Privacy Policy

1. Introduction

Craft and Graft Consulting (“we”, “us”, “our”) is committed to protecting your privacy and ensuring that your personal data is handled safely and responsibly. This Privacy Policy explains what personal information we collect, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our website, you agree to the practices described in this policy.

2. Who We Are

Craft and Graft Consulting
Email: rebecca@craftandgraftconsulting.com
Phone: 07565 137048

We act as the Data Controller for the personal information you provide to us.

3. What Information We Collect

We may collect and process the following types of personal data:

Information you provide directly:

Your name, email address, phone number, and any other details you submit through contact forms, emails, or phone calls.
Information you provide when enquiring about or using our services.

Information collected automatically:

When you visit our website, we may automatically collect:

IP address
Browser type and version
Pages you visit and how you interact with the site
Cookies and similar tracking technologies (see “Cookies” below)

4. How We Use Your Information

We use your personal data for the following purposes:

To respond to enquiries and provide our services.
To manage our business relationship with you.
To improve our website and services.
To maintain records for administrative or legal purposes.
To send relevant updates or information if you have opted in.

We will never sell your personal data.

5. Legal Bases for Processing

We process your data under one or more of the following lawful bases:

Consent — when you voluntarily provide information or opt into communications.
Legitimate interests — such as responding to enquiries, running our business, and improving our website.
Contract — when we need your information to provide a service you have requested.
Legal obligation — when we must keep certain records or comply with the law.

6. Sharing Your Information

We may share your information with trusted third-party service providers such as:

Website hosting and analytics providers
Email or communication tools

These providers only receive the information necessary to perform their services and must keep your data secure.

We do not transfer your data outside the UK unless appropriate safeguards are in place.

7. Data Retention

We keep your personal data only for as long as necessary to fulfil the purposes outlined in this policy, including:

Responding to enquiries
Providing services
Meeting legal, accounting, or reporting requirements

8. Your Rights

Under UK GDPR, you have the right to:

Access the personal data we hold about you
Request correction of inaccurate information
Request deletion of your personal data
Object to or restrict processing
Request data portability
Withdraw consent at any time (where applicable)

To exercise any of these rights, contact us at:
rebecca@craftandgraftconsulting.com

You also have the right to raise concerns with the Information Commissioner’s Office (ICO):
https://www.ico.org.uk

9. Cookies

Our website may use cookies to:

Improve functionality and user experience
Analyse visitor behaviour through tools like Google Analytics (if applicable)

You can disable cookies through your browser settings. Doing so may affect some website features.

10. Security

We take appropriate technical and organisational measures to protect your personal data and prevent loss, misuse, or unauthorised access.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.