The Practical Publishing Group consists of:
- CraftStash Ltd which operates the website craftstash.co.uk
- Practical Publishing International Ltd which publishes craft magazines including Simply Cards & Papercraft, Papercraft Essentials, Creative Stamping, Die-Cutting Essentials, Crochet Now, Knit Now, Quilt Now, Sew Now and Love Sewing, and manufactures craft products
- Magnesium Media Ltd which publishes craft books and magazines
- Practical Pattern Designs Ltd which manufactures sewing patterns under the Simple Sew brand
In this document, the terms 'we' and 'us' mean the Group and its brands.
We take seriously our responsibilities around the collection, protection and use of your personal data. This policy sets out responsibilities as Data Controller for the data we collect, why we collect it, and your rights and choices regarding this data.
We keep this policy under regular review and we will place any updates on this page.
You can choose not to share your personal data with us, or refuse to allow certain types of processing. This may however mean we are unable to provide some of our services to you where those services are reliant on the processing of personal data.
Protecting Personal Data
We take seriously our responsibility to safeguard your personal data. Measures taken to protect it include the use of SSL-secured websites, firewalls, data encryption, and restricting systems access to those employees who require it to carry out their duties.
In the case of individual purchases, we do not store credit card details. In the case of recurring subscription payments, credit card details are encrypted and stored securely.
Retaining Personal Data
We’ll only keep your personal data for as long as it is needed for the purpose for which it was collected. Once it is no longer required for that purpose, we'll ensure it is deleted.
Sharing Personal Data
We may share your data with third parties as part of a Company sale or restructure, or for other reasons to comply with a legal obligation upon us.
In order to provide the highest quality service to our customers, we work with carefully selected service providers who carry out certain functions on our behalf. These include payment processing companies, delivery companies, email service providers and other information technology companies.
We share selected information with these service providers in order to enable them to deliver the services on our behalf. We have a data processing agreement in place with third parties we use to process your data under our instructions as part of providing our services to you. Third parties must implement appropriate technical and organisational measures to ensure the security and confidentiality of your data.
We only share such data as is necessary to provide the services, and the service providers treat your personal information with the same degree of care and trust as we do.
Other than this, we will not share your information with companies outside the Group without your express consent.
Where data is processed
Some personal data we collect from you may be transferred to, stored at, or processed at a destination outside the European Economic Area ("EEA"), or processed by companies outside the EEA who work for us or for one of our service providers. Where this is the case, appropriate technical and organisational measures are applied to ensure the security and confidentiality of your data is treated in line with this Policy.
Automated Decision Making
Automated decision making means making decisions about you using no human involvement e.g. using computerised algorithms or programmes. Aside from credit checks undertaken when you request to pay in instalments, we do not undertake automated decisions with your data.
Opting out of marketing communications
You can opt out of email communications by clicking the Unsubscribe link at the bottom of all emails. This is applied on a brand-by-brand basis, so that for instance you can opt out of emails from one of our brands whilst still receiving emails from another.
Your personal data rights
You have the following rights, with some restrictions, in relation to the personal data we hold on you:
- the right to be informed about the data we hold on you and what we do with it
- the right of access to the data we hold on you
- the right for any inaccuracies in the data we hold on you to be corrected (rectified)
- the right to have data deleted in certain circumstances (erasure)
- the right to restrict the processing of the data
- the right to transfer the data we hold on you to another party (portability)
- the right to object to the inclusion of any information;
- the right to regulate any automated decision-making and profiling of personal data.
Should you wish to exercise these rights, you can email firstname.lastname@example.org or write to Privacy Department, CraftStash, St Christopher House, 217 Wellington Road South, Stockport, SK2 6NG, UK. For your protection, we will ask you to verify your identity before actioning any requests in relation to your personal data rights.
Making A Complaint
We will make every attempt to ensure you are satisfied with our handling of your data requests, however, you are entitled to raise a complaint with the Information Commissioner (ICO) if you are not satisfied. You can contact the ICO at https://ico.org.uk/concerns/
This page was updated 14 June 2021 – v1.1 (JM)