Privacy Policy
Last updated: 15 December 2025
1. Introduction
CraftCloud ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.
We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Information We Collect
We may collect the following types of information:
Personal Information
- Name and contact details (email address, phone number)
- Business information (company name, job title)
- Billing and payment information
- Project requirements and specifications
- Communication history and correspondence
Technical Information
- IP address and browser information
- Device and operating system details
- Website usage data and analytics
- Cookies and similar tracking technologies
3. How We Use Your Information
We use your information for the following purposes:
- To provide and deliver our services
- To process payments and manage billing
- To communicate about projects and provide support
- To send service updates and important notices
- To improve our website and services
- To comply with legal obligations
- To protect against fraud and security threats
4. Legal Basis for Processing
We process your personal data based on:
- Contract: Processing necessary to fulfil our services to you
- Legitimate Interests: For business operations and service improvements
- Consent: Where you have given explicit consent for specific purposes
- Legal Obligation: To comply with applicable laws and regulations
5. Data Sharing and Disclosure
We may share your information with:
- Service providers (hosting, payment processing, analytics)
- Professional advisers (legal, accounting, insurance)
- Law enforcement when required by law
- Business partners with your consent
We do not sell your personal information to third parties.
6. Data Security
We implement appropriate technical and organisational measures to protect your personal data, including:
- Encryption of data in transit and at rest
- Regular security assessments and updates
- Access controls and authentication measures
- Employee training on data protection
- Secure backup and disaster recovery procedures
7. Your Rights
Under UK GDPR, you have the following rights:
- Access: Request a copy of your personal data
- Rectification: Request correction of inaccurate data
- Erasure: Request deletion of your data (right to be forgotten)
- Restriction: Request limited processing of your data
- Portability: Receive your data in a portable format
- Objection: Object to certain types of processing
To exercise these rights, please contact us at admin@craftcloud.co.uk.
8. Contact Information
If you have any questions about this Privacy Policy, please contact us:
Data Controller: CraftCloud
Email: admin@craftcloud.co.uk
Website: www.craftcloud.co.uk
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.