Privacy Policy


This privacy notice provides you with details of how we collect and process your personal data through use of our

By providing us with your data, you warrant to us you are legally allowed do so.

Carol McConnell trading as Paperlace is the data controller and we are responsible for your personal data ( from here we shall be referred to as we, us or our in this privacy notice)

Contact details:

Carol McConnell T/A Paperlace


16 Moorfoot View


EH23 4TN

What data do we collect about you and why?


Personal data means any information capable of identifying an individual. 

We may process the following categories of personal data about you:

 Communication Data

Includes any communication that you send to us. 

We process this data for the purposes of communicating with you, for record keeping, processing your order and for the establishment, pursuance or defence of legal claims. 

Customer Data

Includes data relating to any purchases of goods and/or services such as your name, title, billing address, delivery address, email address, phone number, contact details, purchase details and payment details. We process this data to supply the goods and/or services you have purchased and to keep records of such transactions. We keep this information to show that you have entered a contract with us. The contract is not entered into until we have posted the good to you. 

User Data

We may collect user data. That includes data about how you use our website or post to any other of our online services, for example face book or Instagram. We process this data to operate our website, to ensure the security or backups of our website or databases and to enable publication and administration of our website and other online services and business.

Technical Data

We may collect technical data. This includes data about your use of our website and our other online services such as your IP address, your login data, details about your browser, length of your visits to our website pages, which pages you have viewed, details about the number of times you use our website, and we may collect data on the technology of the devices you use to access our website. The source of this data is from our analytics tracking system. We process this data to analyse your use of our website and other online services, to administer and protect our business and website, to deliver relevant website content and advertisements to you and to understand the effectiveness of our advertising.  

Marketing Data

We may collect marketing Data. This includes data about your wishes in receiving marketing material from us and the way in which you prefer to communicate. We process this data to enable you to take part in promotions, competitions, prize draws and give-aways. We also use it to deliver our website and advertisements to you and to measure the effectiveness of our advertising.  

To grow our business, we may use all the above data to deliver website content and advertisements to you, including Facebook adverts and to understand how the advertising is working.


Sensitive Data

We do not collect any Sensitive Data about you and we do not collect any information about criminal convictions and offences.

Where we are required to collect personal data by law, or under the terms of the contract between us and you do not provide us with that data when requested, we may not be able to perform the contract (for example, to deliver goods or services to you). If you don’t provide us with the requested data, we may have to cancel a product or service you have ordered but we shall notify you of this cancellation.

We may collect data about you when you provide certain information to us, for example by filling in forms on our site, placing an order or by sending us emails. Certain data is collected from you automatically as you use our website. 

Please see our cookie policy.

We may receive data from third parties such as analytics providers such as Google based outside the EU, advertising networks such as Facebook based outside the EU, such as search information providers such as Google based outside the EU and others.

We will NOT share your personal data with any third party for marketing purposes. We may have to share your data with other companies to provide you with the service you have asked us to provide. eg. post office, couriers, hotels, venues, our suppliers if we need them to help provide the service.

You can ask us to stop sending you messages at any time  by emailing us at 

This opt-out does not apply to personal data provided as a result of other transactions, such as purchases.

We may have to share your personal data with the services or providers below

  • Service providers who provide IT and system administration services.

  • Subcontractors such as couriers to assist with delivery of goods.

  • Payment providers who provide a payment gateway.

  • Professional advisers including lawyers, bankers, auditors and insurers

  • Government bodies that require us to report processing activities.

  • Third parties to whom we need communication to provide the service you have asked for.

  • Our suppliers if we need to get something sent directly to you or ordered specifically for you.

We require all third parties to whom we transfer your data to respect the security of your personal data and to treat it in accordance with the law. We only allow such third parties to process your personal data for specified purposes and in accordance with our instructions.

We have procedures in place to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach if we are legally required to.


We will only retain your personal data for as long as necessary. We need to retain part of your data to fulfil the purposes we collected it for, and for the purposes of legal and accounting measures.

For tax purposes the law requires us to keep basic information about our customers, including contact, identity, and financial a data for six years after they stop being customers. We may however delete your data before this point.

Your legal rights

Under data protection laws you have rights to protect your personal data. You may request we correct, delete, restrict or withdraw your consent.

Find out more at:

Please email us at to make any changes to your personal data. We may however be unable to complete your order if consent is withdrawn.

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data and to ensure you are not trying to breach someone else's data.

We will respond to all requests as soon as possible but if your request is complex it may take slightly longer to delete or amend your information but we shall to keep you informed. 

You have the right to contact the Information Commissioner’s Office (ICO) but please contact us first to resolve the issue.

Third party

Our website or social media platforms may have links to third-parties.

We do not control these third-party websites and are not responsible for their privacy statements, we encourage you to read the privacy notice of every website you visit before accepting.

Please read our cookie policy