Privacy Policy

1. Introduction

CraftCore ("we", "our", "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains what information we collect, why we collect it, how we use it, who we share it with, how we keep it secure, and your rights under UK data protection law.

This policy applies whenever you visit our website, purchase products, request quotations, contact us, submit warranty claims, or communicate with us by email or telephone. Nothing in this Privacy Policy affects your statutory rights.

2. Data Controller

CraftCore is the Data Controller responsible for determining how your personal data is processed. Contact: Stanton Long, Much Wenlock, Shropshire, United Kingdom. Email: hello@craftcore.co.uk. Tel: 07506 367778.

3. The Information We Collect

3.1 Identity Information

Full name, title, date of birth (where required for fraud prevention), and account information where applicable.

3.2 Contact Information

Billing address, delivery address, email address, and telephone number.

3.3 Order Information

Products purchased, component configuration, order history, invoices, warranty records, and technical support history.

3.4 Payment Information

Payments are processed securely through our payment provider. CraftCore does not store full debit or credit card numbers.

3.5 Device Information

When visiting our website we may automatically collect IP address, browser type and version, operating system, device type, screen resolution, referring website, language settings, pages viewed, time spent on pages, and click behaviour.

3.6 Technical Support Information

Hardware specifications, serial numbers, fault descriptions, photographs, videos, diagnostic reports, and email correspondence where you contact us for support.

4. Special Category Data

CraftCore does not intentionally collect special category personal data. If such information is provided inadvertently, it will only be processed where necessary and in accordance with applicable law.

5. Lawful Basis for Processing

CraftCore relies upon the following lawful bases:

• Performance of a Contract — to fulfil orders, process payments, arrange delivery, administer warranties, and provide customer support.
• Legal Obligations — where required by law, including accounting, tax, and fraud prevention.
• Legitimate Interests — improving customer service, preventing fraud, maintaining website security, and maintaining accurate business records.
• Consent — for non-essential cookies and optional communications where required by law.

6. How We Use Your Information

Your information may be used to process orders, arrange deliveries, provide technical support, administer warranties, contact you regarding your order, prevent fraud, improve our products and website, respond to enquiries, and comply with legal obligations. We do not sell your personal information.

7. Sharing Your Personal Information

We do not sell your personal data to third parties. We may share it only where necessary to operate our business, fulfil your order, comply with legal obligations, or protect our legitimate interests — for example with payment processors, courier companies (DPD), IT service providers, website hosting providers, professional advisers, or manufacturers for warranty claims. Each third party is expected to process personal information in accordance with applicable data protection legislation.

8. Google Analytics

CraftCore uses Google Analytics to understand how visitors use the Website. Analytics cookies will only be used after obtaining appropriate consent where required by applicable law.

9. Data Retention

CraftCore retains personal information only for as long as necessary. Order records and invoices are retained for the period required by tax and accounting legislation. Warranty records may be retained for the duration of the warranty and a reasonable period afterwards. When personal information is no longer required, it will be securely deleted or anonymised where reasonably practicable.

10. Data Security

CraftCore takes reasonable technical and organisational measures to protect personal information, including encrypted website connections (HTTPS), secure payment processing, password-protected systems, and restricted access to personal information. No internet transmission can be guaranteed to be completely secure.

11. Your Rights Under UK GDPR

Subject to applicable law, you may have rights to: access your personal data; request rectification of inaccurate data; request erasure; restrict processing; object to processing based on legitimate interests; and data portability. To exercise any of these rights, contact us at hello@craftcore.co.uk.

12. Children's Privacy

CraftCore's products and services are intended primarily for adults. We do not knowingly collect personal information from children under the age of 13 without appropriate consent.

13. Information Commissioner's Office

If you are dissatisfied with how CraftCore has handled your personal information, you have the right to complain to the Information Commissioner's Office (ICO). CraftCore encourages you to contact us first so we can resolve any concerns.

14. Changes to this Privacy Policy

CraftCore may update this Privacy Policy from time to time. The latest version will always be published on the Website.