Privacy Policy

Privacy Policy

Last updated: 5 November 2026

Craftcoat respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains what personal information we collect, why we collect it, how we use it, who we share it with, how long we retain it and the rights you have under applicable data protection law.

This policy applies to the Craftcoat website, online store, customer accounts, orders, enquiries and related business activities.

1. Who We Are

Craftcoat is a trading name of Express Global Products Ltd, a company registered in England and Wales.

Company details

Express Global Products Ltd
11 Mortimer Road
Cubley
S36 6DE
United Kingdom

Company Number: 12537003
VAT Number: GB 349 4645 64
Email: info@craftcoat.co.uk
Website: https://craftcoat.co.uk

Express Global Products Ltd is the data controller responsible for personal information processed through Craftcoat where we determine the purposes and means of processing.

We process personal information in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).

2. Personal Information We Collect

Depending on how you interact with Craftcoat, we may collect:

  • Your name and contact details.

  • Billing and delivery addresses.

  • Email address and telephone number.

  • Order details and purchase history.

  • Products purchased and transaction records.

  • Customer account information.

  • Customer service correspondence.

  • Returns, refunds and delivery enquiries.

  • Reviews, photographs and other content you submit.

  • Marketing preferences and consent records.

  • Business names and business contact details.

  • Trade and wholesale account information.

  • Distributor enquiry information.

  • Website usage and browsing activity.

  • Device type, browser and operating system information.

  • IP address and approximate geographic location.

  • Information collected through cookies and similar technologies.

  • Fraud prevention and security-related information.

We aim to collect only information reasonably necessary for legitimate and specified purposes.

Some information is provided directly by you, while other information may be collected automatically when you use our website or received from service providers involved in fulfilling your orders.

3. Orders and Payments

When you place an order, we process personal information to:

  • Accept and process your order.

  • Arrange and confirm payment.

  • Prepare, dispatch and deliver products.

  • Provide order confirmations and tracking information.

  • Communicate about your purchase.

  • Handle returns, refunds and delivery problems.

  • Prevent and investigate fraud.

  • Maintain appropriate accounting, tax and business records.

  • Comply with applicable legal obligations.

The lawful bases for this processing generally include performance of a contract, compliance with legal obligations and our legitimate interests in operating and protecting our business.

Payments are processed using Shopify Payments and other supported payment providers available through our checkout.

Craftcoat does not ordinarily receive or store complete payment card details.

Payment providers process payment information in accordance with their own security requirements and privacy notices.

4. Customer Accounts

Customers may use account functionality provided through our Shopify store.

We may process account information to:

  • Provide access to account features.

  • Display order history and order status.

  • Simplify future purchases.

  • Manage account preferences.

  • Provide customer support.

  • Protect account security.

Our customer accounts may be accessed through a Craftcoat-branded account domain.

Account authentication and related services may be provided by Shopify.

Customers should take reasonable precautions to protect access to their email accounts and any account credentials.

5. Marketing Communications

You may choose to receive marketing communications from Craftcoat, including:

  • Product announcements.

  • Special offers and promotions.

  • New product information.

  • Tutorials and demonstrations.

  • Practical making advice.

  • News and updates about Craftcoat.

We send electronic marketing communications where we have an appropriate lawful basis and where permitted under applicable marketing and privacy laws.

Where consent is required, we will obtain it before sending marketing communications.

Where legally permitted, we may send relevant marketing to existing customers under applicable rules for marketing similar products, provided the required opt-out opportunities have been given.

You can unsubscribe from marketing emails at any time using the unsubscribe link in the message or by contacting info@craftcoat.co.uk.

Unsubscribing from marketing will not prevent essential transactional communications relating to your orders, account or enquiries.

We may use Shopify or specialist email marketing providers to manage communications and preferences.

6. Website Analytics

We use website analytics to understand how visitors find and use Craftcoat.

This may include Google Analytics 4 and other analytics technologies.

Information collected may relate to:

  • Website visits.

  • Traffic sources.

  • Pages viewed.

  • Products viewed.

  • Website navigation.

  • Device and browser information.

  • Purchases and conversion activity.

  • Website performance.

  • Marketing campaign effectiveness.

We use this information to improve our website, products, customer experience and marketing activities.

Where required by applicable law, non-essential analytics cookies and similar technologies will only be used after the appropriate consent has been obtained.

You can manage relevant preferences through the cookie controls provided on our website.

7. Advertising and Remarketing

Craftcoat may advertise through platforms including:

  • Google.

  • Facebook.

  • Instagram.

  • TikTok.

  • Other relevant advertising services.

Where implemented, we may use advertising pixels, conversion tracking, tags, cookies and similar technologies to measure advertising effectiveness and provide relevant advertising.

Information processed may include:

  • Website visits and interactions.

  • Products viewed.

  • Purchases and conversions.

  • Advertising interactions.

  • Device and browser information.

  • Technical identifiers used by advertising platforms.

Where legally required, advertising and remarketing technologies will not be activated until appropriate consent has been provided.

Advertising platforms may process certain information under their own privacy policies and, depending on the service, may act as independent controllers or jointly with other organisations.

We do not authorise advertising providers to use customer information beyond the purposes and arrangements permitted by applicable law and our agreements with those providers.

8. Cookies and Similar Technologies

Our website uses cookies and similar technologies.

These may include:

Essential cookies

Required for website functionality, security, shopping baskets, checkout and customer account features.

Analytics cookies

Used to understand website performance and visitor behaviour.

Advertising cookies

Used, where implemented and permitted, for advertising measurement and relevant marketing.

Preference cookies

Used to remember certain website settings and preferences.

Where required by law, we will request consent before placing or accessing non-essential cookies or similar technologies.

You can manage your preferences through the cookie consent controls available on our website.

Further information may be provided in our Cookie Policy or cookie preference information.

9. Reviews and Customer Content

Customers may submit product reviews, ratings, photographs or other content relating to Craftcoat products.

Where you submit such content, we may process:

  • Your name or display name.

  • Review or rating.

  • Photographs or other submitted material.

  • Relevant purchase information.

  • Information necessary to verify or manage the review.

Reviews and customer content submitted for publication may appear publicly on our website.

Please avoid including personal information in public reviews that you do not wish to disclose.

We may use third-party services to collect, verify, manage or display customer reviews.

Any use of submitted content for marketing will be subject to applicable law and the relevant permissions or licence terms.

10. Customer Enquiries and Contact Forms

If you contact Craftcoat by email, website form or another communication channel, we may collect your name, contact information and details of your enquiry.

We use this information to:

  • Respond to questions.

  • Provide product guidance.

  • Assist with orders.

  • Resolve customer service issues.

  • Maintain appropriate records of communications.

The lawful basis will depend on the enquiry and may include steps relating to a contract, our legitimate interests or compliance with legal obligations.

11. Trade and Wholesale Customers

Businesses may apply for or operate trade or wholesale accounts with Craftcoat.

For these purposes, we may collect:

  • Business name.

  • Contact name.

  • Business address.

  • Email address and telephone number.

  • VAT information where applicable.

  • Account and order history.

  • Commercial correspondence.

  • Information reasonably necessary to establish or manage the business relationship.

We use this information to assess applications, operate accounts, fulfil orders, provide support and manage commercial relationships.

Where business contact information identifies an individual, it will be treated as personal information under applicable data protection law.

12. Distributor Enquiries

Businesses interested in distributing Craftcoat products may provide information through our distributor enquiry process.

This may include:

  • Contact name.

  • Company name.

  • Country or territory.

  • Business address.

  • Website address.

  • Email and telephone details.

  • Business activities.

  • Markets served.

  • Sales channels.

  • Other information voluntarily supplied.

We use this information to assess potential distribution relationships and communicate with applicants.

Submitting an enquiry does not guarantee appointment as a distributor.

13. Our Lawful Bases for Processing

Under UK GDPR, we must have an appropriate lawful basis for processing personal information.

Depending on the purpose, we may rely on:

Performance of a contract

Where processing is necessary to fulfil an order, provide a service or take requested steps before entering into a contract.

Legal obligation

Where processing is necessary to comply with tax, accounting, consumer protection or other legal requirements.

Legitimate interests

Where processing is necessary for our legitimate business interests, such as customer service, fraud prevention, security, business administration and improving our services, provided those interests are not overridden by your rights and freedoms.

Consent

Where you have given appropriate consent, including for certain marketing communications or non-essential cookies.

Where we rely on consent, you may withdraw it at any time.

Withdrawal does not affect processing that was lawful before consent was withdrawn.

14. Sharing Personal Information

We may share personal information with trusted organisations where reasonably necessary to operate Craftcoat.

These may include:

  • Shopify and ecommerce service providers.

  • Payment processors.

  • Royal Mail, Evri and other delivery carriers.

  • Website hosting and technology providers.

  • Email and customer communication providers.

  • Marketing service providers.

  • Review and feedback platforms.

  • Google Analytics and related analytics services.

  • Google advertising services.

  • Meta services, including Facebook and Instagram.

  • TikTok advertising services where used.

  • Fraud prevention and security providers.

  • Accountants, legal advisers and insurers.

  • Government authorities, regulators or law-enforcement agencies where required by law.

We seek to ensure that service providers handling personal information on our behalf are subject to appropriate contractual and security requirements.

Some organisations may process information as independent data controllers under their own privacy policies.

We do not disclose personal information to unrelated third parties without an appropriate lawful purpose.

15. Customer Information and Third-Party Marketing

Craftcoat does not sell customer contact lists to unrelated third parties for their own direct marketing.

We may use third-party ecommerce, analytics and advertising platforms to operate our own business and marketing activities as explained in this policy.

Certain advertising and tracking technologies may involve sharing personal information with advertising providers, subject to applicable consent requirements and data protection law.

16. International Data Transfers

Some service providers used by Craftcoat may process personal information outside the United Kingdom.

Where international transfers are subject to UK data protection restrictions, we will use an appropriate legal transfer mechanism where required.

Depending on the circumstances, this may include:

  • Transfers to countries covered by UK adequacy regulations.

  • The UK International Data Transfer Agreement.

  • The UK Addendum to approved standard contractual clauses.

  • Other lawful transfer arrangements.

We will take reasonable steps to ensure that international transfers are subject to appropriate safeguards.

17. How Long We Retain Personal Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including applicable legal, accounting, tax, security and business requirements.

Retention periods vary depending on the type of information and the reason for processing.

For example:

  • Order and financial records may be retained for periods required by tax and accounting law.

  • Customer correspondence may be retained where reasonably necessary for support, disputes or business records.

  • Marketing information may be retained while you remain subscribed, subject to maintaining appropriate suppression records after unsubscribing.

  • Website analytics data may be retained according to the settings and retention periods of the relevant analytics service.

  • Account information may be retained while an account remains active and for an appropriate period afterwards where necessary.

When information is no longer required, we will delete, anonymise or securely dispose of it as appropriate.

18. Information Security

We take reasonable technical and organisational measures to protect personal information against:

  • Unauthorised access.

  • Accidental loss.

  • Misuse.

  • Unlawful disclosure.

  • Unauthorised alteration.

  • Destruction.

Measures may include access controls, secure systems, appropriate service provider arrangements and security monitoring.

However, no internet-based system can be guaranteed to be completely secure.

19. Your Data Protection Rights

Under applicable UK data protection law, you may have rights including:

  • The right to be informed about how your information is used.

  • The right to request access to personal information held about you.

  • The right to request correction of inaccurate information.

  • The right to request erasure in certain circumstances.

  • The right to request restriction of processing.

  • The right to object to certain processing.

  • The right to data portability where applicable.

  • The right to withdraw consent where processing is based on consent.

  • The right to object to direct marketing.

You may also have rights relating to certain automated decisions that produce legal or similarly significant effects.

These rights are subject to applicable legal conditions and exemptions.

To exercise your rights, contact:

info@craftcoat.co.uk

We may need to verify your identity before responding to a request.

We will respond within the time limits required by applicable law.

20. Children’s Privacy

Craftcoat products and services are not specifically directed at children.

We do not knowingly seek to collect personal information directly from children for marketing purposes.

If we become aware that personal information has been collected in circumstances that require parental authorisation or other legal safeguards, we will take appropriate action.

21. Third-Party Websites

Our website may contain links to websites or services operated by independent third parties.

Craftcoat is not responsible for the privacy practices of those independent websites.

We recommend reviewing their privacy notices before providing personal information.

22. Privacy Complaints

If you have concerns about how Craftcoat handles personal information, please contact us at:

info@craftcoat.co.uk

We will investigate your concern and aim to resolve it appropriately.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator.

ICO website: https://ico.org.uk

23. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our website, products, services, technology, marketing activities or legal obligations.

The latest version will be published on the Craftcoat website with an updated revision date.

Where required by law, we will provide additional notice or obtain appropriate consent before making material changes to how personal information is processed.

24. Contact Us

For privacy questions, data protection requests or concerns, please contact:

Craftcoat
A trading name of Express Global Products Ltd

11 Mortimer Road
Cubley
S36 6DE
United Kingdom

Email: info@craftcoat.co.uk
Website: https://craftcoat.co.uk

Company Number: 12537003
VAT Number: GB 349 4645 64