PRIVACY POLICY – JESSICA BALDRY DESIGNS

Last updated: 12 December 2025

This Privacy Policy explains how Jessica Baldry (“I”, “me”, “my”) collects, uses, and protects personal data when you use my website www.jessicabaldrydesigns.con, purchase products, or subscribe to newsletters.

1. Data Controller

The data controller for this website is:

Jessica Baldry
Norwich, Norfolk
Email: jessica.baldry.design@gmail.com

You may contact me at any time with questions about how your personal data is handled.

2. Personal Data I Collect

I may collect and process the following categories of personal data:

Contact Information

  • Name

  • Postal address

  • Email address

  • Telephone number

Order Information

  • Products purchased

  • Payment details (processed securely by third-party payment providers)

  • Shipping information

Website & Analytics Data

  • IP address

  • Browser and device type

  • Pages visited

  • Clicks, searches, time spent on pages

  • Scrolling behaviour

  • Timestamps

I collect this data when you:

  • Place an order

  • Subscribe to my newsletter

  • Use or browse the website

3. Lawful Basis for Processing

I process personal data under the following lawful bases:

  • Performance of a contract: to fulfil and deliver orders

  • Consent: for newsletters and marketing emails

  • Legitimate interests: to analyse website usage and improve my products, services, and user experience

4. How I Use Your Personal Data

I use your personal data for:

  • Processing and fulfilling your orders

  • Sending newsletters and promotional communications (if subscribed)

  • Responding to enquiries and communicating about orders

  • Analysing website traffic and improving site performance

  • Complying with legal, tax, and accounting obligations

5. Data Retention

I retain personal data only for as long as necessary for each purpose:

  • Orders and payment records: 6 years (required for tax and accounting purposes)

  • Newsletter subscriber data: until you unsubscribe

  • Website analytics data: anonymised after 12 months

6. Cookies and Similar Technologies

My website uses cookies to provide essential functionality and analyse website performance.

Types of Cookies

  • Strictly necessary cookies: required for the website to function properly

  • Analytics cookies: used to measure site usage and help improve the website (e.g., Squarespace analytics)

Non-essential cookies are used only after you provide consent through the cookie banner. You can manage or withdraw your consent at any time via your browser settings.

7. Third-Party Service Providers

I use trusted third-party providers to support my business operations, including:

  • Website hosting and analytics: Squarespace

  • Payment processing: Stripe, PayPal (and any additional payment providers offered on the site)

  • Email marketing: newsletter and mailing list services

These providers process data only on my behalf and must protect it in accordance with UK GDPR.

8. Data Transfers Outside the UK

Some of my service providers may transfer personal data outside the UK.
These transfers are protected using:

  • Standard Contractual Clauses (SCCs), or

  • Other legally approved safeguards under UK GDPR

9. Your Rights

Under UK GDPR, you have the right to:

  • Access your personal data

  • Request corrections to inaccurate information

  • Request deletion of your data (“right to be forgotten”)

  • Restrict processing of your data

  • Object to processing, including marketing communications

  • Request data portability

  • Withdraw consent at any time (for consent-based processing)

  • Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise any of your rights, please contact me at jessica.baldry.design@gmail.com.

10. Security

I use commercially reasonable measures to protect your personal data.
However, no method of electronic transmission or storage is completely secure, and I cannot guarantee absolute protection.

11. Links to Other Websites

My website may include links to external sites. I am not responsible for the privacy practices, content, or policies of these third-party websites. Please review their privacy policies separately.

12. Updates to This Policy

I may update this Privacy Policy occasionally. The latest version will always be available on this website, and the “Last updated” date at the top will reflect the most recent revision.