Privacy Notice

Crafted Connections is operated by Crafted Living LTD, which is the data controller for the personal data described in this notice. That means we decide how and why your personal data is processed when you use Crafted Connections.

• Account data: your name, email address, login credentials and chosen role (business owner, tradesperson or client).
• Profile and listing data: your headline, location, trade, services, listings, portfolio photos and captions, reviews you write and reactions (likes, saves, skips).
• Messages: the content of conversations you have with other members.
• Support messages: anything you send us when you contact us.
• Usage and device data: how you use the service, plus technical data such as IP address, device and browser identifiers.

Payment details (card numbers and billing information) are collected and processed by Paddle, our Merchant of Record, not by us.

• To provide the service — creating your account, showing your profile and listings, matching you with other members and delivering messages (performance of our contract with you).
• To keep Crafted Connections safe — security, fraud prevention and enforcing our terms (our legitimate interests).
• To improve the product — understanding how the service is used (our legitimate interests).
• To provide customer support (performance of our contract and legitimate interests).
• Marketing — where we send you marketing, we do so with your consent or as permitted by law, and you can opt out at any time.
• Legal obligations — where we must process data to comply with the law.

• Service providers who help us run Crafted Connections, such as hosting, storage, analytics and support tooling.
• Paddle, our Merchant of Record, for the sale of paid features, subscription management, payments, tax compliance and invoicing.
• Professional advisers such as lawyers and accountants.
• Authorities where we are required to do so by law.

Other members see the profile and listing information you choose to publish — that is the point of the service.

Some of our service providers process data outside the UK/EEA. Where that happens, we use appropriate safeguards such as adequacy decisions or standard contractual clauses.

We keep your personal data for as long as your account is active and as needed to provide the service, then for a limited period afterwards to meet legal, accounting and dispute-resolution needs. When data is no longer needed, we delete or anonymise it.

Under UK GDPR you have the right to access, rectify or erase your personal data, to restrict or object to processing, to data portability, and to withdraw consent where processing is based on consent. You can also complain to the Information Commissioner's Office (ICO). We respond to requests within one month. To exercise any of these rights, contact us at the email address shown in your account or on this page.

We use appropriate technical and organisational measures to protect your data, including encryption in transit and access controls that limit who can see what.

We use essential cookies and local storage to keep you signed in and remember your preferences. We do not use marketing cookies. You can clear cookies and site data through your browser settings, though some features will stop working without the essential ones.

We may update this notice from time to time. If we make significant changes we will let you know in the app or by email.