We Are Makers — Directory Privacy Notice

UK and EEA visitors • Draft v1 • DRAFT — for completion and legal review

This is a scaffold. The section structure and starting content below are pre-filled from how the Directory actually works, but the copy must be completed and reviewed by a solicitor before launch.

This Privacy Notice explains how We Are Makers Global Ltd collects and uses personal data through the We Are Makers Directory at wearemakers.directory (the Directory). It should be read together with our Cookie Policy.

1. Who we are (data controller)

We Are Makers Global Ltd (WAM, we, us or our) is a company incorporated in Scotland under company number SC514137, with its registered office at 18 Caledonia Place, Aviemore, PH22 1NW, United Kingdom. We are the controller of the personal data described in this notice.

For any privacy question, or to exercise your rights, contact us at jack@wearemakers.info or at the postal address above.

2. The personal data we collect

Account data — your email address and a securely hashed password.
Maker profile data — business name, maker name, description/biography, approximate location and address, images, website and social-media links, and the crafts/tags you select.
Contact and enquiry data — any contact details you publish and messages you send us.
Payment data — subscription and billing information. Card payments are processed by our payment provider (Stripe); we do not store your full card details.
Technical data — IP address, approximate geolocation, device/browser information, and information collected via cookies and similar technologies (see the Cookie Policy).

3. How and why we use your data (purposes)

Create and manage your account and maker listing.
Take payment for, and administer, your membership.
Display your approved profile on the public Directory and map, and enable discovery/search.
Send service (transactional) messages such as confirmation and account emails.
Send marketing email only where you have opted in, which you can withdraw at any time.
Maintain the security, integrity and proper working of the Directory, and prevent fraud and abuse.
Comply with our legal, accounting and record-keeping obligations.

Contract — providing the Directory service and your membership.
Consent — marketing email, and non-essential cookies. You can withdraw consent at any time.
Legitimate interests — securing the service, preventing fraud, and improving the Directory, balanced against your rights.
Legal obligation — keeping records required by law (for example, tax and accounting).

5. What is shown publicly

Your approved profile is published publicly on the Directory and map — including your business/maker name, description, images, links, and an approximate location shown within about a 5-mile area. Your exact address is not published. You control what you include in your profile.

We use trusted providers who process personal data on our behalf or receive it to provide their service, including: Stripe (payments), Mailjet (transactional email), Klaviyo (marketing email and related analytics), Amazon Web Services (hosting and image storage), Nominatim / OpenStreetMap (address geocoding), ipapi (approximate IP geolocation) and OpenFreeMap (map tiles). We may also disclose data where required by law or to protect rights, safety and security.

7. International transfers

Some of our providers are located outside the United Kingdom or European Economic Area (for example, in the United States). Where we transfer personal data internationally, we rely on an approved transfer mechanism and appropriate safeguards (such as adequacy regulations or the UK International Data Transfer Agreement / Standard Contractual Clauses). Contact us for details of the safeguards used.

8. How long we keep your data (retention)

We keep your data for as long as your account is active and for a reasonable period afterwards to meet legal, accounting, security and record-keeping requirements, after which it is deleted or anonymised. When a listing ends we remove it from the public Directory within a reasonable period, though we may keep secure archival copies as described in the Membership Agreement.

9. Your rights

Subject to conditions in the law, you have the right to access, rectify, erase, restrict or object to the processing of your personal data, to data portability, and to withdraw consent where we rely on it. To exercise any right, contact us using the details above. You also have the right to complain to the UK Information Commissioner's Office at ico.org.uk; if the EU GDPR applies to you, you may also complain to your local EEA supervisory authority.

10. Cookies

We use cookies and similar technologies as described in our Cookie Policy, and ask for your consent to non-essential cookies through our consent tool.

11. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit (TLS) and securely hashed passwords. No system is completely secure, but we work to protect your data and to respond appropriately to any incident.

12. Automated decision-making

We do not make decisions producing legal or similarly significant effects about you based solely on automated processing.

13. Changes to this notice

We may update this notice from time to time and will publish the updated version here with a new date.

14. Document details

Last updated: [INSERT DATE]

Policy owner: We Are Makers Global Ltd

Status: Draft for completion and legal review