeing to something you might later regret. 

Who we are 

The data protection officer in respect of this website is: 

Jane Donnelly
A Yarn from North Ronaldsay
Sangar
North Ronaldsay
Orkney KW17 2BG

01857 633297 or 01857 633 242
northron.mill@btinternet.com

Your Personal Data 

Personal data is data that can be used to identify an individual. For example your name, email address, home address and IP address. We collect and process personal data in compliance with the General Data Protection Regulation and will never share it with third party marketers or anyone else unless we are forced to by law. 

How your personal data is collected on this website by us and by third parties 

Our contact form and email 

When you use our contact form or email address to contact us, we require your name, email address and telephone in order to reply to you. When you click the submit button on the contact form, your message and contact details are sent to us via email and are stored in our email system. 

Our online shop

When you shop with us we collect your name, address, email address and phone number as well as billing address for the purposes of processing your order and stored in our email system. We do not collect your payment details which are handled by PayPal.

PayPal

When you make a payment by Paypal, by clicking on the proceed to payment button, you understand and agree that: (i) you will be leaving the A Yarn from North Ronaldsay website and will be transferring to their payment platform,  (ii) any your information you enter shall be subject to their own privacy policy,  (iii) your information may be processed and stored outside of the European Union and (iv) they shall be responsible for all processing of your information. 

What information we hold 

When you contact us by email, use our online shop or through our website contact form, we collect your name, email address, phone number, address, IP address and also your billing address if that is different from your shipping address. 

If you do business with us, we keep records of the invoices we send you and the payments you make. 

All payments are processed by PayPal and we never process card payments directly but will always use companies who are GDPR and PCI DSS compliant and value security above all else.

What we use your information for 

We occasionally use your contact information to send you details of our products and services. When we do, you have the option to unsubscribe from these communications and we won’t send them to you again. We will use your information to send you invoices, statements, or reminders. 

Who’s responsible for your information at our company 

Jane Donnelly is responsible for the security of your information. You can contact her by email at northron.mill@btinternet.com or by phone on 01857 633297 or 01857 633 242 if you have any concerns about the information we store. 

Who has access to information about you 

When we store information in our own systems, only the people who need it have access. Our management team have access to everything you’ve provided, but individual employees have access to only what they need to do their job. 

The steps we take to keep your information private 

Where we store your information in third-party services, we restrict access only to people who need it.

The computers we use are all encrypted and protected by a passcode or fingerprint. These computers ask for authentication whenever they’re started or after 5 minutes of inactivity. Our mobile devices are also secured by fingerprint or facial recognition technology. 

Your rights 

In accordance with UK and European law under the General Data Protection Regulation (GDPR), you have numerous rights in regards to the personal data we hold about you, including: 

Right to confirmation – you have the right to know if we hold personal data that concerns you 
Right to access – you have the right to view and to obtain a copy of any personal data we hold that concerns you 
Right to rectification – you have the right to the correction of any inaccuracies within the personal data we hold that concerns you 
Right to erasure – you have the right to have your personal data removed from our systems 

Should you wish to exercise any of these rights, please contact us by email or by telephone. 

You can find out more about your rights under the GDPR here. 

How to complain 

We take complaints very seriously. If you’ve any reason to complain about the ways we handle your privacy, please contact Jane Donnelly by email at northron.mill@btinternet.com or by phone on 01857 633297 or 01857 633 242. If you prefer to write a letter, please send to the following address:

A Yarn from North Ronaldsay
Sangar
North Ronaldsay
Orkney KW17 2BG

Changes to the policy 

If we change the contents of this policy, those changes will become effective the moment we publish them on our website. 

Last Updated: This Privacy Policy was last updated on 28 November 2022.