Willow and Crafts Privacy Policy

Privacy Policy

Willow and Crafts

At Willow and Crafts, we are committed to protecting your personal information. This policy explains what data we collect, how we use it, and how we keep it safe.

1. What This Policy Covers

This policy applies to personal data from potential, current, and past clients.
Business information is not covered by legislation, but if you are a business, we will treat your information with the same care.

2. Why We Collect Your Data

We collect personal information to:

  • Respond to your enquiries

  • Manage bookings, orders, and workshop registrations

  • Send newsletters or marketing emails you have subscribed to

We only keep your data for these purposes or to meet legal obligations.

3. Information We Collect

You may give us information when you:

  • Sign up for our newsletter

  • Email us directly

  • Make a booking or purchase through our website or Craft Courses

  • Contact us via social media

  • Contact us by telephone

The information we may collect includes:

  • Name

  • Address

  • Email address

  • Phone number

  • Payment method

  • Any access needs or adjustments required for workshops

  • Number of participants

  • Email address for newsletters

Data retention:
After an activity has taken place, unnecessary data is deleted from our system.
However, third-party platforms (e.g., Craft Courses, PayPal, Stripe, Square) may keep your information as part of their legal obligations. To remove your data from those platforms, you must contact them directly.

You can ask us to delete your data at any time.

4. How We Protect Your Data

We use appropriate technical and procedural safeguards to keep your information secure. These include:

  • Secure systems protected by double firewalls

  • Regular software updates

  • Microsoft security suite

  • Routine security audits

  • Password protection and encryption on devices and third-party platforms

While we take every precaution, no system can be guaranteed completely secure.

5. Third Parties Who Process Your Data

Bookings

  • Craft Courses – shares your contact details with us when you make a booking.

Emails

  • Managed through Google Email.

Newsletters

  • Sent through Email Octopus.
    You can unsubscribe at any time via the link in each email or by contacting us.

Payments

Payments are processed securely through:

  • PayPal

  • Stripe

  • Square (used at events such as craft fairs)

  • Website checkout managed via Create.net

We do not store your payment details ourselves.
Refunds are processed using the original payment method.

Social Media

We use platforms such as Instagram and Facebook/Meta.
Your interactions with these platforms are subject to their own privacy policies.
Please be cautious when clicking any external or shortened links. If you're not sure, please contact me

6. Your Rights

You have the right to:

  • Request access to your data

  • Ask for your data to be updated or deleted

  • Request to be forgotten

  • Object to how your data is being used (when legally applicable)

To make a request, please contact us directly.

7. Data Breaches

We keep a record of all personal data breaches and will investigate any potential breach in line with GDPR and current ICO guidance.

ICO Guidance:
https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/personal-data-breaches/

Policy Update

Last updated: November 25

If you have any questions about this policy or would like us to amend or delete your data, please contact us.