1. Introduction

At Crafty Kits, we are committed to protecting your privacy and handling your personal information responsibly.

This Privacy Policy explains what personal information we collect, why we collect it, how we use it, who we share it with, how long we keep it, and your rights under UK data protection law.

By using our website or purchasing from Crafty Kits, you acknowledge that you have read this Privacy Policy.

2. Who We Are

Crafty Kits is operated by:

Brian Russell (Sole Trader)

46 Helegan Close

Orpington

Kent

BR6 9XH

Email: brian@craftykits.co.uk

Telephone: 07865 324209

For the purposes of UK data protection legislation, Crafty Kits is the Data Controller responsible for your personal information.

3. Legislation

This Privacy Policy has been prepared in accordance with:

• UK General Data Protection Regulation (UK GDPR)
• Data Protection Act 2018
• Privacy and Electronic Communications Regulations (PECR)
• Consumer Rights legislation where applicable

4. Information We Collect

Depending on how you interact with us, we may collect the following information.

Personal Details

• Name
• Billing address
• Delivery address
• Email address
• Telephone number

Order Information

• Products ordered
• Order history
• Delivery information
• Returns
• Customer enquiries

Personalised Orders

Where you order personalised products, we may collect:

• Photographs
• Artwork
• Design requests
• Names
• Messages
• Other content you choose to provide

Technical Information

When visiting our website, we may automatically collect:

• IP address
• Browser type
• Device information
• Operating system
• Website usage
• Pages visited
• Time spent on pages
• Referral source

Marketing Preferences

If you choose to subscribe, we may collect:

• Email marketing preferences
• Newsletter subscriptions
• Competition entries
• Survey responses

5. Payment Information

Payments are securely processed by trusted third-party payment providers.

We do not store your full debit or credit card details.

Payment providers are responsible for processing your payment securely in accordance with their own privacy policies.

6. How We Collect Information

We collect information when you:

• place an order
• create an account
• contact us
• complete a contact form
• subscribe to our newsletter
• upload photographs
• request personalised products
• enter competitions
• browse our website
• accept cookies

7. Why We Use Your Information

We process personal information to:

• fulfil your order
• deliver products
• provide customer support
• personalise products
• respond to enquiries
• process refunds
• comply with legal obligations
• improve our website
• detect fraud
• maintain security
• keep business records
• send marketing communications where you have given consent

8. Lawful Bases for Processing

Under UK GDPR, we rely on one or more of the following lawful bases:

Contract

Processing necessary to fulfil your order.

Legal Obligation

Keeping records required by law.

Legitimate Interests

Improving our website, preventing fraud and managing customer relationships.

Consent

Where required for:

• newsletters
• promotional emails
• optional cookies
• marketing communications

You may withdraw your consent at any time.

9. Sharing Your Information

We never sell your personal information.

We may share information with third parties where necessary, including:

• payment providers
• delivery companies
• website hosting providers
• IT service providers
• professional advisers (such as accountants or legal advisers)
• government authorities where required by law
• We only share with organisations to enable us to get your order delivered to you.
• WE DO NOT SELL YOUR INFORMATION

Each organisation is required to handle your information securely.

10. International Transfers

We primarily process information within the United Kingdom.

If any of our service providers process information outside the UK, we will ensure appropriate safeguards are in place in accordance with UK GDPR.

11. Personalised Product Images

Where photographs or artwork are supplied:

• you confirm you have permission to use them
• we use them solely to produce your order
• they are stored securely
• they are not sold to third parties
• they are deleted when no longer required unless retained for legal or customer service purposes

12. Marketing

If you subscribe to our newsletter we may occasionally send information about:

• new products
• offers
• tutorials
• competitions
• crafting news
• seasonal promotions

You may unsubscribe at any time by:

• clicking the unsubscribe link
• emailing us
• contacting us directly

13. Cookies

Our website uses cookies to:

• remember your preferences
• improve website performance
• understand visitor behaviour
• maintain website security

Optional cookies will only be used where you have given consent.

Full details are provided in our Cookie Policy.

14. How Long We Keep Information

We keep personal information only for as long as necessary.

Typical retention periods include:

Customer orders – up to 6 years after the end of the relevant tax year.

Enquiries – up to 2 years.

Marketing subscriptions – until you unsubscribe.

Website analytics – generally up to 26 months.

Personalised images – only for as long as necessary to complete your order, deal with any follow-up enquiries or comply with legal obligations.

Where information is no longer required, it will be securely deleted or anonymised.

15. Keeping Your Information Secure

We take reasonable technical and organisational measures to protect your information.

These include:

• password-protected systems
• secure website hosting
• SSL encryption
• restricted access
• software updates
• malware protection
• secure backups where appropriate

Although we take security seriously, no online transmission can ever be guaranteed to be completely secure.

16. Your Rights

Under UK GDPR you have the right to:

• access your personal information
• request correction of inaccurate information
• request deletion in certain circumstances
• request restriction of processing
• object to certain processing
• request transfer of your data where applicable
• withdraw consent at any time where processing is based on consent
• lodge a complaint with the Information Commissioner's Office (ICO)

17. Access Requests

You may request a copy of the personal information we hold about you.

Requests should be sent to:

Email: brian@craftykits.co.uk

We will normally respond within one calendar month unless the request is particularly complex.

18. Children's Privacy

Our website is intended for adults.

We do not knowingly collect personal information from children under the age of 13 without appropriate parental or guardian involvement.

If we become aware that such information has been collected unintentionally, we will take reasonable steps to delete it.

19. Third-Party Websites

Our website may contain links to other websites.

We are not responsible for the privacy practices or content of external websites.

You should read the privacy policy of any website you visit.

20. Changes to This Policy

We may update this Privacy Policy from time to time.

The latest version will always be published on our website.

21. Complaints

If you have any concerns about how we handle your personal information, please contact us first.

Email: brian@craftykits.co.uk

Telephone: 07865 324209

If you remain dissatisfied, you have the right to complain to the Information Commissioner's Office (ICO).

22. Contact Us

If you have any questions about this Privacy Policy or how we process your personal information, please contact:

Crafty Kits

Brian Russell (Sole Trader)

46 Helegan Close

Orpington

Kent

BR6 9XH

Email: brian@craftykits.co.uk

Telephone: 07865 324209

We are committed to handling your personal information fairly, transparently and securely.

to helping you enjoy creative crafting.