Privacy Policy

This policy explains what personal information Coastal Crafting collects when you use coastalcrafting.co.uk, why we collect it, and your rights over it.

Who we are

Coastal Crafting is run by [legal name / trading name], [postal address]. We are the "controller" of your personal data under UK data protection law (UK GDPR and the Data Protection Act 2018). [ICO registration number: ZAxxxxxxx]

For any privacy question or request, email orders@coastalcrafting.co.uk.

What we collect and why

We never see or store your full card details. Payments are handled by Stripe.

We don't sell your data, and we don't use it for automated decisions that have legal or similarly significant effects on you.

Marketing

We only send marketing emails if you opt in. Every marketing email has an unsubscribe link. Order confirmations and delivery updates are not marketing, and we send them whether or not you opt in.

Who we share it with

We share only what each provider needs to do its job for us:

• Stripe: payment processing

• Amazon Web Services (AWS): website hosting, data storage, account sign-in and email delivery, based in London (UK)

• Delivery couriers and product suppliers: your name, delivery address and contact details, so your order can be made and delivered

• Google Ireland Ltd: website analytics, only if you accept analytics cookies

We may also disclose information when the law requires it.

International transfers

Most of your data is stored in the UK. Some providers, such as Stripe and Google, may process data outside the UK. When they do, it is protected by UK adequacy regulations or by the International Data Transfer Agreement / Addendum.

How long we keep it

• Orders and invoices: 6 years, to meet tax and accounting law

• Accounts: until you close your account, plus [30 days]

• Reviews: while they are published on the site

• Price-drop alerts and favourites: until you remove them or close your account

• Emails with us: [2 years]

• Analytics data: 14 months, after which Google deletes it automatically

Cookies and similar technologies

Essential storage. Some things the site needs in order to work are always on:

• your basket contents, saved in your browser

• keeping you signed in

• remembering your cookie choice

These don't track you and don't need your consent.

Analytics cookies (optional).

• What: Google Analytics sets the _ga and _ga_<ID> cookies.

• Why: to understand, in aggregate, how visitors use the site. We don't use them for advertising.

• How long: the cookies last up to 2 years in your browser. The analytics data they collect is kept for 14 months, then deleted.

• Who: Google Ireland Ltd processes this data on our behalf.

• Your choice: these cookies are only set if you accept them. You can change your mind at any time using the Cookie settings link in the footer.

If you accept analytics cookies, your activity on the page where you accepted is included (for example, the product you landed on). If you reject them, nothing is sent. If you later withdraw consent, nothing more is sent from that point.

If we materially change how we use cookies, for example by adding a new tool, we will ask you again.

Your rights

You have the right to:

• access a copy of your data

• correct it

• have it deleted

• restrict or object to how we use it

• receive it in a portable format

• withdraw consent at any time (for analytics, price alerts or marketing)

To use any of these rights, email orders@coastalcrafting.co.uk. We will reply within one month.

If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We'd appreciate the chance to put it right first.

Security

Data is encrypted in transit (HTTPS) and at rest, and access is limited to the people who need it to run the shop.

Children

The site isn't aimed at children under 13, and we don't knowingly collect their data.

Changes to this policy

We'll update this page when our practices change and revise the date at the top.