PRIVACY NOTICE
1. Who We Are
JC Threads and The Pottery Shed Steyning (Trading as JC Threads) ("we", "us", "our") provides Christian T Shirts and hoodies, handmade pottery, pottery classes, commissions, and related creative services both online and in person.
Data Protection Contact: sales@jcthreads.co.uk
We are the "data controller" for the personal data we collect.
---
2. The Data We Collect
We collect the following categories of personal data depending on how you interact with us:
• Identity data — name, email address, phone number
• Contact data — postal address, billing address
• Order data — items purchased, order notes, delivery details
• Payment data — processed securely by PayPal/Ecwid (we never see full card numbers)
• Marketing data — newsletter sign‑ups, consent records
• Analytics data — device information, browsing behaviour, cookies
• Event/class data — pottery class attendee information, emergency contact (if provided)
• Commission data — photos, artwork references, design notes
• Messaging data — WhatsApp/Messenger communications
• Market stall sign‑up data — handwritten or digital consent forms
---
3. How We Collect Your Data
We collect data through:
• Purchases on our Ecwid store
• Ecwid Quick Site forms
• PayPal checkout
• Market stall sign‑up sheets
• Pottery class bookings
• In‑person commissions
• WhatsApp or Messenger conversations
• Social media interactions
• Cookies and analytics tools
---
4. Why We Use Your Data (Lawful Bases)
A. To fulfil your order
Lawful basis: Contract
• Processing payments
• Delivering items
• Managing refunds
• Contacting you about your order
B. To run pottery classes and workshops
Lawful basis: Contract
Emergency contact details: Legitimate interests (safety)
C. To manage commissions
Lawful basis: Contract
D. To send email newsletters
Lawful basis:
• Consent (for sign‑ups)
• Soft opt‑in (for existing customers buying similar products)
E. To run social media ads
Lawful basis:
• Consent (if uploading customer lists)
• Legitimate interests (general advertising not based on personal data)
F. To comply with the law
Lawful basis: Legal obligation
• Tax records
• Accounting
• Responding to lawful requests
G. To improve our website and services
Lawful basis: Consent (analytics cookies)
---
5. Sharing Your Data
We share data only with trusted service providers:
• Ecwid (store platform)
• PayPal (payment processor)
• Email marketing provider (e.g., MailerLite/Mailchimp)
• Meta/Instagram (ads, if consent is given)
• WhatsApp/Messenger (communication)
• Event venues (only where necessary for class administration)
We never sell your data.
---
6. International Transfers
Some providers (e.g., Meta, Mailchimp) may store data outside the UK.
We ensure appropriate safeguards such as:
• UK Addendum to Standard Contractual Clauses
• Adequacy decisions
---
7. How Long We Keep Your Data (Summary)
A full retention schedule is in your Data Retention Policy, but in summary:
• Orders: 6 years (legal requirement)
• Newsletter data: Until you unsubscribe
• Market stall sign‑ups: 2 years
• Pottery class records: 2 years
• Commission references: 2 years
• WhatsApp/Messenger chats: 1 year
• Analytics data: per cookie policy
---
8. Your Rights
You have the right to:
• Access your data
• Correct inaccurate data
• Request deletion
• Restrict processing
• Object to marketing
• Withdraw consent
• Data portability
To exercise any right, email: sales@jcthreads.co.uk
---
9. Complaints
You can contact us at sales@jcthreads.co.uk.
You also have the right to complain to the ICO: ico.org.uk
---
10. Cookies
We use essential and non‑essential cookies.
Non‑essential cookies (analytics, advertising) require consent.
Full details are in the Cookie Policy.
---
11. Updates to This Notice
We may update this notice to reflect legal or operational changes.
The latest version will always be available on our website.
COOKIE POLICY
1. About This Policy
This Cookie Policy explains how JC Threads and The Pottery Shed Steyning (Trading as JC Threads) ("we", "us", "our") uses cookies and similar technologies on our:
• Ecwid online store
• Ecwid Quick Site
• Linked pages or embedded content
• Any website or landing page we operate
This policy should be read alongside our Privacy Notice.
---
2. What Are Cookies?
Cookies are small text files placed on your device when you visit a website. They help websites function, improve performance, and provide analytics and advertising features.
We use:
• Cookies
• Pixels (e.g., Meta Pixel)
• Local storage
• Session storage
---
3. Types of Cookies We Use
A. Essential Cookies (Strictly Necessary)
These cookies are required for the website to function. They:
• Enable checkout
• Maintain your shopping cart
• Keep you logged in
• Secure the site
• Process payments via Ecwid and PayPal
Legal basis: Legitimate interests (site functionality)
Consent required: No
Examples include:
• Ecwid session cookies
• Cart cookies
• Security tokens
• PayPal checkout cookies
---
B. Functional Cookies
These improve your experience but are not strictly necessary.
Examples:
• Remembering preferences
• Saving form inputs
• Language settings
Legal basis: Consent
Consent required: Yes
---
C. Analytics & Performance Cookies
These help us understand how visitors use our site.
Examples:
• Ecwid analytics
• Google Analytics (if enabled)
• Traffic and behaviour tracking
Legal basis: Consent
Consent required: Yes
Loaded only after acceptance: Yes
---
D. Advertising & Social Media Cookies
Used for:
• Social media ads
• Retargeting
• Measuring ad performance
• Meta Pixel tracking
Examples:
• Meta (Facebook/Instagram) Pixel
• TikTok Pixel (if used)
• Google Ads cookies
Legal basis: Consent
Consent required: Yes
Loaded only after acceptance: Yes
---
4. Cookies Used by Ecwid
Ecwid automatically sets:
Essential cookies
• Cart functionality
• Checkout
• Security
• Session management
Optional cookies (require consent)
• Analytics
• Tracking
• Marketing integrations
---
5. Third‑Party Cookies We Use
We may use cookies from:
• Ecwid (store platform)
• PayPal (payments)
• Meta (advertising)
• Google (analytics/ads)
• Email marketing provider (tracking opens/clicks)
Each provider has its own privacy and cookie policies.
---
6. How We Obtain Consent
We use a cookie banner that:
• Appears on first visit
• Allows Accept all
• Allows Reject all
• Allows granular choices
• Blocks non‑essential cookies until consent is given
• Records consent
• Allows withdrawal at any time
You can change your cookie settings at any time via the "Cookie Settings" link on our site.
---
7. How to Withdraw Consent
You can:
• Adjust your cookie preferences using our cookie banner
• Clear cookies in your browser
• Email us at sales@jcthreads.co.uk
Withdrawal does not affect the lawfulness of processing before withdrawal.
---
8. How Long Cookies Last
Cookies may be:
• Session cookies — deleted when you close your browser
• Persistent cookies — stored for a set period
Typical durations:
• Essential cookies: until session ends
• Analytics cookies: 1–24 months
• Advertising cookies: 1–24 months
Exact durations depend on the provider.
---
9. Managing Cookies in Your Browser
You can block or delete cookies using your browser settings.
However, blocking essential cookies may affect site functionality.
---
10. Updates to This Policy
We may update this policy to reflect:
• Legal changes
• Platform changes (e.g., Ecwid updates)
• New tools or integrations
The latest version will always be available on our website.
DATA RETENTION POLICY
1. Purpose of This Policy
This Data Retention Policy explains how long JC Threads and The Pottery Shed Steyning (Trading as JC Threads) ("we", "us", "our") keeps personal data and the lawful reasons for doing so.
We only keep personal data for as long as necessary for:
• Legal obligations
• Contract fulfilment
• Accounting and tax requirements
• Customer service
• Safety (for classes)
• Proof of consent
• Business operations
When data is no longer needed, we securely delete or anonymise it.
---
2. Summary of Retention Periods
Below is a complete retention schedule covering all data you collect.
---
A. Customer Orders (Online & In‑Person)
Data: Name, contact details, order details, delivery info
Retention: 6 years
Reason: Legal obligation (tax, accounting, HMRC requirements)
---
B. Payment Information
Data: Payment confirmations, transaction IDs
Retention: 6 years
Reason: Legal obligation
We never store full card numbers — PayPal/Ecwid handle this.
---
C. Email Newsletter Data
Data: Email address, consent record, sign‑up method
Retention:
• Until the user unsubscribes, plus
• 2 years to maintain proof of consent
Reason: PECR compliance, legitimate interests
---
D. Market Stall Sign‑Up Sheets
Data: Names, emails, handwritten consent
Retention: 2 years
Reason: Proof of consent, marketing compliance
---
E. Pottery Class Attendee Information
Data: Names, contact details, emergency contact (optional)
Retention: 2 years
Reason: Safety, administration, insurance queries
---
F. Commission‑Specific Data
Data: Photos, artwork references, design notes
Retention: 2 years
Reason: Customer service, repeat orders, dispute resolution
---
G. WhatsApp & Messenger Communications
Data: Chat messages, order details, photos
Retention: 1 year
Reason: Customer service, dispute resolution
---
H. Social Media Advertising Data
Data: Custom audience lists, ad interaction data
Retention:
• Customer lists: Until consent withdrawn or campaign ends
• Ad platform data: As per Meta/Google retention policies
Reason: Consent, legitimate interests
---
I. Analytics & Cookie Data
Data: Device info, browsing behaviour, cookie IDs
Retention:
• Analytics cookies: 1–24 months
• Advertising cookies: 1–24 months
• Consent logs: 2 years
Reason: Consent, PECR compliance
---
J. Customer Service Messages (Email)
Data: Emails, enquiries, support messages
Retention: 2 years
Reason: Customer service, dispute resolution
---
K. Website Form Submissions (Ecwid Quick Site)
Data: Names, emails, messages
Retention: 2 years
Reason: Customer service, enquiries
---
L. Business Records & Internal Notes
Data: Operational notes, supplier communications
Retention: 6 years
Reason: Legal obligation
---
3. Secure Deletion Methods
We delete or anonymise data using:
• Permanent deletion from Ecwid
• Secure deletion from email systems
• Clearing WhatsApp/Messenger chats
• Shredding paper sign‑up sheets
• Deleting files from devices and cloud storage
• Removing customer lists from Meta/Google Ads
---
4. Your Rights
Customers may request:
• Deletion
• Correction
• Access
• Restriction
• Withdrawal of consent
Requests should be sent to: sales@jcthreads.co.uk
---
5. Policy Review
This policy is reviewed annually or when:
• Laws change
• New tools are added
• Selling methods change
• Data types change
DATA PROTECTION COMPLAINTS PROCESS
1. Purpose of This Process
This document explains how JC Threads and The Pottery Shed Steyning (Trading as JC Threads) ("we", "us", "our") handles complaints relating to:
• Personal data
• Privacy
• Marketing communications
• Consent
• Cookies
• Data rights
• Security concerns
This process is required under the Data Use & Access Act 2025, enforceable from 19 June 2026.
---
2. How to Make a Data Protection Complaint
Customers can submit a complaint by contacting:
Email: sales@jcthreads.co.uk
Subject line recommended: "Data Protection Complaint"
Complaints may relate to:
• How their data was collected
• How long data is kept
• Marketing communications
• Consent issues
• Data accuracy
• Access requests
• Cookie usage
• WhatsApp/Messenger communications
• Market stall sign‑up sheets
• Pottery class attendee data
• Commission‑related data
---
3. What Happens After You Submit a Complaint
We follow a structured, legally compliant process:
Step 1 — Acknowledgement (within 30 days)
We will:
• Confirm we have received the complaint
• Provide a reference number (if applicable)
• Outline the next steps
• Request any additional information if needed
Step 2 — Investigation
We will:
• Review the complaint
• Check relevant systems (Ecwid, PayPal, email, WhatsApp/Messenger, sign‑up sheets, class records)
• Speak to any staff involved (if applicable)
• Verify consent records
• Review retention schedules
• Assess whether a breach or error occurred
Step 3 — Response
We will provide a written response that includes:
• Findings of the investigation
• Any corrective actions taken
• Any changes made to our processes
• Your rights and next steps
Step 4 — Resolution
We aim to resolve all complaints within 90 days, unless the issue is complex.
---
4. Possible Outcomes
Depending on the complaint, outcomes may include:
• Correction of inaccurate data
• Deletion of data
• Restriction of processing
• Withdrawal of consent
• Updated marketing preferences
• Updated cookie settings
• Improvements to internal processes
• Staff training
• Notification of a data breach (if applicable)
---
5. If You Are Not Satisfied
If you are unhappy with our response, you may escalate your complaint to:
Information Commissioner's Office (ICO)
Website: ico.org.uk
Phone: 0303 123 1113
We will include this information in all complaint responses.
---
6. Record‑Keeping Requirements
We maintain a Data Protection Complaints Log that records:
• Date complaint received
• Customer name (if provided)
• Nature of complaint
• Systems involved
• Actions taken
• Date resolved
• Staff member responsible
Retention of complaint records: 6 years (legal requirement).
---
7. Confidentiality
All complaints are handled confidentially.
Only staff involved in resolving the issue will have access to the information.
---
8. Updates to This Process
We review this process annually or when:
• Laws change
• New systems are introduced
• Selling methods change
• New data types are collected
The latest version will always be available on our website.
DATA COLLECTION NOTICE
(For Market Stalls, Church Fairs, Community Events & Pottery Classes)
JC Threads and The Pottery Shed Steyning (Trading as JC Threads)
We care about your privacy and want you to know how your information is used.
---
1. What Data We Collect
When you sign up at our stall, class, or event, we may collect:
• Your name
• Your email address
• Your phone number (optional)
• Your consent preferences
• Any notes relating to pottery classes or commissions
This may be collected on:
• Paper sign‑up sheets
• Digital forms
• QR‑code sign‑ups
• WhatsApp/Messenger messages
See our full Privacy Notice for details.
---
2. Why We Collect Your Data
We use your information to:
• Send email newsletters about new products, classes, and events
• Contact you about pottery classes or commissions
• Provide updates you've asked for
• Keep a record of your consent
We will never sell your data.
---
3. Legal Basis for Using Your Data
We rely on:
• Consent — when you sign up for newsletters or updates
• Contract — when you book a class or commission
• Legitimate interests — for safety and administration
You can withdraw consent at any time.
---
4. How Long We Keep Your Data
• Market stall sign‑ups: 2 years
• Pottery class attendee information: 2 years
• Commission notes: 2 years
• WhatsApp/Messenger messages: 1 year
• Newsletter data: until you unsubscribe
Full details are in our Data Retention Policy.
---
5. Your Rights
You have the right to:
• Access your data
• Correct your data
• Ask us to delete your data
• Withdraw consent
• Object to marketing
• Make a complaint
Learn more in our Complaints Process.
---
6. How to Contact Us
For any privacy questions or requests:
Email: sales@jcthreads.co.uk
---
7. How to Unsubscribe
You can unsubscribe from emails at any time by:
• Clicking the link in any newsletter
• Emailing us at sales@jcthreads.co.uk
• Telling us in person at any event
---
8. Your Right to Complain
If you are unhappy with how we handle your data, you can contact:
Information Commissioner's Office (ICO)
ico.org.uk
MARKETING CONSENT FORM
1. Who We Are
JC Threads and The Pottery Shed Steyning (Trading as JC Threads) ("we", "us", "our") would like to send you updates about:
• New products
• Pottery classes
• Events and market stalls
• Special offers
• Creative commissions
• Community activities
You can unsubscribe at any time.
Full details are in our Privacy Notice.
---
2. What You Are Consenting To
By giving your consent, you agree that we may:
• Send you email newsletters
• Contact you about classes, events, or commissions
• Use your data for social media advertising, if you choose to allow it
• Store your information securely for up to 2 years (or until you unsubscribe)
You can withdraw consent at any time by emailing sales@jcthreads.co.uk.
See our Data Retention Policy for how long we keep your data.
---
5. How We Store Your Consent
We keep:
• Digital consent records (Ecwid, email platform)
• Scanned copies of paper forms
• Paper forms stored securely (locked drawer)
Retention:
• Consent records: 2 years
• Newsletter data: until you unsubscribe
• Paper forms: securely shredded after retention period
---
6. Withdrawing Consent
You can withdraw consent at any time by:
• Clicking "unsubscribe" in any email
• Emailing sales@jcthreads.co.uk
• Telling us in person at any event
• Messaging us on WhatsApp/Messenger
Withdrawal does not affect the lawfulness of previous processing.
---
