1. Who We Are

Fenwick Family Crafts is a family-run business based in Dundee, Scotland. We create and sell personalised handmade gifts, laser-engraved products, and custom keepsakes through our website at www.fenwickfamilycrafts.co.uk.

Business name: Fenwick Family Crafts

Location: Dundee, Scotland, United Kingdom

Website: www.fenwickfamilycrafts.co.uk

Contact email: info@fenwickfamilycrafts.co.uk

We are the data controller for the personal information we collect and process. This Privacy Policy explains what data we collect, why we collect it, how we use it, and your rights under UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What Personal Data We Collect

We may collect the following categories of personal information when you use our website or purchase from us:

2.1 Information you provide directly

• Full name
• Delivery and billing address
• Email address
• Phone number (if provided)
• Personalisation details for your order (e.g. names, dates, messages for engraving)
• Custom design requests and any images or text you submit for that purpose
• Messages sent through our contact form

2.2 Information collected automatically

• IP address
• Browser type and version
• Pages visited and time spent on our site
• Referring website or source
• Cookie identifiers (see Section 7 for more on cookies)

2.3 Payment information

We do not directly collect or store your payment card details. Payments are processed by secure third-party payment providers. Please refer to their privacy policies for details of how payment data is handled.

3. How We Use Your Personal Data

We use your personal data for the following purposes:

Processing your order: To create, package, and dispatch the products you have ordered, including applying any personalisation details.

Customer communication: To send order confirmations, dispatch notifications, and respond to your enquiries.

Custom design requests: To carry out bespoke or custom design work as agreed with you.

Legal compliance: To comply with our legal obligations, including financial record-keeping and tax requirements.

Website analytics: To understand how visitors use our website so we can improve it (using anonymised or aggregated data where possible).

Marketing (with your consent): If you have opted in, we may send you occasional newsletters or updates about new products and promotions. You can unsubscribe at any time.

4. Legal Basis for Processing

Under UK GDPR, we rely on the following legal bases to process your personal data:

• Contract performance – processing is necessary to fulfil your order or respond to a custom design request.
• Legal obligation – where we are required to retain records by law (e.g. tax and accounting records).
• Legitimate interests – for website analytics and fraud prevention, where this does not override your rights.
• Consent – for marketing communications and non-essential cookies.

5. Who We Share Your Data With

We do not sell your personal data. We may share it with trusted third parties only where necessary:

• Postal and courier services – to deliver your order (your name and delivery address will be shared).
• Payment processors – to handle secure payment transactions.
• Website platform and hosting providers – our website is built and hosted via IONOS; their services power the platform we operate on.
• Analytics tools – IONOS SiteAnalytics is used to help us understand website usage.
• Translation services – a third-party translation tool may be used on our site (with your consent).
• Google Maps – if embedded on our website, Google may process data in accordance with their privacy policy.

All third parties we work with are required to handle your data securely and in accordance with applicable data protection law. Where they act as data processors on our behalf, appropriate data processing agreements are in place.

6. International Data Transfers

Some of our third-party service providers may be based outside the UK or EEA. Where this is the case, we ensure appropriate safeguards are in place, such as UK adequacy decisions or Standard Contractual Clauses, to protect your data.

7. Cookies

Our website uses cookies — small text files stored on your device — to help the site function and to understand how it is used. The types of cookies we use include:

Essential cookies: Required for the website and our online shop to operate correctly. These cannot be disabled.

Analytics cookies: Used by IONOS SiteAnalytics to collect anonymised information about how visitors use our site.

Third-party cookies: Set by services such as Google Maps or our website translation tool, where you have consented to their use.

When you first visit our website, you will be shown a cookie consent banner. You can choose which non-essential cookies to accept or decline. You can also update your preferences at any time using the Privacy Settings option on our website.

For more information about cookies and how to manage them in your browser, visit www.aboutcookies.org.

8. How Long We Keep Your Data

We retain your personal data only for as long as necessary:

• Order records (including personalisation details and contact information) are kept for 7 years to comply with HMRC tax record requirements.
• Customer enquiry records are retained for up to 2 years.
• Marketing consent records are kept until you withdraw consent, plus a reasonable period thereafter.
• Website analytics data is retained in line with IONOS’s data retention settings.

9. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Right of access – to request a copy of the personal data we hold about you.
• Right to rectification – to ask us to correct inaccurate or incomplete data.
• Right to erasure – to request deletion of your data, where there is no overriding legal reason to retain it.
• Right to restrict processing – to ask us to limit how we use your data in certain circumstances.
• Right to data portability – to receive your data in a structured, commonly used format.
• Right to object – to object to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent – where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, please contact us using the contact form on our website. We will respond within one month. You also have the right to lodge a complaint with the UK’s data protection regulator:

Information Commissioner’s Office (ICO): www.ico.org.uk | 0303 123 1113

10. Data Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. Our website uses HTTPS encryption. Access to order data is limited to those who need it to fulfil your order.

However, no internet transmission is completely secure, and we cannot guarantee absolute security.

11. Children’s Privacy

Our website and products are intended for adults. We do not knowingly collect personal data from children under the age of 13. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

12. Third-Party Links

Our website may contain links to external websites (for example, social media platforms). We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The most current version will always be available on our website, with the ‘Last updated’ date shown at the top.

14. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please get in touch:

Fenwick Family Crafts 

Dundee, Scotland

Website: www.fenwickfamilycrafts.co.uk

Contact: Please use the contact form on our website

We are committed to handling your data with care and transparency. Thank you for trusting Fenwick Family Crafts.