PRIVACY POLICY & COOKIE POLICY

Craft & Crumb

Last updated: 27 January 2026

---

1. Who We Are

This website www.craftandcrumb.com is operated by Craft & Crumb, trading as Craft & Crumb (“we”, “us”, “our”).

We are a company registered in England and Wales (Company No. 09081652).
Registered office:

Craft & Crumb
5 Gloucester Road
Hampton
TW12 2UQ

Email: hello@craftandcrumb.com

We are the data controller for the purposes of UK data protection law.

---

2. Our Commitment to Your Privacy

We are committed to protecting your personal data and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy explains:

• What personal data we collect

• How and why we use it

• How we keep it safe

• Your rights

---

3. What Personal Data We Collect

We may collect and process the following personal data:

Information you provide directly

• Name

• Billing and delivery address

• Email address

• Telephone number

• Order and payment details (payment details are processed securely by third parties — we do not store card details)

• Account login details (if you create an account)

• Communications with us (emails, customer service messages)

Information collected automatically

• IP address

• Device and browser information

• Pages visited and interactions with our website

• Referring URLs

---

4. How We Use Your Personal Data

We use your personal data to:

• Process and fulfil orders

• Manage your account

• Arrange storage, picking, packing, and delivery of orders

• Deliver customer support

• Communicate with you about your order

• Improve our website and services

• Send marketing emails (where you have consented)

• Detect and prevent fraud

---

5. Legal Bases for Processing

Under UK GDPR, we rely on the following legal bases:

• Contract – to fulfil and deliver your order

• Legal obligation – accounting, tax, and regulatory compliance

• Legitimate interests – improving our services, logistics, and website performance

• Consent – marketing communications and non-essential cookies

You may withdraw consent at any time.

---

6. Marketing Communications

If you opt in, we may send you marketing emails about our products, events, or offers.

• You can unsubscribe at any time via the link in our emails

• We use Klaviyo to manage email communications

We do not sell your personal data.

---

7. Who We Share Your Data With

We only share your personal data with trusted third parties where necessary to operate our business, including:

• E-commerce platform: Shopify

• Order & fulfilment management: Mintsoft

• Payment providers: PayPal, Braintree

• Email marketing: Klaviyo

• Analytics: Google Analytics

• Advertising & remarketing: Meta (Facebook), AdRoll

• Delivery partners: Royal Mail, DPD, UPS

All third parties act as data processors and are required to process your data securely, lawfully, and only on our instructions.

---

8. International Data Transfers

Some of our service providers may process personal data outside the UK.

Where this occurs, we ensure appropriate safeguards are in place, including:

• UK adequacy regulations, or

• Standard contractual clauses approved for UK use

---

9. How Long We Keep Your Data

We retain personal data only for as long as necessary:

• Order and fulfilment records: up to 6 years (legal and accounting obligations)

• Marketing data: until you unsubscribe or withdraw consent

• Analytics data: in line with provider retention settings

---

10. Your Data Protection Rights

You have the right to:

• Access your personal data

• Correct inaccurate or incomplete data

• Request erasure of your data

• Restrict or object to processing

• Request data portability

• Withdraw consent at any time

To exercise your rights, contact hello@craftandcrumb.com.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.

---

11. Data Security

We use appropriate technical and organisational measures to protect your personal data, including:

• Secure servers and encrypted connections

• PCI DSS–compliant payment processing

• Restricted access to personal data

While we take reasonable steps to protect your data, no system can be guaranteed to be completely secure.

---

12. Cookies & Tracking Technologies

What are cookies?

Cookies are small text files stored on your device that help websites function properly and improve user experience.

We use cookies to:

• Enable essential website functionality

• Analyse website usage and performance

• Provide relevant advertising and measure effectiveness

---

13. Types of Cookies We Use

Strictly Necessary Cookies

Required for the website to operate and cannot be disabled.

Performance & Analytics Cookies

Help us understand how visitors use our website (e.g. Google Analytics).

Marketing & Advertising Cookies

Used to deliver relevant ads and track campaign performance (e.g. Meta, AdRoll).

---

14. Managing Cookies

When you first visit our website, you will be presented with a cookie consent banner allowing you to accept or reject non-essential cookies.

You can also manage cookies via your browser settings.

For more information, visit:
👉 www.youronlinechoices.com

---

15. Third-Party Cookies

Some cookies are placed by third-party services we use.
We do not control these cookies directly and recommend reviewing the relevant third-party privacy policies.

---

16. Changes to This Policy

We may update this Privacy & Cookie Policy from time to time.
Any changes will be posted on this page with an updated revision date.

---

17. Contact Us

If you have questions about this policy or how we handle your personal data, please contact us at:

📧 hello@craftandcrumb.com
📮 Craft & Crumb, 5 Gloucester Road, Hampton TW12 2UQ