Data Storage and Privacy Statement



1. Who We Are

Rebecca Carrozza is the data controller. You can contact us at hello@rebecca-carrozza.co.uk

2. Where We Store Your Data

To operate our business and fulfill your orders, we securely transfer and store your personal data with the following third-party data processors:

• Mailchimp: We use Mailchimp (owned by The Rocket Science Group LLC) to manage our email marketing communications. Your name and email address are stored on secure Mailchimp servers located in the United States. Mailchimp ensures lawful data transfers by adhering to the UK-US Data Privacy Framework Mailchimp GDPR.
• PayPal: We use PayPal to process your payments securely. When you make a purchase, your transaction data (name, billing address, and payment information) is processed and stored on PayPal’s servers in accordance with their strict privacy standards. We do not store your full payment card details ourselves.

3. Why We Collect Your Data

We only collect personal data when you voluntarily provide it, relying on the following lawful bases:

• Consent: For email marketing via Mailchimp, we rely on your explicit consent, which you can withdraw at any time.
• Contractual Obligation: For payment processing via PayPal, we process data necessary to fulfill the contract of your purchase.

4. Your Rights

Under the UK GDPR, you have the right to access, correct, or request the deletion of your personal data. You can unsubscribe from our mailing list at any time by clicking the "Unsubscribe" link at the bottom of our emails, or by contacting us directly.