Privacy Policy

Data Controller
Jodie MacAndrew

**Last updated: September 2026**

Who we are

Occasions Made by Jodie ("OM", "we", "us") is a sole trader business operated by Jodie MacAndrew, based in Berkshire, England. This policy explains how we collect, use, and protect your personal information when you visit occasionsmadebyjodie.co.uk, order through our Etsy shop, follow us on social media, or get in touch about our services (Bag Up, Launch Up, Brand Up, or Plan Up Occasions).

For any privacy questions, contact: jodiemacandrew@gmail.com

What personal data we collect

Depending on how you interact with us, we may collect:

- Contact details: name, email address, phone number
- Delivery details: postal address, for shipping party bags
- Order details: what you've bought or enquired about, order history
- Payment information: we do not store your card details. Payments are processed securely by Etsy, or by (bank transfer to OM/PayPal/other, if applicable) for direct bookings
- Enquiry and project details: information you share with us when discussing Launch Up, Brand Up, or Plan Up services (e.g. business background, event details, brand preferences)
- Website usage data: general analytics data (e.g. pages visited, browser type), if we use a service such as Google Analytics or our website builder's built-in analytics

How we use your data

We use your information to:

- Fulfil and deliver your order (party bags)
- Provide the service you've booked (planning, branding, marketing support)
- Respond to enquiries and communicate about your order or project
- Send updates or marketing where you've agreed to this (e.g. newsletter, Instagram/Facebook interaction)
- Meet our legal obligations, including keeping financial records for tax purposes
- Improve our website and services

Legal basis for processing

We process your data on the basis of:

- Contract: to fulfil an order or provide a service you've requested
- Consent: for marketing communications, which you can withdraw at any time
- Legitimate interest: to run and improve our business, respond to enquiries, and keep basic records
- Legal obligation: to retain financial records as required by HMRC

Who we share your data with

We do not sell your data. We may share it with:

- Etsy: for order processing and delivery, when you buy through our Etsy shop
- Royal Mail or other couriers: to deliver your order
- Payment processors: (Etsy, /PayPal/Banks) to process payments securely
- Email or booking tools: we use to manage enquiries (e.g. Gmail/Wave/other)
- HMRC: where required for tax and accounting purposes

We do not share your information with third parties for their own marketing purposes.

Cookies

Our website may use cookies to help it function properly and to understand how visitors use the site (e.g. via IONOS/Google Analytics). You can control or disable cookies through your browser settings.

How long we keep your data

- Order and financial records: kept for a minimum of 5 years, in line with HMRC requirements
- Enquiry and project details: kept for as long as reasonably needed to provide the service, then deleted or anonymised unless permission given to use for marketing purposes
- Marketing consent: kept until you unsubscribe or withdraw consent

Your rights

Under UK GDPR, you have the right to:

- Access the personal data we hold about you
- Ask us to correct inaccurate data
- Ask us to delete your data (where we're not legally required to keep it, e.g. for tax records)
- Object to or restrict certain processing
- Request your data in a portable format
- Withdraw consent to marketing at any time

To exercise any of these rights, contact jodiemacandrew@gmail.com. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk if you're unhappy with how we've handled your data.

Children's privacy

Our website is not directed at children, and we do not knowingly collect personal data from anyone under 13. Where a party bag or event relates to a children's celebration, we collect details from the parent or guardian placing the order, not the child.

Security

We take reasonable steps to protect your personal data, including using secure, reputable third-party platforms (Etsy, IONOS]) for payments and order processing. No method of transmission over the internet is 100% secure, but we work to protect your information appropriately.

Changes to this policy

We may update this policy from time to time. The "last updated" date at the top will reflect the most recent version.