Privacy Policy for Joy Palin Ceramics Last Updated: 16 September 2026 Thank you for visiting Joy Palin Ceramics (www.joypalinceramics.co.uk). We respect your privacy and are committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. 1. Important Information and Who We Are Joy Palin Ceramics is the data controller responsible for your personal data. If you have any questions about this privacy policy, or if you wish to exercise any of your legal rights, please contact us using the details below: Full Name: Joy Palin Email Address: info@joypalinceramics.com Postal Address: Farthings End, Ludchurch, Pembrokeshire, SA67 8LA Telephone Number: 07884 051921 2. The Data We Collect About You We may collect, use, store, and transfer different kinds of personal data about you, which we have grouped together as follows: Identity Data: Includes your first name and last name. Contact Data: Includes your email address, billing address, delivery address, and telephone numbers. Transaction Data: Includes details about payments to and from you, and specific records of workshops or ceramics you have purchased from us. Technical Data: Includes your internet protocol (IP) address, browser type and version, time zone setting, and location data gathered via cookies. Usage Data: Includes information about how you navigate and interact with our website, gallery, and blog. 3. How We Collect Your Personal Data We use different methods to collect data from and about you, including: Direct Interactions: You give us your Identity and Contact Data by filling in forms on our website, booking a workshop, subscribing to our email newsletter, or communicating with us by email or phone. Automated Technologies: As you interact with our website, we may automatically collect Technical Data about your equipment and browsing patterns via cookies and tracking tools deployed by Google Analytics. Hosting Platforms: Our website is hosted on the Wix.com platform. Wix provides us with the online infrastructure that allows us to manage bookings, showcase our gallery, and sell workshops to you. Your data may be stored through Wix.com’s data storage, databases, and general applications on secure servers behind a firewall. 4. How and Why We Use Your Personal Data Under the UK GDPR, we must have a lawful basis to process your data. We use your data for the following reasons: Performance of a Contract: To process, manage, and confirm your workshop bookings, deliver ceramic orders, and communicate vital event updates or customer support regarding your bookings. Consent (Email Newsletter): If you explicitly opt-in to join our mailing list, we will use your email address to send you updates about new collections, studio news, and upcoming workshop dates. You can withdraw your consent and opt out at any time by clicking the "Unsubscribe" link at the bottom of any email we send .Legitimate Interests (Google Analytics): We use third-party analytics tools like Google Analytics to track and measure how visitors interact with our website. This helps us understand what content is popular so we can improve our services. 5. Disclosures of Your Personal Data We do not sell your personal data. We only share your data with trusted third parties essential to running our business: Wix Business Platform: To host our website, process secure workshop bookings, and safely manage our client and subscriber database. Payment Gateways: All direct payment gateways offered by Wix.com adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council. Your transaction data is encrypted and handled securely; we never see or store your full credit or debit card details. Delivery Services: Royal Mail or courier networks to deliver physical ceramic items if ordered .Google LLC: For website traffic tracking via Google Analytics. International Data Transfers: Because Wix and Google are global companies, your data may be transferred to, and stored at, a destination outside the UK (such as the US). We ensure that these transfers are legally protected by using Standard Contractual Clauses (SCCs) approved by the UK government. 6. Data Security and Retention We have put in place appropriate security measures to prevent your personal data from being accidentally lost, altered, used, or accessed in an unauthorised way. We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for. This includes satisfying any legal, accounting, or statutory tax reporting requirements (typically 6 years for transactional records and invoice details under UK tax law). 7. Your Legal Rights Under the UK GDPR, you have rights in relation to your personal data, including the right to: Request access to your personal data. Request correction of inaccurate data we hold about you. Request erasure of your personal data ("the right to be forgotten").Object to processing or request restriction of processing. Request the transfer of your personal data to you or a third party. Withdraw consent at any time where we are relying on consent to process your mailing list data. If you wish to exercise any of these rights, please contact us at info@joypalinceramics.com. You also have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk).