Privacy Policy (United Kingdom)
Website: www.craftishly.co.uk
Company: Craftishly Ltd, registered in England and Wales (company number 144240070).
We are the data controller for your personal data. You can contact us initially using the Contact page regarding any privacy concerns.
1. Information We Collect
We collect personal information you provide when using our website or purchasing products, including:
-
Name, email address, billing and shipping address, phone number
-
Payment information (processed securely via Stripe — we do not store full card details)
-
Information you provide in comments, enquiries, or event registrations
-
IP address, browser type, and device information for security and fraud prevention
2. How We Use Your Information
We process your personal data for the following purposes:
-
To fulfil orders, process payments, and arrange delivery
-
To communicate about your orders, returns, or customer service enquiries
-
To prevent fraud and ensure website security
-
To improve our website and services, including analytics and troubleshooting
-
To send marketing communications if you have opted in
Legal basis: Processing is based on your consent, the performance of a contract, or our legitimate interests (e.g., fraud prevention and website security).
3. Cookies
We use cookies to improve your website experience.
-
Essential cookies: required for logging in, checkout, and site functionality
-
Optional cookies: store your preferences or remember comments (if applicable)
By using our website, you consent to our use of cookies. You may opt out of non-essential cookies in your browser settings.
4. Embedded Content from Other Websites
Our website may include embedded content, such as videos or images from third-party platforms.
These platforms may collect data about you, use cookies, and track your interaction.
We are not responsible for the privacy practices of third-party websites.
We encourage you to review their privacy policies before interacting.
5. Who We Share Your Data With
We do not sell your data. We share personal information only with:
-
Payment processors (Stripe) for payment handling
-
Shipping partners (e.g., Royal Mail, DPD) to deliver orders or handle claims for lost/damaged items
-
IT and security service providers for website maintenance and fraud prevention
-
Automated spam detection services for comments or enquiries
All third parties we work with are data processors and are required to keep your information secure.
6. How Long We Retain Your Data
Customer account and order information is kept as long as necessary to provide services, comply with legal obligations, and resolve disputes.
Comments and submitted content may be retained indefinitely to moderate future submissions.
We periodically review and delete unnecessary data in accordance with GDPR principles.
7. Your Rights
Under UK GDPR, you have the following rights:
-
Access and receive a copy of your personal data
-
Rectify inaccurate or incomplete data
-
Request deletion of your personal data (except data we are required to keep for legal purposes)
-
Restrict or object to certain types of processing
-
Data portability for the information you have provided
-
Withdraw consent at any time for processing based on consent
-
Lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your rights have been violated.
To exercise any of these rights, please contact us via the Contact page.
8. Security
We take reasonable measures to protect your personal data from loss, misuse, and unauthorized access. This includes secure servers, encryption, and restricted access.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page.
-
Continued use of the website constitutes acceptance of the updated policy
-
We recommend checking this page regularly to stay informed
10. Additional Information for Event/In-Person Sales
If you provide personal information at events (e.g., email for newsletters, orders), it will be collected, used, and stored in accordance with this Privacy Policy.
Event data may be processed to fulfil orders, provide receipts, or handle returns.
We will not retain unnecessary personal data from event transactions beyond what is required for business, accounting, or legal purposes.