Legal
- We collect only what we need to run the shop.
- We never sell your data.
- You can ask to see or delete your data at any time.
Last updated: 2 November 2026
This policy explains what personal data CraftsBeefy collects, why, and your rights under the UK GDPR and the Data Protection Act 2018.
1. Controller
CRAFTSBEEFY PUBLICATIONS LTD, registered in England & Wales (No. 16113494). Registered office: 2nd Floor College House, 17 King Edwards Road, Ruislip, London HA4 7AE. Contact us about privacy at contact@craftsbeefy.com.
2. What we collect and why
| Data | Purpose | Lawful basis | Kept for |
|---|---|---|---|
| Name, email, password (hashed) | Your account and downloads | Contract | Until you delete your account |
| Orders, billing address, VAT country | Selling to you, invoices, tax | Contract, legal obligation | 6 years (HMRC) |
| Download log (product, time, hashed IP) | Download limits, fraud prevention, payment disputes | Legitimate interests | 24 months |
| Consent records (checkout waiver, marketing) | Proving what you agreed to | Legal obligation | 6 years |
| Messages and custom-order files | Replying to you, quotes | Legitimate interests / contract | 24 months |
| Email verification code, sign-in attempts | Confirming new accounts, stopping abuse | Legitimate interests | Up to 24 hours |
| Newsletter email | Freebies and news | Consent | Until you unsubscribe |
| Analytics cookies | Improving the site | Consent | Up to 14 months |
| Marketing cookies | Measuring our adverts | Consent | Up to 14 months |
3. Who we share it with
Only with service providers who process data for us: Hostinger (hosting, EU/UK), Stripe (payments, as independent controllers for fraud and compliance), Google (analytics and advert measurement), Meta (advert measurement) and Microsoft Clarity (site usage), all only with consent, and our email provider. We never sell your data.
4. International transfers
Some providers process data outside the UK (for example in the USA). We rely on UK adequacy regulations, the UK International Data Transfer Addendum or the UK–US Data Bridge.
5. Your rights
You can ask to access, correct, delete, restrict or port your data, object to processing, and withdraw consent at any time. Email contact@craftsbeefy.com; we reply within one month. You can also complain to the Information Commissioner’s Office (ico.org.uk, 0303 123 1113).
6. Cookies
See our Cookie Policy. You can change your choice at any time in Cookie settings.
7. Security
HTTPS everywhere, hashed passwords, optional two-factor login, signed download links, and payment card data that never touches our servers.
8. Children
Our products are for children, but accounts are for adults. We don’t knowingly collect data from children under 13.