Privacy Policy
Effective date: 4 November 2024 · Last updated: 4 November 2024
This Privacy Policy explains how Crafted Furniture Co ("we", "us", "our") collects, uses, stores and protects personal information when you visit craftedfurnitureco.com (the "Site") or contact us. We aim to collect as little personal data as possible and to be transparent about everything we do with it.
1. Who we are
Crafted Furniture Co is a design-only interior design studio. We do not sell products and do not take payments through this Site. We are the data controller for personal information collected through this Site. You can contact us about privacy at privacy@craftedfurnitureco.com.
2. Information we collect
Information you give us
- Contact form: your name, email address, optional phone number, the service you are interested in, and the content of your message.
- Newsletter: your email address and a record of your consent.
- Project information: if you become a client, room measurements, photos or plans you choose to send us.
Please do not send us sensitive personal information (for example health, financial or government ID information). We do not need it to provide our services.
Information collected automatically
- Technical data: like most websites, our hosting provider may record standard server logs (IP address, browser type, pages requested, date and time) for security and to keep the Site running.
- Consent preference: your cookie choice is stored in your browser's local storage so we do not ask you again on every page.
- Optional analytics or marketing data: only if you opt in through the cookie banner and only if such tools are in use (see Section 7).
3. How we use your information
- To reply to your enquiries and send design proposals.
- To deliver the interior design services you request and manage our relationship with you.
- To send our newsletter, only if you have subscribed. Every email includes a way to unsubscribe.
- To keep the Site secure, prevent spam and abuse, and fix technical problems.
- To comply with legal, tax and accounting obligations.
We do not use your personal information for automated decision-making or profiling that produces legal or similarly significant effects.
4. Legal bases for processing
Where data protection laws such as the GDPR or UK GDPR apply, we rely on:
- Consent — for the newsletter and optional cookies. You can withdraw consent at any time.
- Contract — to take steps at your request before entering into a contract and to perform it.
- Legitimate interests — to respond to general enquiries and keep the Site secure, balanced against your rights.
- Legal obligation — to keep records required by law.
5. We do not sell your data
We do not sell, rent or trade your personal information to anyone, for money or anything else of value. We do not "share" personal information for cross-context behavioural advertising as defined under California law, and we do not allow third parties to use your data for their own marketing.
6. Service providers we use
We share personal information only with trusted service providers who help us run the Site and our business, and only to the extent necessary. They are required to protect it and may not use it for their own purposes.
| Provider type | Purpose | Data involved |
|---|---|---|
| Form delivery service (currently FormSubmit) | Delivers contact and newsletter form submissions to our email inbox | Data you enter in the form |
| Email provider | Hosts our business mailbox | Emails you send or receive from us |
| Website host | Serves the Site and keeps security logs | Technical data |
| Analytics or advertising tools (only if enabled and you consent) | Understanding Site usage or measuring ads | Pseudonymous usage data |
We may also disclose information if required by law, to protect our legal rights, or in connection with a business transfer, in which case this policy would continue to apply.
7. Cookies and similar technologies
Cookies are small text files or storage entries saved on your device. We group them as follows:
| Category | Purpose | Default |
|---|---|---|
| Strictly necessary | Remembering your cookie choice (cfc_cookie_consent_v1, stored in local storage for up to 180 days) and basic security | Always on |
| Analytics | Aggregated statistics about which pages are visited | Off until you opt in |
| Marketing | Measuring the performance of any advertising we run (for example Google Ads conversion measurement) | Off until you opt in |
At the time of writing, the Site does not load any analytics or advertising scripts. If we add such tools in future, they will only run after you opt in, and we will update this table. Where Google services are used, we use Google Consent Mode so that Google tags respect your choice. You can learn how Google uses data at policies.google.com/technologies/partner-sites.
Changing your choice: click (also in the footer of every page) at any time. You can also delete cookies and local storage through your browser settings. We honour browser-based opt-out signals such as Global Privacy Control where required by law.
8. How long we keep data
- Enquiries that do not become projects: up to 12 months, then deleted.
- Client project records: for as long as needed to provide the service and meet legal, tax and accounting obligations (typically up to 6 years).
- Newsletter subscribers: until you unsubscribe.
- Cookie preference: up to 180 days, after which we ask again.
9. Security
The Site is served over HTTPS and we use reputable providers with appropriate security measures. Access to personal information is limited to people who need it. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we will notify you and the relevant authorities of a data breach where required by law.
10. Your rights
Depending on where you live, you may have the right to:
- Access the personal information we hold about you and receive a copy.
- Correct inaccurate or incomplete information.
- Delete your information ("right to be forgotten").
- Restrict or object to certain processing, including direct marketing.
- Data portability — receive your data in a commonly used format.
- Withdraw consent at any time, without affecting earlier lawful processing.
- Opt out of sale or sharing — although we do not sell or share data, you may still submit this request.
- Non-discrimination — we will not treat you differently for exercising your rights.
- Complain to your local data protection authority.
To exercise any right, email privacy@craftedfurnitureco.com. We may need to verify your identity before acting on a request. We aim to respond within 30 days, or sooner where the law requires. Exercising your rights is free of charge.
11. Children's privacy
The Site is intended for adults and is not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has sent us personal information, please contact us and we will delete it.
12. International transfers
Some of our service providers may process data in other countries. Where data is transferred internationally, we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses where required.
13. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top will change, and significant changes will be highlighted on the Site.
14. Contact us
Questions or requests about privacy: privacy@craftedfurnitureco.com. General enquiries: hello@craftedfurnitureco.com or our contact form.
See also our Terms & Conditions and Disclaimer.