Legal
Privacy policy
How Crafted collects and uses your personal data under UK GDPR.
Who we are
Crafted is a trading name of Elite Crafter Ltd, company number 17520464, registered office 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. We are the controller of the personal data described here.
For any question or request about your data, email [SUPPORT EMAIL].
What we collect
- your name, email address, phone number, and delivery and billing addresses when you order or contact us;
- your order: the products, any personalisation details and gift messages;
- payment details, which our payment provider handles for us: we never see or store your full card number;
- the messages you send us, including corporate gifting enquiries;
- technical information our server records when you visit, such as your IP address and browser type, kept for security.
Your bag is saved in your own browser and only reaches us when you place an order (see our cookie policy).
How we use it, and our legal basis
- to take, make, personalise and deliver your order and handle any return: this is needed for our contract with you;
- to answer your questions and complaints: for our contract with you, or in our legitimate interest in looking after our customers;
- to keep accounting and tax records: we are legally required to;
- to keep the website secure and prevent fraud: in our legitimate interests;
- to send you news and offers by email: only if you have agreed, and you can unsubscribe at any time.
Who we share it with
- our workshop team in India, who make and personalise your order;
- couriers, to deliver your order and send you tracking updates;
- our payment provider, to take payment and prevent fraud;
- the companies that host our website and email, under contracts that let them use your data only on our instructions;
- our accountants and professional advisers, and authorities such as HMRC where the law requires it.
We never sell your personal data.
Sending data outside the UK
Our pieces are made in India, so the order details our workshop needs are sent there. Whenever personal data leaves the UK, we protect it with safeguards recognised under UK data protection law, such as the International Data Transfer Agreement issued by the Information Commissioner’s Office.
How long we keep it
- orders, payments and accounting records: six years, as UK tax law requires;
- other messages and enquiries: up to two years after we were last in touch;
- your email marketing choice: until you unsubscribe;
- server security logs: no more than 30 days.
Your rights
You can ask us for a copy of your data, to correct it or delete it, to restrict or object to how we use it, or to send it to you or another organisation. Where we rely on your consent, you can withdraw it at any time. Email [SUPPORT EMAIL]. We will reply within one month, and there is usually no charge.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113. We would appreciate the chance to put things right first.
Changes to this policy
We will update this page if the way we use your data changes. Last updated: 16 October 2026.
