Privacy Policy – CraftySmile.co.uk
We take your privacy seriously. This Privacy Policy explains how CraftySmile.co.uk collects, uses, stores and protects your personal data when you use CraftySmile.co.uk.
2. What information we collect
| When you… | We collect… |
|---|---|
| Browse the site | IP address, browser type, device info, pages viewed (via cookies – see section 8) |
| Create an account | Name, email address, postal address, phone number, date of birth (if provided) |
| Sell on the site | Bank account / PayPal details (via Stripe/PayPal), National Insurance number (only if we are legally required to report earnings to HMRC) |
| Buy on the site | Delivery address, payment card details (processed securely by Stripe/PayPal – we never see full card numbers) |
| Message other users | The content of your messages (stored securely) |
| Contact support | Any information you choose to give us |
3. How we use your information (legal bases)
| Purpose | Legal basis |
|---|---|
| Create and manage your account | Contract with you |
| Process payments and payouts | Contract with you |
| Ship items (share address with seller/buyer) | Contract with you |
| Send transactional emails & notifications | Contract with you |
| Prevent fraud and illegal activity | Legitimate interests / Legal obligation |
| Report high-earning sellers to HMRC (if required by law) | Legal obligation |
| Improve the site and marketing | Legitimate interests (or consent where required) |
| Comply with tax, consumer and distance-selling laws | Legal obligation |
4. Who we share your data with
- The other party in a transaction
- Stripe and/or PayPal (payment processing)
- Royal Mail / courier partners (shipping labels only)
- HMRC (only if we are legally required to report seller earnings or VAT)
- Trusted third-party services (hosting, analytics, email delivery – all under strict GDPR contracts)
- Law enforcement or regulators if required by law
We never sell your personal data to third parties.
5. International transfers All data is stored in the United Kingdom or EEA. We do not transfer personal data outside the UK/EEA except through Stripe/PayPal who have approved safeguards in place.
6. How long we keep your data
- Account data: 6 years after your last login (for tax and fraud prevention)
- Transaction records: 7 years (legal requirement)
- Messages: 3 years after the transaction ends
- You can request deletion sooner (see your rights below)
8. Cookies & tracking We use essential cookies to make the site work and optional analytics/marketing cookies (Google Analytics, Meta Pixel, etc.). You can manage preferences via the cookie banner or your browser settings.
9. Security We use industry-standard encryption (HTTPS, Stripe/PayPal PCI-DSS compliance) and regular security testing. However, no online service can be 100% secure – you transmit data at your own risk.
10. Children The site is not intended or permitted for use by for children.
11. Changes to this policy We may update this policy from time to time. Major changes will be notified by email or a prominent notice on the site.
This Privacy Policy forms part of our Terms and Conditions. By using CraftySmile.co.uk you accept this Privacy Policy.
