Privacy policy

Privacy Policy – Craftaison

Last updated: 31 October 2025

At Craftaison (online store: www.craftaison.com), we are committed to protecting your privacy.

This Privacy Policy applies exclusively to customers in the United Kingdom.

It explains what personal data we collect, why we collect it, how we protect it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.


1. Data Controller

Craftaison is responsible for the processing of personal data collected through this online store and our services in the United Kingdom.

If you have any questions, please contact us at:

📧 info@craftaison.com


2. What Data We Collect

2.1 Personal Information You Provide

  • Name and address
  • Email address and phone number
  • Order and payment information (only the data required to process your transaction; full credit card numbers are never stored)
  • Account information (username and encrypted password)
  • Customer service communications

2.2 Information Collected Automatically

  • IP address, device information, and browser details
  • Website usage data (pages visited, clicks, search terms, access times, etc.)
  • Cookie IDs and similar technologies (see Section 6)

3. Why We Process Your Data

We process personal data for the following purposes:

  • Processing and delivering your orders within the United Kingdom (contract performance)
  • Payment processing and fraud prevention (legitimate interests / legal obligation)
  • Account management and customer support (contract performance)
  • Sending service emails (order confirmations and shipping updates)
  • Newsletters and promotional offers (only with your prior consent where required)
  • Improving our website and performing statistical analysis (legitimate interests / cookie consent)

4. Sharing Your Personal Data

We only share your personal data with trusted service providers who help us operate our business in the United Kingdom, including:

  • Payment providers
  • Shipping and delivery partners
  • IT and hosting providers
  • Marketing service providers (only where consent has been given)

These partners are contractually required to protect your personal data.

We never sell your personal data.

International Data Transfers

Where personal data is transferred outside the United Kingdom, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement (IDTA) or other legally approved transfer mechanisms.


5. Data Retention

We retain your personal data only for as long as necessary:

  • Order and invoice data: up to 6 years, in accordance with UK tax and accounting requirements
  • Account information: while your account remains active or up to 24 months after inactivity
  • Customer support enquiries: up to 24 months
  • Marketing data: until you withdraw your consent
  • Cookies: according to their legal or technical retention period

6. Cookies

In accordance with applicable UK privacy laws, our website uses:

  • Essential cookies
  • Preference cookies
  • Analytics cookies (with consent where required)
  • Marketing cookies (only with your explicit consent)

You can manage your cookie preferences at any time through our cookie banner or your browser settings.


7. Data Security

We implement appropriate technical and organisational security measures, including encryption, restricted access, and regular security reviews, to protect your personal data.


8. Your Rights

Under the UK GDPR and the Data Protection Act 2018, you have the right to:

  • Access your personal data
  • Correct inaccurate personal data
  • Request deletion of your personal data
  • Restrict the processing of your personal data
  • Receive a copy of your personal data (data portability)
  • Object to processing
  • Withdraw your consent at any time

To exercise any of these rights, please contact us at:

📧 info@craftaison.com

We will respond to your request within 30 days.

Right to Lodge a Complaint

If you believe your data has been handled incorrectly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).


9. Children

Our services are not intended for individuals under the age of 16 in the United Kingdom.

We do not knowingly collect personal information from children.


10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

The latest version will always be available at:

www.craftaison.com


11. Contact

📧 info@craftaison.com