Privacy Policy

This Privacy Policy explains how Crochet Kerry collects and uses your personal data in accordance with UK GDPR and the Data Protection Act 2018.

Data controller: Crochet Kerry, kerry@crochetkerry.co.uk.

What we collect: your name, email, delivery address, order history and any messages you send us. We collect payment information via our payment processor; we do not store card details.

Why we use it: to process and deliver your orders, respond to enquiries, send order updates, and — only with your consent — send marketing emails.

Lawful basis: performance of a contract (orders), legitimate interests (running our shop), and consent (marketing).

Sharing: we share data only with service providers needed to fulfil your order (e.g. payment and delivery providers). We never sell your data.

Retention: we keep order records for as long as legally required for tax purposes.

Your rights: you may request access, correction, deletion, restriction, or portability of your data, and you may withdraw marketing consent at any time. Contact kerry@crochetkerry.co.uk. You may also complain to the ICO (ico.org.uk).