Willow and Crafts Privacy Policy

Willow and Crafts – Customer Data Guide

Willow and Crafts – Customer Data Guide

Last updated: April 2026

At Willow and Crafts, your privacy matters to us. This guide explains how we collect, use, and protect your personal data when you buy our work, book workshops, or interact with us through third-party platforms.

If you have any questions, you can message us via the contact page

1. What We Collect

We only collect and use the information needed to provide our services. This may include:

  • Name

  • Email address (for booking confirmation and communication)

  • Billing or delivery details

  • Order, workshop, or craft course booking information

  • Messages or communications you send us

  • Responding to queries, including commissions, events and advice

We do not collect unnecessary information.

🧵 Craft Courses & Third-Party Bookings

Sometimes, workshops or craft courses may be booked through third-party platforms (such as craft course providers or booking partners).

When this happens, we may receive your personal information from them in order to fulfil your booking.

This may include:

  • Your name

  • Email address

  • Booking details (such as the workshop or course you have booked)

  • Any relevant information needed to deliver the experience

We use this information only to:

  • Confirm and manage your booking

  • Communicate with you about the workshop or course

  • Provide the service you have purchased

We do not use this information for marketing unless you have separately opted in to our newsletter.

Legal basis: Contract

We keep this information only for as long as necessary to deliver the service and meet any legal or administrative requirements, after which it is securely deleted.

2. How We Use Your Data

To provide orders, workshops, and craft courses

We use your information to process purchases, manage bookings, and deliver the services you have booked.

Legal basis: Contract

To respond to enquiries and run our business

We may use your information to reply to messages and maintain basic business records.

Legal basis: Legitimate interests

Marketing communications (general)

We only send marketing emails to people who have actively opted in via a separate newsletter signup process.

Legal basis: Consent

3. Payments

We accept payments via:

  • PayPal

  • Stripe

  • Square (for in-person events such as craft fairs)

  • Create.net (website checkout)

  • Bank transfer

  • Cheque

Online payments are processed securely by third-party providers. We do not store full payment details.

For bank transfers, we provide our bank details and may receive your name and payment reference to match your booking.

For cheques, we may receive your name and details written on the cheque for processing.

Legal basis: Contract

Refunds are processed using the original payment method where possible.

4. Data Sharing

We only share or receive data where necessary to deliver our services, including:

  • Payment providers

  • Our website/e-commerce platform (Create.net)

  • Trusted workshop or craft course booking partners (where applicable)

  • Email marketing provider (if you subscribe)

We never sell or rent your personal data.

5. Data Retention

We only keep your information for as long as necessary:

  • Orders and transactions: minimal record (name, date, payment reference) retained for up to 6 years for legal and tax purposes

  • Contact details: used only for order/workshop/course fulfilment; deleted once no longer required

  • Workshop and craft course booking information: retained only as needed to deliver the service and handle follow-ups

  • General enquiries: deleted after 12 months if no further contact

  • Newsletter data: kept until you unsubscribe

We aim to minimise the data we hold and securely delete anything no longer needed.

6. Your Rights

Under UK GDPR, you have the right to:

  • Access your personal data

  • Correct inaccurate data

  • Request deletion of your data (“right to be forgotten”)

  • Restrict processing

  • Object to processing where applicable

  • Request data portability

To exercise your rights, please contact us.

You also have the right to complain to the Information Commissioner’s Office (ICO):
https://ico.org.uk/

7. Data Security

We take care to protect your data by:

  • Using secure platforms and payment providers

  • Limiting access to personal information

  • Retaining only what is necessary

  • Using password-protected systems

8. Social Media

We use Instagram and Facebook (Meta) to share updates and connect with customers.
Any interactions on these platforms are also subject to their own privacy policies.

9. Cookies

Our website may use cookies to improve your experience and understand how visitors use the site.
You can accept or manage cookie preferences when visiting our website.

10. Updates to This Policy

We may update this policy from time to time. The latest version will always be available on our website.

Refund Policy
T and Cs