Crafty Wishes is committed to protecting your privacy. This policy explains how your personal information is collected, used, and stored when you visit or make a purchase from our website.

When you place an order or contact Crafty Wishes, we may collect:

• Your name
• Email address
• Delivery address
• Phone number (if provided)
• Order details
• Payment confirmation (no card details are ever seen or stored)

This information is used only to process your order and communicate with you.

We use your information to:

• Process and deliver your order
• Contact you about your purchase
• Respond to enquiries
• Keep basic records for tax and order history purposes

Crafty Wishes does not sell, share, or pass your information to third parties for marketing.

Payments are handled securely through trusted third‑party providers such as PayPal or bank transfer. Crafty Wishes never sees or stores your card details.

Your order information is stored securely and only for as long as necessary for accounting and legal purposes.

Our website may use basic cookies or analytics tools to improve your browsing experience. These do not collect personal information that identifies you.

You have the right to:

• Request a copy of the information we hold about you
• Ask for your information to be corrected or deleted
• Withdraw consent for communication

To do this, simply contact Crafty Wishes.

If you have any questions about this Privacy Policy or how your data is handled, please get in touch via the Contact page.

Crafty Wishes complies with the UK GDPR and is committed to protecting your personal data.

Under GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete information
• Request deletion of your data (“right to be forgotten”)
• Restrict processing of your data
• Object to certain types of processing
• Request data portability (a copy of your data in a transferable format)

To exercise any of these rights, simply contact Crafty Wishes via the Contact page.

We process your data under the following lawful bases:

• Contract – to fulfil your order
• Consent – when you choose to contact us or sign up for communication
• Legal obligation – for tax and accounting purposes
• Legitimate interest – to improve our services and website experience
• 
  

We keep your information only for as long as necessary to:

• Complete your order
• Maintain accurate business records
• Meet legal and tax requirements

After this period, your data is securely deleted.

We only share your data with trusted third parties when necessary to complete your order, such as:

• Payment processors (e.g., PayPal)
• Delivery services (e.g., Royal Mail)

These providers have their own GDPR‑compliant privacy policies.

Your information is stored securely and protected from unauthorised access, alteration, or disclosure.