1. Introduction:

At Craftco Ltd, we respect your personal information and commit to complying with the General Data Protection Regulation (GDPR). This Privacy Policy explains how we collect, use, and protect your personal data when you interact with us and browse our website.

2. Data We Collect:

2.1. Personal Data: When you purchase products, sign up for our newsletter, or interact with our website, we may collect various information, including your name, email address, phone number, delivery address, payment details, and any other information you provide.

2.2. Non-Personal Data: We may also collect data about how you use our website, including your browsing activity, the device you're using, your IP address, and location data.

3. How We Use Your Data:

3.1. Order Processing: To process any order you make and deliver your purchases.

3.2. Communication: To communicate with you about your orders, updates, promotional offers (if you opt-in), and other news.

3.3. Improvement: To analyze the use of our website and ensure its content is presented effectively for you and your device, and improve our services.

3.4. Legal Reasons: To prevent fraud and other prohibited or illegal activities and as part of our efforts to keep our website secure.

4. How We Protect Your Data:

4.1. We employ security measures to prevent unauthorized access, maintain data accuracy, and ensure the correct use of information.

5. Sharing Your Data:

5.1. We do not and will not sell your data.

5.2. We may share your data with trusted third parties to help us deliver our service to you (like payment processors or delivery companies). They're only allowed to use your data for that specific purpose.

5.3. We may also disclose your personal data where required by law or to enforce our site policies.

6. Your Rights Under GDPR:

6.1. Access: You have the right to request a copy of the personal data we hold about you.

6.2. Rectification: You can ask us to rectify any inaccuracies in your personal data.

6.3. Erase: In certain situations, you can ask us to erase your personal data.

6.4. Portability: You can request a copy of your personal data in a structured format.

6.5. Objection: You can object to the processing of personal data for marketing purposes.

6.6. Restriction: In certain circumstances, you can request a restriction on the processing of your data.

7. Data Retention:

7.1. We only keep your personal data for as long as necessary to fulfil the purposes we collected it for.

8. Cookies:

8.1. Our website uses cookies to provide a better user experience. You can set your browser to refuse all or some cookies or alert you when websites set or access cookies.

9. Changes to This Policy:

9.1. We may periodically update this policy. We will notify you about significant changes by placing a notice on our website or contacting you directly.

10. Contact & Complaints:

10.1. If you have questions about this Privacy Policy or wish to exercise any of your GDPR rights, please contact us at 7 Villa Road, Birmingham, B19 1BH or through our Contact Us page.

10.2. If you're not satisfied with our use of your personal data or our response to any request made by you to us regarding the use of your personal data, you have the right to lodge a complaint with the Information Commissioner's Office.