Privacy Policy

Craeft

Craeft is an independent retail shop based in Canterbury, UK.

We are the "data controller" for the purposes of UK data protection law, which means we are responsible for determining how and why any personal information you provide to us is used.

We do not trade online. This policy sets out how we handle the personal information collected in store, principally through digital receipts and our mailing list.

What we collect

We collect personal information in two ways:

At the till. We use Square to process payments and issue digital receipts. If you choose to receive a receipt by email, Square will ask for your email address in order to send it.
On our mailing list. If you sign up to hear from us in store, we ask for your name and email address.

In both cases, we do not request your postal address, phone number, or any payment card details as part of these processes; those are handled securely by Square in accordance with its own terms.

Why we collect it

We use the email address provided at the till, via Square, solely to send you a receipt for your purchase, and for no other purpose unless you separately choose to join our mailing list.

We use the name and email address provided on sign-up to send you occasional updates from Craeft, such as new stock, events, and shop news. We do this only because you have actively requested it.

The legal basis for mailing list communications under UK GDPR is consent: you have opted in, and you may withdraw that consent at any time (see "Your rights" below). Digital receipts are provided on the basis of our legitimate interest in fulfilling your transaction.

How we store it

Receipt-related data is processed and stored by Square as part of its payment service; please refer to Square's own privacy policy for further detail. Mailing list details are held in [mailing list platform], accessible only to staff responsible for our communications. We do not share your information with third parties for marketing purposes, and we do not sell your data.

How long we retain it

Receipt data is retained by Square in accordance with its own retention practices. Mailing list details are retained until you unsubscribe or request removal. Where an email address is found to be inactive or persistently undeliverable, it may be removed as part of routine list maintenance.

Your rights

Under UK GDPR, you have the right to:

Be informed of what personal information we hold about you
Request correction of any inaccurate information
Request deletion of your information
Withdraw your consent and unsubscribe at any time — every communication we send includes an unsubscribe link, or you may contact us directly

To exercise any of these rights, please contact us at [email address] or in store.

Complaints

Should you be dissatisfied with how we have handled your information, we would ask that you contact us in the first instance so that we may seek to resolve the matter. You also retain the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's independent regulator for data protection, at ico.org.uk.

Changes to this policy

This policy may be updated from time to time. The current version will always be available in store on request, and on our website.

Craeft
No 9 The Borough
Canterbury
CT1 2DR

hello@craeftcanterbury.co.uk