Privacy Policy

Crafty Little Moment is a UK-based handmade gift business operating at craftylittlemoment.com. We are the data controller for the personal information you provide to us.

If you have any questions about this policy or how we handle your data, please contact us via our contact page.

When you place an order, we collect your name, delivery address, email address, and phone number (if provided).

Payment details (card number, expiry, CVV) are processed directly and securely by Stripe. We never see or store your full card details.

When you use our contact form or chat widget, we collect your name, email address, and the content of your message.

We may also collect basic technical data such as your IP address, browser type, and pages visited, through our hosting provider and any analytics tools in use.

To process and fulfil your order, including personalisation details you provide.

To communicate with you about your order, including dispatch confirmation and any issues.

To respond to enquiries submitted via our contact form or chat widget.

To comply with our legal obligations, including keeping financial records for HMRC purposes.

Stripe — to process your payment securely. Stripe is PCI-DSS compliant. You can read their privacy policy at stripe.com/gb/privacy.

DHL — to deliver balloon orders. Your name and delivery address are shared with DHL for this purpose.

Royal Mail — to deliver non-balloon orders. Your name and delivery address are shared with Royal Mail for this purpose.

GoDaddy — our website is hosted on GoDaddy's platform. GoDaddy may process data as part of providing hosting and infrastructure services.

We do not sell your personal data to any third party, and we do not share it for marketing purposes.

Order records (including your name, address, and order details) are kept for 6 years in line with HMRC requirements for financial records.

Contact and enquiry messages are kept for up to 2 years, or until the matter is resolved.

You may request deletion of your data at any time (see Your Rights below). Where we are legally required to retain records, we will inform you.

Our website uses essential cookies required for the site to function, such as maintaining your shopping bag between pages.

We may also use analytics cookies to understand how visitors use our site. These do not identify you personally.

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of the site.

Right of access — you can request a copy of the personal data we hold about you.

Right to rectification — you can ask us to correct any inaccurate data we hold.

Right to erasure — you can ask us to delete your data, subject to any legal obligations we have to retain it.

Right to restrict processing — you can ask us to limit how we use your data in certain circumstances.

Right to object — you can object to us processing your data where we rely on legitimate interests as our legal basis.

To exercise any of these rights, please contact us via our contact page. We will respond within 30 days.

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

We take reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, or misuse.

All data is transmitted over HTTPS. Payment data is handled entirely by Stripe and never passes through our servers.

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date. We encourage you to review this page periodically.