Privacy Policy

1. Introduction

Our Privacy Policy explains how we collect, use, and protect your personal information when you visit our website, Craftr.com. We respect your privacy and are committed to safeguarding your personal information. By using our website, you consent to our collection and use of your personal information as described in this Policy.

2. Who We Are

VANE IVY Ltd. ("we," "us," "our") operates this website and is responsible for processing any personal data shared by you. We are the "Data Controller" under the General Data Protection Regulation (GDPR), which means we are principally responsible for the protection of your data.

For any queries, you may contact us:

Email: support@craftr.com

3. What Information Do We Collect?

When you access our website, we may collect the following information:

• IP address & approximate location
• Information about your browser type and version
• Internet Service Provider (ISP)
• Operating System
• Date and time of access
• MAC address (if applicable)
• Links you click to access our website
• Links you click within our website
• Website usage data

Furthermore, if you use our 'Contact Us' form (or otherwise communicate with us directly), we may also collect:

• Your email address
• Any other personal data you provide in your message

If you create an account, we also store your email address, optional display name, marketing-email preference, and the domains you save as favorites.

4. Why Do We Use This Information?

We use the personal data collected for the following purposes:

• To provide access to our services – Certain data is necessary for technical delivery of our website.
• To customize your user experience – For instance, using your approximate location data to tailor certain content.
• To improve our services – We analyze usage data and feedback to enhance our offerings and user experience.
• To communicate with you – If you contact us, we use your information to respond to queries or provide support.

5. Who Do We Share Your Personal Data With?

• Hosting / Infrastructure Providers – Your data may be shared with our hosting service provider, which acts as our "Processor," enabling us to deliver the website to you.
• Analytics Services – We may use Google Analytics or similar services to assess website traffic and user interactions. These services may process data (e.g., your IP address) on our behalf.
• International Transfers: If Google or any other analytics provider is based outside the European Union (e.g., in the United States), we will take steps to ensure an appropriate level of data protection, such as using EU-approved standard contractual clauses or relying on an adequacy decision if applicable.
• Legal Requirements – We may be compelled by law enforcement, government agencies, or judicial authorities to disclose data if required to do so.

6. Legal Basis for Processing Personal Data

Wherever we process your personal data, we do so under one of the following legal bases (as applicable):

• Consent – Where you have given clear consent for us to process your personal data (e.g., agreeing to certain types of cookies).
• Legitimate Interests – Where processing is necessary for our legitimate interests, provided these interests are not overridden by your fundamental rights and freedoms.
• Legal Obligations – Where we have a legal or regulatory obligation to process personal data.

7. Your Rights

Under the GDPR, you have several rights relating to your personal data. These include:

• Right of Access: You can request a copy of the personal data we hold about you, and information on how and why we process it.
• Right of Rectification: You can ask us to correct any incomplete or inaccurate data.
• Right of Erasure ("Right to be Forgotten"): In certain circumstances, you can ask us to delete your personal data if there is no compelling reason for us to continue using it.
• Right to Restrict Processing: You can request that we suspend the processing of your personal data in certain scenarios (e.g., if you contest its accuracy).
• Right to Object: If we process your personal data on the basis of our legitimate interests, you have the right to object to such processing.
• Right to Data Portability: You can request that we provide your personal data in a commonly used machine-readable format, or request it be transferred to a third party.
• Right Not to Be Subject to Automated Decision-Making: You have the right not to be subject to a decision based solely on automated processing, including profiling.

You may find more detailed information about your rights on the official GDPR website or your local Supervisory Authority's website.

To exercise any of these rights, please contact us at: support@craftr.com

If you believe we are violating your rights, you have the right to lodge a complaint with your local Supervisory Authority.

7a. Data Processors

We rely on the following third-party processors to deliver Craftr:

• Supabase - authentication and database. Stores your account record and favorites. Privacy policy.
• Brevo - email marketing and transactional email. Receives your email address and event activity so we can send relevant follow-ups. Privacy policy.
• Stellar - on-site A/B testing and analytics. Loads only after you accept cookies.
• Google Tag Manager - container for measurement scripts. Loads only after you accept cookies.

You can delete your account at any time from the Account page. Deletion removes your profile, favorites, and event history, and also requests deletion of your Brevo contact record.

8. Data Retention

• Website Access Data: Information technically required for you to access our website is generally retained for up to 14 months (or as otherwise required by law or for legitimate business purposes).
• Contact Form / Email Communications: Information we receive through our 'Contact Us' form or via email is retained for approximately 365 days from the date of our last interaction, unless we need to keep it longer for legal or regulatory reasons.

9. Security Measures

We use appropriate technical and organizational measures to safeguard the personal data we process. These measures are designed to provide a level of security appropriate to the risk of processing your personal data.

10. Changes to This Policy

We may update or modify this Privacy Policy from time to time to reflect changes in our data practices or relevant laws. Any changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this Policy regularly to stay informed about how we protect your personal data.

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

Email: support@craftr.com

Thank you for visiting Craftr. We appreciate your trust in us.