Effective Date: November 2024

At Driftwood Creative Designs, we are committed to protecting your privacy and handling your personal data responsibly. This Privacy Policy outlines how we collect, use, and protect your information, in compliance with the General Data Protection Regulation (GDPR).

1. Information We Collect
We may collect and process the following personal data: 

 
Identity Information: Name, email address, and billing details.  
Transaction Information: Details of the digital products you purchase.  
Technical Data: IP address, browser type, operating system, and usage data.  
Communication Preferences, Your consent for marketing communications.  

2. Legal Basis for Processing Your Data
Under GDPR, we process your personal data based on the following legal grounds:  

Contractual Necessity: To fulfil your orders and provide services.  
Legitimate Interests: To improve our services and communicate effectively with you.  
Consent: For marketing communications (you may withdraw consent at any time).  
Legal Obligations: To comply with applicable laws and regulations.  

3. How We Use Your Information
We use your data for the following purposes:  

To process and deliver your orders.  
To provide customer support and respond to your inquiries.  
To send updates, promotions, or newsletters (only with your consent).  
To ensure the security of our website and prevent fraud.  
To comply with legal or regulatory requirements.

4. Sharing Your Information
We do not sell or rent your data. We may share your information with:  

Payment Processors: To securely process transactions.  
Service Providers: Trusted third parties assisting in hosting, email delivery, or analytics.  
Legal Authorities If required by law or to protect our rights.  

We ensure all third-party providers comply with GDPR and handle your data securely.

5. International Data Transfers
If your data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards, such as Standard Contractual Clauses or equivalent mechanisms, to protect your data.

6. Your GDPR Rights
Under GDPR, you have the following rights:  

Access: Request access to your personal data.  
Rectification: Correct inaccurate or incomplete data.  
Erasure (Right to Be Forgotten): Request deletion of your data, subject to legal obligations.  
Restriction: Limit the processing of your data.  
Data Portability: Request a copy of your data in a structured, machine-readable format.  
Objection: Object to processing for direct marketing or based on legitimate interests.  
Withdraw Consent: Revoke consent for data processing at any time.  

To exercise these rights, please contact us at info@driftwoodcreativedesigns.co.uk We aim to respond within one month.

7. Data Retention
We retain your personal data only as long as necessary for the purposes outlined in this policy, or as required by law.  

8. Security Measures
We implement technical and organizational measures to protect your data from unauthorized access, loss, or alteration. However, no system is entirely secure, so please handle your information responsibly.

9. Cookies and Tracking Technologies
We use cookies to enhance your browsing experience and analyse website usage. You can manage your cookie preferences or disable cookies through your browser settings.  

For detailed information, refer to our Cookie Policy.

10. Complaints
If you believe your data rights have been violated, you have the right to lodge a complaint with your local data protection authority. For example:  
In the UK: Contact the Information Commissioner's Office (ICO) at [www.ico.org.uk](https://www.ico.org.uk).  

11. Updates to This Privacy Policy
We may revise this Privacy Policy to reflect changes in our practices or legal requirements. Updates will be posted on this page with the revised effective date.

12. Contact Us
If you have questions about this Privacy Policy or your data, contact us at:  
Email: info@driftwoodcreativedesigns.co.uk