custom craft ltd - Privacy Policy

This Policy applies between you, the User of this Web Site and Custom Craft LTD the owner and provider of this Web Site. This Policy applies to our use of any and all Data collected by us in relation to your use of the Web Site and our Services. This Policy was last updated on the 06 September 2022.

At Custom Craft we take data protection and information security very serious. The effective management of all personal data, including security and confidentiality, is the heart of our business and naturally underpins our practices and processes.

This Policy informs you about the type, scope and purpose of the processing of personal data we collect, use and process as a part of our website and its functions and content as well as our external online presences, such as our Social Media Profiles (the “Services”).

Who we are

We are Custom Craft LTD (“we”, “our”, “us”) of 337 Holdenhurst Road, Bournemouth, BH8 8BT United Kingdom. If you have any questions about your personal information, or how we use it, you can contact us via email at contact@customcraftltd.com.

Also, we are the data “controller”, which means we are responsible for deciding how and why your personal information is used. We’re also responsible for making sure it is kept safe, secure and handled legally.

We comply with all data processing procedures (e.g. collection, processing and transmission) in accordance with the statutory provisions of the UK`s Data Protection Act 2018 and in line with Regulation (EU) 2016/679 (GDPR).

The legal bases for processing your data

Unless the legal basis is not specifically mentioned in this Policy, the following applies:

Consent – This is where we have asked you to provide explicit permission to process your data for a particular purpose. (Art. 6 Para. 1 lit. a and Art. 7 GDPR)

Contract – This is where we process your information to fulfil a contractual arrangement we have made with you. (Art. 6 Para. 1 lit. b GDPR)

Answering your business enquiries – This is where we process your information to reply to your messages, e-mails, posts, calls, etc. (Art. 6 Para. 1 lit. b GDPR)

Legitimate Interests – This is where we rely on our interests as a reason for processing, generally this is to provide you with the best products and service in the most secure and appropriate way. (Art. 6 Para. 1 lit. f GDPR). Of course, before relying on any of those legitimate interests we balance them against your interests and make sure they are compelling enough and will not cause any unwarranted harm.

Legal Obligation – This is where we have a statutory or other legal obligation to process the information, such as for the investigation of crime. (Art. 6 Para. 1 lit. b GDPR)

Vital interests – This is where we process your information for communications about security, privacy and performance improvements of our services. Or for establishing, exercising or defending our legal rights. (Art. 6 para. 1 lit. d GDPR)

Data Subject Rights

You have a number of ‘Data Subject Rights’ below is some information on what they are and how you can exercise them. There is more information on each right on the Information Commissioners (ICO) website and you can simply follow the links provided to learn more.

• The right to be informed
• The right of access
• The right to rectification
• The right to erasure
• The right to restrict processing
• The right to data portability
• The right to object

In addition, where the processing of your personal information is based on consent, you have the right to withdraw that consent without detriment at any time by contacting us.

However, the above rights may be limited in some circumstances, for example, if fulfilling your request would reveal personal information about another person, if you ask us to delete information which we are required to have by law, or if we have compelling legitimate interests to keep it. We will let you know if that is the case and will then only use your information for these purposes. You may also be unable to continue using our services if you want us to stop processing your personal information.

Issues, concerns and Complaints

We encourage you to get in touch if you have any concerns with how we collect or use your personal data. You do however also have the right to lodge a complaint directly with the ICO, their contact details can be found on their website. Please direct all requests for information, requests for information or objections to data processing to us.

Collection, use and storage of data

When you use our Services, we collect different data from you, partly also so-called personal data. This is information that relates to an identified or identifiable natural person (hereinafter “data subject”).

In contrast, it is equally possible to use our Service (i.e. visiting the website) without disclosing personal data. However, when you are looking at our website you transmit data to our web server (due to technical necessity) via your internet browser. Doing so

the following data is recorded from the ongoing connection or communication between your internet browser and our web server:

• Date and time of the request
• Name of the requested file
• Page from which the file was requested
• Access status (file transferred, file not found, etc.)
• Web browser and operating system used
• complete IP address of the requesting computer
• amount of data transferred

For reasons of technical security, in particular to defend against attempted attacks on our web server, this data is stored by us for a short period of time. And as mentioned above, it is not possible for us to draw conclusions about individual persons on the basis of this data. The legal basis for the storage is our legitimate interest.

Further personal data is only collected if you provide it voluntarily, for example in the context of an enquiry or when you interact with our chat functions or sociacl media profiles. Depending on the area concerned, Custom Craft LTD uses the personal data provided by you to answer your enquiries and for the purpose of technical administration of the websites. In detail, the use in the respective areas follows as follows:

Contacting Us

If you contact us via our contact form, Whats App, Face Book, Phone or Email the data you provide will be stored so that your message can be forwarded to the correct contact person. This is done in accordance with Article 6 lit. b) GDPR and your data provided via your message form will not be used for any other purposes, in particular not for advertising.

When do we disclose your Personal Data?

We may share information with organisations that help us to provide our Services and who may process such data on our behalf and to support this website and our services, such as our manufacturing facility in Turkey. This will only be done in accordance with Art. 6 para. 1 lit. b GDPR).

Also, if you have consented to it, or where there we have a legal obligation to do so or on the basis of our legitimate interests (e.g. when using agents, hosting providers, tax, business and legal advisors, customer care, accounting, billing and similar services that allow us to perform our contractual obligations, administrative tasks and duties efficiently and effectively).

We may also disclose information in other circumstances such as when you agree to it or if the law, a Court order, a legal obligation or regulatory authority ask us to. If the purpose is the prevention of fraud or crime or if it is necessary to protect and defend our right, property or personal safety of our staff, the website and its users.

If we commission third parties to process data on the basis of a so-called “processing agreement”, this is done on the basis of Art. 28 GDPR.

In relation to information obtained about you from your use of our website, we may share a cookie identifier and IP data with analytic and advertising network services providers to assist us in the improvement and optimisation of our website which is subject to our Cookies Policy.

International transfers

Our main operations are based in the UK and your personal information is generally processed, stored and used within in the UK. In some instances, your personal information may be processed outside the European Economic Area. If and when this is the case we take steps to ensure there is an appropriate level of security so your personal information is protected in the same way as if it was being used within the UK .

Where we need to transfer your data outside the UK we will use one of the following safeguards:

• The use of by the ICO approved standard contractual clauses in contracts for the transfer of personal data to third countries.
• Transfers to a non-EEA country with privacy laws that give the same protection as the UK and the EEA.

Online presences in social media

We maintain online presences on the basis of our legitimate interests. We maintain online presences within social networks and platforms in order to communicate with customers, interested parties and users who are active there. Unless otherwise stated in this policy, we process the data of users if they communicate with us within the social networks and platforms, e.g. write articles on our online presences or send us messages.

Economic Analyses and Market Research

In order to run our business economically, to identify market trends, customer and user wishes, we analyse the data available to us on business transactions, contracts, enquiries, etc. In doing so, we process communication data, contract data, usage data, metadata, whereby the persons concerned include customers, interested parties, business partners, visitors and users of the online offer.

This analyses is carried out for the purposes of business management evaluations, marketing and market research. The analyses serve us to increase user-friendliness, to optimise our offer and business efficiency and are not disclosed externally, unless they are anonymous analyses with summarised values.

Communication by mail, e-mail or telephone

We use means of distance communication, such as post, telephone or e-mail, for business and marketing purposes. We process inventory data, address and contact data as well as contract data of customers, participants, interested parties and communication partners.

The processing is based on Art. 6 para. 1 lit a, Art. 7 GDPR, Art. 6 para. 1 lit f GDPR in connection with legal requirements for advertising communications. Contact shall only be established with the consent of the contact partners or within the scope of the statutory permissions and the processed data shall be deleted as soon as they are not required and otherwise with objection/ revocation or discontinuation of the basis for authorisation or statutory archiving obligations.

Accuracy

It is important that the data we hold about you is accurate and current, therefore please keep us informed of any changes to your personal data.

Children Data

Our website is not intended for children and we do not knowingly collect data relating to children. If you become aware that your Child has provided us with Personal Data, without parental consent, please contact us and we take the necessary steps to remove that information from our server.

Processing of special categories of data (Art. 9 para. 1 GDPR):

No special categories data is processed.

Automated decision-making and profiling (Art.22 GDPR)

We do not use automation for decision-making and profiling

Changes

This Policy and our commitment to protecting the privacy of your personal data can result in changes to this Policy. Please regularly review this Policy to keep up to date with any changes.

Queries and Complaints

Any comments or queries on this policy should be directed to us using the following contact details.

Custom Craft LTD

337 Holdenhurst Road

Bournemouth

BH8 8BT

If you believe that we have not complied with this policy or acted otherwise than in accordance with data protection law, then you should notify us. You can also make a referral to, or lodge a complaint with, the ICO.