Last Updated: November 4, 2025
1. Introduction
Welcome to Craftoria Studio.
We respect your privacy and are committed to handling personal information responsibly and transparently.
This Privacy Policy explains how personal information is collected, used, stored, shared and protected when you visit https://craftoriastudio.com, contact our team through WhatsApp or email, enquire about products, or place an order.
Craftoria Studio operates primarily as a product catalogue and personal enquiry service. Purchases and individual arrangements may be discussed directly with our customer service team rather than completed through an online checkout.
2. Information We Collect
Depending on how you interact with us, we may collect:
- Contact information, such as your name, email address, WhatsApp number and other contact details you provide.
- Product enquiry information, including the items you are interested in, preferred models, colours, materials, sizes and customisation requests.
- Order information, such as product codes, agreed specifications, prices, payment status and customer confirmations.
- Delivery information, including recipient names, shipping addresses, telephone numbers and information reasonably required for shipping and customs procedures.
- Customer service communications, including messages, photos, videos, pre-shipment approvals and after-sales enquiries.
- Technical and website usage information, such as IP address, device and browser information, pages visited, referral sources, campaign parameters and cookie-related identifiers where applicable.
We ask customers not to send unnecessary sensitive personal information through WhatsApp, email or other communication channels.
3. How We Use Personal Information
We use personal information where reasonably necessary to:
- Respond to product enquiries and provide personalised assistance.
- Confirm product choices, specifications and customisation requirements.
- Prepare, process and manage orders and payments.
- Arrange shipping, delivery and relevant customs documentation.
- Provide actual product photos or videos for pre-shipment review.
- Maintain records of order confirmations, dispatch approvals and customer service communications.
- Investigate delivery issues, returns, refunds and other disputes.
- Protect our website, customers and business against fraud, unauthorised activity and misuse.
- Understand website performance and the effectiveness of our marketing campaigns.
- Comply with applicable legal, accounting and regulatory obligations.
We do not use information collected for order fulfilment as permission to send unrelated marketing messages.
Where direct marketing requires consent, we will obtain it before sending such communications.
4. Legal Bases for Processing
Where the GDPR or UK GDPR applies, we process personal information under the relevant legal bases, which may include:
- Contractual necessity, including responding to purchase requests and fulfilling agreed orders.
- Legitimate interests, such as providing customer support, keeping appropriate transaction records, preventing fraud and resolving disputes, where those interests are not overridden by individuals’ rights.
- Legal obligations, including applicable recordkeeping and regulatory requirements.
- Consent, where required for optional marketing communications, analytics cookies or advertising-related tracking.
You may withdraw consent at any time where processing relies on consent, without affecting processing already carried out lawfully.
5. WhatsApp and Customer Communications
When you contact us through WhatsApp, you may share your name, phone number, messages, photos, product preferences and order information.
We use these communications to respond to enquiries, confirm orders, coordinate pre-shipment inspections, arrange delivery and provide after-sales assistance.
Customer communications and order confirmations may be retained where reasonably necessary for service, transaction verification, dispute resolution and applicable legal obligations.
WhatsApp is operated by a third-party provider and has its own privacy practices. Please review WhatsApp’s privacy information when using the service.
6. Payments, Shipping and Service Providers
Where necessary to complete an agreed transaction, relevant information may be shared with payment service providers, financial institutions, logistics companies, customs service providers and other parties involved in processing the order.
We share only the information reasonably necessary for the relevant purpose, subject to applicable legal requirements.
We do not ask customers to provide their complete payment card credentials through ordinary WhatsApp messages.
Payment information is handled according to the payment method used and the applicable service provider’s privacy and security practices.
7. Website Analytics, Cookies and Marketing Attribution
Our website uses website technologies and may use Google Analytics 4, Google Tag Manager, cookies and campaign parameters to understand visitor activity, website performance and advertising effectiveness.
This may involve processing technical information, website interactions, referral sources and identifiers associated with website visits.
Google Tag Manager is a tool for managing website tags; the personal information processed depends on the tags and services that are actually enabled.
We may also use campaign links and internal customer service routing parameters to identify which marketing source or customer service contact a visitor used.
Where consent is legally required for non-essential cookies or tracking technologies, those technologies must be managed in accordance with the applicable consent requirements.
You may manage cookies through your browser and, where available, the website’s consent controls.
8. When We Share Personal Information
We may share relevant personal information with:
- Website hosting and technical service providers.
- Messaging and customer communication providers.
- Payment and financial service providers.
- Shipping, delivery and customs partners.
- Professional advisers or relevant authorities where legally required or necessary to establish, exercise or defend legal claims.
We do not disclose customer contact lists to unrelated parties for their independent marketing purposes without a valid legal basis.
We do not publish private customer conversations or personal delivery details as public testimonials without appropriate permission or another valid legal basis.
9. International Data Transfers
As we serve international customers, personal information may be accessed or processed in countries outside your country of residence, including through website hosting, messaging, payment and logistics providers.
Where applicable data protection law requires safeguards for international transfers, we will use an appropriate lawful transfer mechanism.
Further information about relevant transfers and safeguards can be requested through our contact details below.
10. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes described in this policy, subject to applicable legal requirements.
Retention periods are determined by the type of information and its purpose.
For example, enquiry records may be retained for customer service follow-up, while transaction, payment, shipping and dispute-related records may need to be retained for accounting, legal compliance or the establishment, exercise or defence of legal claims.
When information is no longer required, we will take reasonable steps to delete, anonymise or securely dispose of it, subject to applicable obligations.
11. Data Security
We take reasonable organisational and technical measures to protect personal information against unauthorised access, loss, alteration and disclosure.
Access to customer information should be limited to people and service providers who need it for legitimate business purposes.
No internet transmission, messaging platform or electronic storage system can be guaranteed to be completely secure.
12. Your Privacy Rights
Depending on your location and applicable law, you may have rights to:
- Request access to personal information held about you.
- Request correction of inaccurate information.
- Request deletion of eligible personal information.
- Request restriction of, or object to, certain processing activities.
- Request data portability where applicable.
- Withdraw consent where processing is based on consent.
- Object to direct marketing.
- Exercise applicable rights regarding automated decision-making and certain advertising-related uses of personal information.
We may need to verify your identity before responding to requests.
Certain information may need to be retained where required by law or for legitimate legal claims.
Where applicable, you may also lodge a complaint with the relevant data protection authority.
13. Children’s Privacy
Our products and services are intended for adults.
We do not knowingly seek to collect personal information from children for marketing or sales purposes.
If you believe a child has provided us with personal information inappropriately, please contact us so that we can review the matter.
14. Third-Party Websites and Services
Our website may contain links to external services, including WhatsApp and other third-party platforms.
Those services operate under their own terms and privacy policies.
We encourage visitors to review the privacy information provided by those third parties.
15. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our business operations, technology or applicable legal requirements.
The latest version will be made available on this page, together with its updated date.
Where legally required, we will provide additional notice of material changes.
16. Contact Us
For privacy-related questions or requests, please contact:
Craftoria Studio
Website: https://craftoriastudio.com
Email: hello@craftoriastudio.com
Legal data controller: [Insert the verified legal entity or individual operating Craftoria Studio and the required contact address before publication.]
Where an EU or UK representative is legally required, the relevant representative details must also be provided.
We will review privacy requests and respond in accordance with applicable law.