The GDPR (General Data Protection Regulation) is a new, European-wide law that replaces the Data Protection Act 1998 in the UK. Copper Creations is GDPR compliant. Any information provided by the customer at the point of sale is kept solely for my own tax purposes for the required amount of time as set by HMRC. Payment is via PayPal who have their own GDPR statement according to your account with them.
Postage is via Royal Mail for the majority of sales however occasionally I use parcel companies. I will be required to provide them with your email address to notify you of delivery. Each parcel company and Royal Mail also have their own GDPR compliance statement.
All personal details are kept securely and never passed to anyone other than for postage and payment purposes, as above