Privacy policy

Introduction

At Claus Post, we value the privacy of our customers and are committed to protecting personal information with the utmost care. This privacy policy outlines the types of data we collect, how it is used, and the measures we take to ensure its security, in compliance with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018.

Information We Collect

1. Personal Data: This includes names, addresses, email addresses, and any other personal details provided when placing an order for personalised letters or making inquiries.

2. Payment Information: While we do not store credit card details, payment data may be processed by third-party payment gateways adhering to the strictest security standards.

3. Usage Data: We collect non-personal data related to your website usage through cookies and analytics tools to improve our website and services.

Use of Information

Your information is used for the following purposes:

• To fulfil your personalised order requests.
• To communicate with you regarding your orders and inquiries.
• To enhance our website and tailor our products to customer preferences.
• To comply with legal obligations or to defend against legal claims.

Data Sharing and Disclosure

We do not sell, trade, or rent personal information to third parties. Information may be shared with service providers who assist in conducting our business, such as delivery companies and payment processors, under confidentiality agreements.

Data Security

We implement a variety of security measures to maintain the safety of your personal information, including SSL encryption for data transmission and secure data storage systems.

Your Rights

You have the right to access, rectify, or erase your personal data, as well as the right to restrict or object to certain processing of your data. If you wish to exercise these rights, please contact us.

Retention of Data

We retain personal data for as long as necessary to provide the requested service, comply with legal requirements, resolve disputes, and enforce our policies.

The Workshop’s personalisation review period is 90 days. Completed, cancelled or permanently stopped orders become eligible for removal of personalisation when their last update is more than 90 days old and outstanding order, message and printing checks are resolved. Removal is a separate checked action, not an automatic deletion exactly 90 days after purchase.

Raw incoming shop-event records have a configured seven-day retention window. The automated housekeeping job is not currently enabled, so those records may remain longer until a checked deletion is carried out. Essential order, financial and audit records may remain where needed for legal obligations or to resolve a dispute. Encrypted backup copies are retained separately. The Workshop backup job does not currently expire them automatically. Removing information from the working system does not immediately remove it from existing backups. You can ask us about deletion and the records we need to retain.

Emails that are not linked to an order are handled separately from that order’s records. Removing an order’s personalisation does not automatically remove those separate conversations or copies held by our email provider.

Changes to the Policy

This privacy policy may be updated periodically. We will notify you of any significant changes by posting the new policy on our website or through direct communication.

Contact Us

If you have any questions about this privacy policy, please contact us at info@clauspost.com

Consent

By using our website and services, you consent to the collection and use of information as outlined in this privacy policy.