Privacy Policy

Privacy Policy

Last updated: October 19, 2025

This Privacy Policy describes how Thecraftyangels (“we”, “us”, or “our”) collects, uses, and protects your personal information when you visit, use our services, or make a purchase from shop.thecraftyangels.com (the “Site”), or otherwise interact with us.

Please read this policy carefully to understand how we handle your information in accordance with the UK and EU General Data Protection Regulation (“GDPR”).

1. Changes to This Policy

  • We may update this Privacy Policy periodically to reflect operational, legal, or regulatory changes. Updates will appear on this page, and the “Last Updated” date will be revised. Continued use of the Site after such updates means you accept the revised policy.

2. Personal Information We Collect

The information we collect depends on how you interact with our Site. It may include:

Information you provide directly:

  • Name, billing and shipping address, phone number, and email address
  • Payment information (processed securely via Shopify Payments, PayPal, or other providers)
  • Order details and purchase history
  • Account login information (if applicable)
  • Messages, reviews, or other content you send us

Automatically collected data:
When you browse our Site, we automatically collect certain information through cookies and similar technologies. This may include:

  • IP address, browser type, device information
  • Pages viewed, time spent on site, referring URLs
  • General location (determined via IP address)

Third-party data:
We may receive information about you from trusted partners such as:

  • Shopify, which hosts our online store
  • Payment processors (for order fulfillment and fraud prevention)
  • Marketing platforms (for newsletters, promotions, or analytics)

3. How We Use Your Information

We use your personal data for the following purposes:

  • To process and fulfill orders — including payment, shipping, returns, and customer service.
  • To communicate with you — about your orders, account, or inquiries.
  • To improve our services — by understanding browsing and shopping patterns.
  • For marketing (with consent) — to send updates, special offers, or newsletters.
  • For legal compliance and security — to detect fraud, prevent abuse, and meet regulatory requirements.

Legal basis for processing:
We process your data under one or more of the following grounds:

  • Your consent (Article 6(1)(a) GDPR)
  • Performance of a contract (Article 6(1)(b))
  • Legitimate interests (Article 6(1)(f))
  • Legal obligation (Article 6(1)(c))

4. Cookies

Our Site uses cookies to operate effectively and improve your experience.
Cookies help remember preferences, analyze site traffic, and personalize content.
You can control or delete cookies via your browser settings, though some features may not function properly without them.

Shopify’s cookie policy can be found here: https://www.shopify.com/legal/cookies

5. How We Share Your Information

We only share your personal data with trusted partners as necessary to provide our services:

  • Shopify (website hosting and e-commerce platform)
  • Payment processors and banks (to complete transactions)
  • Delivery and fulfillment partners (to ship your orders)
  • Marketing and analytics tools (only with your consent)

We do not sell your personal information.

6. International Data Transfers

If you are in the UK or EEA, your data may be transferred outside your country.
When we do so, we rely on legal safeguards such as the UK International Data Transfer Agreement (IDTA) or the EU Standard Contractual Clauses (SCCs) to ensure your information is protected.

7. Data Retention

We keep your information only as long as necessary to:

  • Fulfill your orders
  • Comply with legal and tax obligations
  • Resolve disputes and enforce agreements
    After this period, your personal data is securely deleted or anonymized.

8. Your Rights (Under GDPR)

Depending on where you live, you may have the right to:

  • Access the data we hold about you
  • Request correction or deletion of your data
  • Withdraw consent for marketing
  • Restrict or object to processing
  • Request data portability

You can exercise these rights by contacting us via email (see below).
We may ask for proof of identity before responding to certain requests.

If you are not satisfied with how we handle your request, you can lodge a complaint with your local data protection authority (e.g., the Information Commissioner’s Office in the UK).

9. Children’s Privacy

Our Site is not intended for children under 16. We do not knowingly collect personal information from minors. If you believe your child has provided us with personal information, please contact us to request deletion.

10. Contact Us

For questions about this Privacy Policy or to exercise your rights, please contact:

https://www.shop.thecraftyangels.com/pages/contact