Willow and Crafts Privacy Policy
Privacy Policy
Willow and Crafts
At Willow and Crafts, we are committed to protecting your personal information. This policy explains what data we collect, how we use it, and how we keep it safe.
1. What This Policy Covers
This policy applies to personal data from potential, current, and past clients.
Business information is not covered by legislation, but if you are a business, we will treat your information with the same care.
2. Why We Collect Your Data
We collect personal information to:
Respond to your enquiries
Manage bookings, orders, and workshop registrations
Send newsletters or marketing emails you have subscribed to
We only keep your data for these purposes or to meet legal obligations.
3. Information We Collect
You may give us information when you:
Sign up for our newsletter
Email us directly
Make a booking or purchase through our website or Craft Courses
Contact us via social media
Contact us by telephone
The information we may collect includes:
Name
Address
Email address
Phone number
Payment method
Any access needs or adjustments required for workshops
Number of participants
Email address for newsletters
Data retention:
After an activity has taken place, unnecessary data is deleted from our system.
However, third-party platforms (e.g., Craft Courses, PayPal, Stripe, Square) may keep your information as part of their legal obligations. To remove your data from those platforms, you must contact them directly.
You can ask us to delete your data at any time.
4. How We Protect Your Data
We use appropriate technical and procedural safeguards to keep your information secure. These include:
Secure systems protected by double firewalls
Regular software updates
Microsoft security suite
Routine security audits
Password protection and encryption on devices and third-party platforms
While we take every precaution, no system can be guaranteed completely secure.
5. Third Parties Who Process Your Data
Bookings
Craft Courses – shares your contact details with us when you make a booking.
Emails
Managed through Google Email.
Newsletters
Sent through Email Octopus.
You can unsubscribe at any time via the link in each email or by contacting us.
Payments
Payments are processed securely through:
PayPal
Stripe
Square (used at events such as craft fairs)
Website checkout managed via Create.net
We do not store your payment details ourselves.
Refunds are processed using the original payment method.
Social Media
We use platforms such as Instagram and Facebook/Meta.
Your interactions with these platforms are subject to their own privacy policies.
Please be cautious when clicking any external or shortened links. If you're not sure, please contact me
6. Your Rights
You have the right to:
Request access to your data
Ask for your data to be updated or deleted
Request to be forgotten
Object to how your data is being used (when legally applicable)
To make a request, please contact us directly.
7. Data Breaches
We keep a record of all personal data breaches and will investigate any potential breach in line with GDPR and current ICO guidance.
ICO Guidance:
https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/personal-data-breaches/
Policy Update
Last updated: November 25
If you have any questions about this policy or would like us to amend or delete your data, please contact us.
