Privacy and Cookie Policy
Last updated: 11 September 2025
1) Who we are (Controller)
Splash Crafts (a trading name of Craftstyle Products Ltd) is the data controller for personal data collected via this website and our services.
- Company No: 05465534 (England & Wales)
- Registered office (controller address): Unit 14, Flush Mills, Westgate, Heckmondwike, West Yorkshire, WF16 0EN, United Kingdom
- Email: hello@splashcrafts.com
- Phone: 01924 400 626
This Policy works alongside our Terms & Conditions.
2) The data we collect
a) Data you provide to us
- Identity & contact data (name, email, billing/delivery address, phone)
- Account data (login, password—stored as hashed/salted), preferences
- Order & payment details (items purchased, total, VAT; we do not store full card numbers)
- Support messages, survey responses, competition entries
- Content you upload or submit (e.g., messages, forms)
b) Data we collect automatically
- Technical data (IP address, device, browser type/version, OS, time zone)
- Usage data (pages viewed, links clicked, referring/exit pages)
- Cookie and similar technology data (see §10)
c) Data from third parties
- Payment providers (e.g., transaction confirmation)
- Delivery/courier updates
- Anti-fraud and address verification tools
- Analytics providers
3) Purposes & lawful bases
We process your personal data for:
| Purpose | Examples | Lawful basis |
|---|---|---|
| Order processing & delivery | Creating orders, payments, invoicing, shipping, returns | Performance of a contract |
| Account & customer service | Account creation, queries, warranties | Performance of a contract; Legitimate interests |
| Site operation & security | Fraud prevention, keeping our site and users secure | Legitimate interests; Legal obligation |
| Communications | Service emails (order updates), policy notices | Performance of a contract; Legal obligation |
| Marketing (with consent) | Newsletters, offers, product updates | Consent (you can withdraw anytime) |
| Analytics & improvement | Measuring performance, fixing issues | Legitimate interests |
| Legal & compliance | Tax/VAT, accounting, regulatory requests | Legal obligation |
Where we rely on legitimate interests, we balance those interests against your rights and freedoms. Where we rely on consent, you can withdraw it at any time (see §8).
4) Who we share data with
We share only what’s necessary with trusted recipients, such as:
- Payment processors (e.g., card gateways, PayPal)
- E-commerce & hosting providers, IT support and security partners
- Couriers & postal services
- Email/SMS service providers (for service messages/consented marketing)
- Analytics providers (see Cookies)
- Professional advisers (accountants, legal) and authorities where required by law
We do not sell your personal data. If we undertake a merger, acquisition, or asset sale, your data may transfer to the new owner under the same protections.
5) International transfers
Some service providers may process data outside the UK/EEA. Where this happens, we use appropriate safeguards (e.g., UK International Data Transfer Agreement or EU Standard Contractual Clauses plus UK addendum, and additional measures where needed).
6) Retention
We keep personal data only as long as necessary:
- Orders, invoices & tax records: 6 years (plus current year)
- Customer service correspondence: up to 3 years after resolution
- Account data: for as long as the account is active; deleted after inactivity per our housekeeping schedule
- Marketing data: until you unsubscribe or withdraw consent
- Cookies: per lifetimes listed in §10
We may retain data longer if required by law or to establish/exercise/defend legal claims.
7) Your rights
You have the right to:
- Access your data
- Rectify inaccurate or incomplete data
- Erase your data (where applicable)
- Restrict processing (temporarily limit use)
- Object to processing based on legitimate interests or to direct marketing
- Data portability (receive your data in a commonly used format)
- Withdraw consent where we rely on consent
To exercise rights, email hello@splashcrafts.com. We may need to verify your identity. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk if you’re unhappy, though we’d appreciate the chance to resolve things first.
8) Marketing preferences
If you opt in, we’ll send newsletters or offers. You can opt out anytime via the unsubscribe link in our emails or by contacting hello@splashcrafts.com. Service/transactional emails (e.g., order updates) will still be sent.
9) Security
We use technical and organisational measures to protect your data, including encryption in transit (HTTPS), access controls, staff training, and supplier due diligence. No system is 100% secure, and transmission over the internet is at your own risk.
We do not store full payment card details on our systems.
10) Cookies & similar technologies
Cookies are small files placed on your device. We use:
- Strictly necessary cookies – required for site functionality (e.g., basket, checkout, login).
- Functional cookies – remember choices (e.g., currency, preferences).
- Analytics cookies – help us understand site usage (aggregated/anonymous reports).
- Marketing cookies – only if we run ads/remarketing (off by default unless you consent).
You can control cookies via our on-site cookie banner/manager and your browser settings. Blocking essential cookies may break site features.
Typical cookies we use
| Category | Example names | Purpose | Typical lifespan |
|---|---|---|---|
| Essential | __cf_bm, session IDs |
Security, load balancing, login/session | Session to 1 year |
| Functional | cookie_consent, preference flags |
Remember choices (e.g., consent) | 6–12 months |
| Analytics (Google Analytics 4) | _ga, _gid, _ga_* |
Measure traffic & usage (aggregated) | 1 day to 24 months |
| Marketing (if enabled) | varies by platform | Ads/remarketing and frequency capping | Varies; only with consent |
Google Analytics opt-out: you can install Google’s opt-out add-on and/or decline analytics cookies in our banner.
We do not use cookies to store sensitive data (e.g., full card numbers).
11) Children
Our site and services are intended for people aged 18+. If you are under 18, you must use the site only with the consent of a parent or guardian. If we learn we hold data for someone under 13 without proper consent, we will delete it.
12) Social media & user content
If you post reviews or comments on public platforms, remember these may be visible to others. We may respond publicly to address concerns. Please avoid sharing sensitive personal data in public posts.
13) Third-party links
Our website may link to third-party sites. We’re not responsible for their privacy practices. Please review their policies.
14) Changes to this Policy
We may update this Policy from time to time. We’ll post the new version here with an updated “Last updated” date. If changes are material, we may notify you by email or show a notice on the site.
15) Contact us
For questions, requests or complaints about privacy or cookies:
Email: hello@splashcrafts.com
Post: Splash Crafts (Craftstyle Products Ltd), Unit 14, Flush Mills, Westgate, Heckmondwike, West Yorkshire, WF16 0EN, United Kingdom