Privacy policy

Last updated 6 October 2026

Who I am

[Business name] is run by a sole trader at [Address line], [Town], East Sussex [Postcode]. I'm the data controller for the personal data described here. Contact: hello@brightcrafts.co.uk.

What I collect

Your name, email, phone number if given, delivery address and order history. If you send a message or ask to hear about similar pieces, I keep your name, email and message. I do not store card details; PayPal handles payment.

Why I use it

To fulfil your order and send order emails (contract), answer your messages and tell you about similar pieces when you ask (consent, which you can withdraw), and keep records I am legally required to keep (legal obligation).

Who else sees it

PayPal (payment), Mailjet (email delivery), Google Analytics (only with your consent) and my web host. Each processes data only to provide their service.

How long I keep it

Order records for 6 years for tax purposes, then deleted or anonymised. Messages for 12 months. Requests to hear about similar pieces until I've emailed you, you ask me to remove them, or 12 months have passed. TODO: legal review

Your rights

You can ask to see, correct or delete your data by emailing me. You can also complain to the Information Commissioner's Office (ico.org.uk).