Comfort in Crochet · Customer care
Privacy policy
How we look after your information when you browse, shop or subscribe.
Last updated: 5 October 2026
Who is responsible
Comfort in Crochet is responsible for the personal information described here. Contact [email protected] with privacy questions or requests. The legal identity of the data controller and its business postal address must be added before this policy is published.
Information we collect
When you order, we receive your name, email address, delivery and billing details, telephone number if supplied, purchased items, order reference, payment status and payment transaction identifiers. We collect your email address when you subscribe to our newsletter and information you send in correspondence. Hosting and service providers may process technical information such as IP addresses, browser details and security logs to deliver and protect the service.
Why we use it
We use order and contact information to process payment, fulfil purchases, send order updates and handle returns under our contract with you. We keep necessary financial records to meet legal obligations. We use relevant correspondence and technical information for our legitimate interests in customer support, fraud prevention and website security, balanced against your rights. Newsletter messages are sent with your consent; you can withdraw it at any time.
Services and sharing
We use Stripe for payment processing, Strapi to manage order records, Resend for order emails and Mailchimp for newsletter subscriptions. Hosting providers process information needed to operate the site, and delivery providers receive the details needed to deliver orders. Providers only receive information relevant to their role, subject to applicable arrangements; some also act as independent controllers. We may disclose information where required by law or to protect legal rights. We do not sell your personal information.
International processing
Some providers may process information outside the UK. Where required, transfers must be protected by UK adequacy regulations or approved contractual safeguards, such as the UK International Data Transfer Agreement or Addendum. Contact us for information about the safeguards applying to your data.
How long information is kept
We keep information only as long as needed for its purpose. Order and accounting records are normally retained for up to six years after the relevant financial year, subject to applicable legal requirements. Enquiries are retained for as long as needed to resolve them and related claims. Newsletter information is retained until you unsubscribe or the service ends; limited suppression information may be retained to honour your opt-out. Provider logs and backups follow their applicable retention schedules. These periods should be reviewed against the business’s actual recordkeeping arrangements.
Basket storage and cookies
The website uses local storage named cic-cart to remember the products and quantities in your basket on your device. It stays there until you remove it or clear browser storage. It supports the shopping service you request. The current storefront does not include advertising or analytics trackers. Stripe’s hosted checkout and external sites may use their own cookies or similar technologies; read their notices when using those services. You can clear site storage through your browser settings, which will clear your saved basket.
Newsletter choices
You can unsubscribe through the link in newsletter emails or contact us. Unsubscribing from marketing does not prevent necessary messages about an order. Providing order information is necessary to complete and deliver a purchase; newsletter subscription is optional.
Your rights
Depending on the circumstances, you can request access, correction, erasure, restriction or portability of your information, object to processing based on legitimate interests, and withdraw consent without affecting earlier lawful processing. We may need to verify your identity and normally respond within one month. We do not use your information for solely automated decisions with legal or similarly significant effects.
Security and complaints
We use reasonable technical and organisational measures to protect personal information, but no online service can guarantee absolute security. Contact us if you have a concern. You can also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint/.
Updates
We may update this policy when our services or practices change. The date below identifies the current version.
Need a hand? [email protected]