Privacy Policy

Last updated – 17/06/2025

At Individually Gifted Crafts ("we", "us", or "our"), we are committed to protecting your privacy and handling your personal information with transparency and care. This Privacy Policy explains how we collect, use, share, and protect your personal data when you visit our website, use our products or services, or otherwise interact with us.

By using our website or services, you acknowledge and agree to the collection and use of information as described in this policy. Where required by law, we will obtain your explicit consent for certain data processing activities.

1. About This Policy

This policy sets out:

(1) The types of personal information we collect about you.
(2) How and why we collect and use your personal information.
(3) How we share and secure your information.
(4) Your rights regarding your personal information and how you can exercise them.
(5) How to contact us if you have any questions or concerns about your data.

2. Who We Are (Data Controller)

Individually Gifted Crafts is the data controller responsible for your personal information. This means we determine the purposes and means of processing the personal data we collect.

You can contact us at:

Email: Individually.gifted.crafts@gmail.com

3. What is Personal Information?

In this policy, "personal information" (or "personal data") refers to any information relating to an identified or identifiable natural person.

This includes information that can directly identify you (like your name or email) or indirectly identify you (like your IP address when combined with other data).

4. The Information We Collect About You

We collect various types of personal information from and about you depending on how you interact with our website and services.

4.1) Information you provide directly to us: We collect personal information that you voluntarily provide to us.

Identity Data (Name) – collected when you contact us through our website forms (e.g., "Quote Request Form," "General Enquiry Form"), when you place an order and on invoice documents.

Contact Data (Email address, phone number and shipping address) – collected when you communicate with us via email, phone, or social media, when you fill in a Quote Request Form or General Enquiry Form and when order and invoice forms are completed. Also collected when you subscribe to our mailing list.

Communication Data – The content of your messages you send to us.

4.2) Information we collect automatically (via Website Technology): When you visit our website, we automatically collect certain information about your device and your browsing activity using cookies and similar technologies.

This data helps us understand how our website is used and allows us to improve your experience.

This information may include:

Technical Data: Internet Protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.

Usage Data: Information about how you use our website, such as page views, navigation paths, referring/exit pages, and clickstream data.

Cookie Data: Information collected by cookies and similar technologies.

5. How and Why We Use Your Information (Lawful Basis for Processing):

Contract: For sending order quotes, processing orders, contacting during order process and informing you of postal costs.

Legitimate Interests: For website analytics (with careful balancing tests) and fraud prevention.

Consent: For subscribing marketing emails.

Legal Obligation: For retaining records for tax purposes.

6. How We Share Your Information:

We engage with trusted third-party service providers who assist us in operating our website, conducting our business, or providing services to you.

These include, but may not be limited to:

Shipping Companies (e.g., Royal Mail, other couriers) for product delivery.
Website Hosting Providers to host our website.
Email Marketing Service Providers for sending newsletters (if you subscribe).

We only share the minimum data necessary for them to perform their services. We have agreements in place (known as Data Processing Agreements or DPAs) that require them to protect your personal information in accordance with legal requirements and our standards. They are not permitted to use your personal information for their own purposes.

We may also disclose your personal information if required to do so by law or in response to valid requests by public authorities (e.g., a court order or government agency).

7. How Long We Keep Your Information (Data Retention):

We retain your personal information only for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

Order and transaction data – will be retained for up to six years plus the current financial year for tax and legal compliance with the HMRC.
Newsletter subscriber data is retained until you unsubscribe.
Information from enquiries is retained for 12 months to allow for follow-up, unless it becomes part of an order record (then the retention period for order data would apply).

8. How We Protect Your Information (Data Security):

We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. For example:

Our website uses HTTPS encryption to protect data transmitted between your browser and our server.
We use secure hosting providers who implement robust security measures.
Access to your personal data is limited to our staff members on a need-to-know basis, and they are subject to strict confidentiality obligations.
We use strong passwords and multi-factor authentication where available.
We regularly update our software and plugins to protect against vulnerabilities.

8.1 Data Breach:

In the unlikely event of a data breach, we have procedures in place to deal with it and will notify you and any applicable regulator of a breach where we are legally required to do so.

9. Your Data Protection Rights:

If you are a resident of the UK, you have the following rights to your personal data we hold on you -

Right to Access: You have the right to request a copy of the personal information we hold about you.
Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal information we hold about you.
Right to Erasure: You have the right to request that we delete your personal information in certain circumstances.
Right to Restrict Processing: You have the right to request that we limit the way we use your personal information in certain situations.
Right to Data Portability: You have the right to request that we transfer the personal information you provided us to another organization, or to you, in a structured, commonly used, machine-readable format.
Right to Object: You have the right to object to our processing of your personal information in certain circumstances, particularly for direct marketing.
Right to Withdraw Consent: Where we rely on consent as the lawful basis for processing your personal information, you have the right to withdraw that consent at any time. This will not affect the lawfulness of any processing carried out before you withdraw your consent.

If you would like to exercise these rights, please contact us through the contact page on our website or email us on individually.gifted.crafts@gmail.com.

10. Our use of Cookies:

Our website uses cookies and similar technologies to enhance your browsing experience, analyse site traffic, and personalise content.

For comprehensive details on the specific cookies we use, their purpose, how to manage your preferences, and information about third-party cookies, please refer to our dedicated Cookies policy page.

11. Changes to This Privacy Policy:

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. Any changes will be posted on this page with an updated 'Last updated Date' at the top. We encourage you to review this policy periodically.

12. How to Complain (ICO):

If you have any questions or concerns or would like to fill a complaint about the Privacy Policy please contact us on our ‘Contact’ page or email us on individually.gifted.crafts@gmail.com.

Also you have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you are unhappy with how we’ve handled your data. You can contact the ICO on their website https://ico.org.uk/global/contact-us/.