Privacy Policy

1. Who we are

This website is operated by Nostalgia Time Machine Limited (“we”, “us” or “our”).

For privacy enquiries or requests relating to your personal information, please contact us through the messaging/contact facility on our Etsy shop.

2. What information we collect

This website is primarily a brochure-style website. We do not currently provide a website account, checkout, newsletter sign-up form or contact form, and we do not intentionally ask you to submit personal information directly through the website.

Depending on how you interact with us, we may receive or use:

• your name and contact details if you contact us through Etsy or another communication channel;
• information relating to an order or enquiry made through Etsy;
• information needed to administer the Nostalgia Time Machine Creator Rewards Programme, such as creator details, Creator Codes, Qualifying Sales, reward balances and payment history;
• where required for Creator Reward payments, payment details including the account holder name, sort code, account number or details for another payment method made available by us;
• identity or other verification information where reasonably required to verify a reward payment or investigate suspected fraud, abuse or unusual activity; and
• technical information associated with a visit to the website, such as IP address, browser/device information and basic request or security information, where this is processed by our hosting or security providers.

We will not ask you to provide online banking passwords, PINs, full payment-card security details or other credentials that would allow access to your bank or payment account.

3. How we use personal information

We may use personal information to:

• respond to enquiries and customer communications;
• administer orders, customer service and related records where necessary;
• operate and administer the Creator Rewards Programme where you participate;
• verify Qualifying Sales, calculate rewards and maintain Creator reward records;
• contact Creators through Etsy messaging, email, social media or another contact method associated with their participation in the Programme;
• obtain and verify payment information and make Creator Reward payments;
• investigate suspected fraud, abuse, incorrect tracking or unusual activity;
• keep appropriate business, accounting and legal records;
• protect our website, business and users against fraud, abuse or security incidents; and
• comply with legal and regulatory obligations.

Where required for reward payments, we may collect and process payment details, including bank account information, solely for the purpose of verifying and making Creator Reward payments and maintaining related accounting and legal records.

4. Our lawful bases

Where the UK GDPR applies, we use the lawful basis that is appropriate for the particular purpose. Depending on the circumstances, this may include:

• Contract: where processing is necessary to provide something you have requested or to administer an agreement with you, including administering the Creator Rewards Programme and making approved reward payments.
• Legal obligation: where we need to keep or disclose information to comply with a legal requirement, including applicable accounting, tax or record-keeping obligations.
• Legitimate interests: where processing is necessary for reasonable business, administration, payment verification, security or fraud-prevention purposes and those interests are not overridden by your rights.
• Consent: where we ask for your consent for a particular use of information and the law requires consent.

5. Etsy

Our website links to our Etsy shop. If you follow an Etsy link, purchase through Etsy or communicate with us through Etsy Messages, you are using Etsy's platform and Etsy will process personal information in accordance with its own policies. We do not control Etsy's independent processing of your personal information.

We may use Etsy Messages to contact a Creator about Programme administration or an approved reward and to request the payment information needed to make that reward payment.

Please see Etsy's Privacy Policy for information about how Etsy handles personal information.

6. Website hosting and technical information

Our website is hosted using Netlify. As part of providing hosting, security and website infrastructure, Netlify may process technical information associated with requests to the website, such as IP address and device or browser information.

We do not currently operate our own analytics or advertising tracking system on this website.

For more information about Netlify's own privacy practices, please see Netlify's Privacy Statement.

7. Cookies and similar technologies

The website does not currently use advertising or analytics cookies operated by Nostalgia Time Machine Limited.

Our hosting, security or third-party services may use strictly necessary technologies to provide or protect the website. If we introduce non-essential cookies or similar tracking technologies in future, we will update this policy and provide any consent mechanism required by law.

8. Who we share information with

We may share personal information only where reasonably necessary for the purposes described in this policy, including with:

• service providers who help us operate, host or secure the website;
• Etsy, where you interact with us, purchase through our Etsy shop or communicate with us through Etsy Messages;
• banks, payment providers or other financial service providers where necessary to verify or make a Creator Reward payment;
• professional advisers, accountants, insurers or authorities where disclosure is necessary to comply with the law, maintain appropriate records or protect our rights; and
• other service providers where this is necessary to provide a service you have requested or administer the Creator Rewards Programme.

We do not sell your personal information.

9. International transfers

Some of our service providers may process information outside the UK. Where personal information is transferred internationally, we will use the transfer mechanism and safeguards required by applicable data protection law.

10. How long we keep information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including to administer the Creator Rewards Programme, make and evidence payments, meet legal, accounting and reporting requirements, resolve disputes and enforce agreements.

Creator and reward records may be retained while you participate in the Programme and afterwards where reasonably necessary for accounting, tax, fraud-prevention, dispute-resolution or legal purposes.

Payment details will not be retained for longer than reasonably necessary for payment processing, payment verification and applicable accounting, legal or record-keeping requirements. Different types of information may therefore be kept for different periods. Where there is no fixed retention period, we consider the nature and sensitivity of the information, the purpose for which it was collected and our legal obligations when deciding how long to keep it.

11. How we protect information

We take reasonable technical and organisational measures designed to protect personal information against unauthorised access, use, alteration, disclosure, loss or destruction. Access to Creator payment information is limited to those who reasonably need it to verify or make reward payments, maintain appropriate records or comply with legal obligations.

No method of electronic communication or storage is completely secure. You should take reasonable care when sending payment details and should contact us promptly if you believe information supplied to us is incorrect or may have been compromised.

12. Your rights

Subject to applicable law and any relevant exemptions, you may have rights including:

• the right to ask for access to your personal information;
• the right to ask us to correct inaccurate or incomplete information;
• the right to ask for deletion of your information in certain circumstances;
• the right to ask us to restrict processing in certain circumstances;
• the right to object to certain processing, including processing based on legitimate interests;
• the right to data portability in circumstances where it applies; and
• the right to withdraw consent where we rely on consent as the lawful basis.

To exercise a relevant right, please contact us through the messaging/contact facility on our Etsy shop.

13. Complaints

If you have a concern about how we have handled your personal information, please contact us first so that we can try to resolve it.

You also have the right to complain to the UK's Information Commissioner's Office (ICO). The ICO's website is ico.org.uk.

14. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes to our website, services, Creator Rewards Programme, legal requirements or how we process personal information. The latest version will be published on this page with the date it was last updated.