Privacy Policy

Who We Are

Leila's Crafts ("we", "us", "our") is a small handmade crafts business based in the Guernsey, Channel Islands. This policy explains what personal information we collect through our website and till system, how we use it, and your rights over it.

Information We Collect

Depending on how you interact with us, we may collect:

• Pre-orders and custom orders: your name, email address, phone number, and order details. If you're requesting a custom or personalised item, we may also collect reference photos you choose to upload.
• Order tracking and messages: if you use your order tracking link to send us a message about your order, we store that message and our replies.
• Stall enquiries: your name, email address, and phone number if you enquire about booking us for a stall or event. Once your enquiry is declined or the event has been and gone, we delete your email address from our records.
• Reviews: the name you choose to leave with a review and the review text itself. We don't ask for or store any contact details alongside a review.
• Till purchases: a record of what was purchased, when, and how it was paid for. If you choose to receive an emailed receipt, we use the email address you give us at the till for that purpose only.
• Loyalty programme: if you join, your name, phone number and/or email address, and your points balance.
• Raffle and prize draw entries: your name and contact details if you enter a raffle or prize draw. If you don't win, your entry is deleted once the draw has been made. If you do win, we delete your personal details as soon as you've collected your prize.
• Website usage: we log which pages are viewed, but never in a way that identifies you — see "Cookies and Website Analytics" below.

Card Payments

Card payments are taken and processed directly by our payment provider, SumUp, on their own secure card reader. Your card details never pass through or get stored on our systems — we only keep a reference to the transaction (such as a transaction ID) so we can match it to your purchase.

How We Use Your Information

We use your information to process and fulfil orders and pre-orders, respond to enquiries and messages, run our loyalty programme and raffles, issue emailed receipts when requested, and to understand which pages of our website are useful to visitors. We do not use your data for marketing emails or texts, and we do not sell or rent your data to anyone.

Legal Basis for Processing

We rely on: contract (to fulfil an order or pre-order you've placed), legitimate interest (to respond to an enquiry, run our loyalty programme, or understand website usage in an anonymised way), and consent (for example, choosing to enter a raffle, or providing an email address for a receipt).

Who We Share Your Data With

We share the minimum information necessary with:

• SumUp, our card payment provider, to process card transactions.
• Our email provider, to send order updates, tracking messages, or an emailed receipt, where applicable.
• Our own internal team, via a private staff notification channel we use to keep track of orders, enquiries, and sales — this is for our own operational use and is never shared outside the business.

We may also share information where we're required to by law.

How Long We Keep Your Data

• Raffle and prize draw entries: deleted once the draw is made, or as soon as a winner has collected their prize.
• Stall enquiries: your email address is deleted once your enquiry is declined or the event has passed.
• Reviews: kept for as long as the review remains published; no contact details are collected with a review.
• Pre-order, order, and till transaction records: kept for as long as needed to fulfil your order and to meet our bookkeeping and tax obligations, typically up to 6 years, in line with UK requirements.
• Website usage logs: kept in anonymised form only (see below), so we can't identify you from them regardless of how long they're kept.

Cookies and Website Analytics

Our website uses one small, strictly necessary cookie for security and to keep you logged in as staff — see our Cookie Policy for details. We also keep a simple, anonymous count of page views for our own records: we don't use a cookie for this, and we only ever store a one-way hashed version of your IP address, which cannot be reversed to reveal your actual IP address or identify you.

Your Rights

Under UK data protection law, you have the right to ask us what personal data we hold about you, to correct it if it's wrong, to ask us to delete it, to restrict or object to how we use it, to ask for a copy in a portable format, and to withdraw consent at any time (for example, opting out of the loyalty programme). To exercise any of these rights, contact us using the details below.

Security

We take reasonable technical and organisational steps to protect your personal data, including keeping card payment handling entirely with our payment provider rather than on our own systems, and hashing rather than storing raw IP addresses.

Children

Our website and services are intended for adults. We don't knowingly collect personal data from children.

Changes to This Policy

We may update this policy from time to time to reflect changes in how we operate. The date below shows when it was last updated.

Contact and Complaints

If you have any questions about this policy or how we handle your data, please contact us at hello@leilascrafts.com. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.