Privacy Policy

1. Who We Are

HavenCraftz is a US-based business selling wooden bedroom furniture online to customers in the United Kingdom, working with a UK-based fulfillment partner for warehousing and returns. Our website address is: https://havencraftz.com
For any privacy-related questions, you can contact us at: Email: sales@havencraftz.com Website: https://havencraftz.com"

2. What Data We Collect

When you visit or make a purchase from HavenCraftz, we may collect the following personal data:

Information you give us directly:

Full name
Delivery address and billing address
Email address
Phone number
Payment information (processed securely — we never store card details)
Order details and purchase history

Information collected automatically:

IP address
Browser type and version
Pages visited and time spent on site
Referring website
Device type (mobile, desktop, tablet)
Cookie data (see Section 7)

3. Why We Collect Your Data

We collect and use your personal data for the following purposes:

Purpose	Legal Basis (UK GDPR)
Processing and fulfilling your order	Contract performance
Sending order confirmation and delivery updates	Contract performance
Responding to customer service enquiries	Legitimate interest
Improving our website and user experience	Legitimate interest
Sending marketing emails (only if you opted in)	Consent
Fraud prevention and security	Legitimate interest
Complying with legal obligations	Legal obligation
Displaying relevant Google Shopping ads	Legitimate interest

We do not sell your personal data to any third party. We do not use your data for automated decision-making or profiling.

4. How We Share Your Data

We share your personal data only where necessary with the following trusted third parties:

Payment processors:

Stripe — processes card payments securely. Stripe is PCI-DSS compliant. Privacy policy: stripe.com/gb/privacy
PayPal — processes PayPal payments. Privacy policy: paypal.com/uk/legalhub/privacy-full

Delivery and logistics:

Our delivery courier partners (Royal Mail, DPD or similar UK carriers) — receive your name and delivery address to fulfil your order

Analytics:

Google Analytics — we use Google Analytics to understand how visitors use our website. Google Analytics collects anonymised usage data via cookies. Google may process this data in the United States under Standard Contractual Clauses. Privacy policy: policies.google.com/privacy

Google Merchant Center:

We participate in Google Shopping via Google Merchant Center. Google may process data related to your interactions with our product listings in accordance with Google’s Privacy Policy.

We do not share your data with any other third parties without your explicit consent.

5. GDPR & UK GDPR Compliance

HavenCraftz complies fully with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, which are enforced by the Information Commissioner’s Office (ICO) in the United Kingdom.

Your rights under UK GDPR:

Right to access — you can request a copy of the personal data we hold about you
Right to rectification — you can ask us to correct inaccurate data
Right to erasure — you can ask us to delete your personal data
Right to restrict processing — you can ask us to limit how we use your data
Right to data portability — you can request your data in a portable format
Right to object — you can object to us processing your data for marketing purposes at any time
Right to withdraw consent — where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, contact us at: sales@havencraftz.com

We will respond to all requests within 30 days in accordance with UK GDPR requirements.

6. GDPR Compliance for Personalised Advertising

We use Google Analytics on our website. This tool may be used to serve relevant advertising through Google services including Google Shopping. We comply with Google’s EU User Consent Policy and UK GDPR requirements for personalised advertising.

We do not use data collected on our website for personalised advertising without appropriate user consent obtained through our cookie consent banner. Users can opt out of Google Analytics tracking at any time by visiting: tools.google.com/dlpage/gaoptout

7. Cookies

Our website uses cookies to improve your experience. Cookies are small text files stored on your device when you visit our website.

Cookies we use:

Cookie Type	Purpose	Can you opt out?
Essential cookies	Required for the website and checkout to function	No — required
Analytics cookies	Google Analytics — tracks site usage anonymously	Yes — via cookie banner
Preference cookies	Remembers your settings and basket contents	Yes — via cookie banner

When you first visit our website, you will see a cookie consent banner. You can choose to accept or decline non-essential cookies at any time. You can also manage or delete cookies through your browser settings.

8. How Long We Keep Your Data

We retain your personal data only for as long as necessary:

Data Type	Retention Period
Order and transaction records	7 years (UK tax law requirement)
Customer account data	Until account deletion or 3 years of inactivity
Email marketing data	Until you unsubscribe
Analytics data	26 months (Google Analytics default)
Enquiry and support data	2 years

9. Data Security

We take the security of your personal data seriously. We use the following measures to protect your information:

SSL encryption (HTTPS) across our entire website
Secure payment processing via Stripe and PayPal — we never store card details on our servers
Limited access to personal data within our business
Regular security monitoring of our website

Despite these measures, no online transmission is 100% secure. If you have concerns about a specific data security issue, contact us immediately at sales@havencraftz.com

10. Children’s Privacy

Our website and products are intended for adults. We do not knowingly collect personal data from children under the age of 13. If you believe a child has provided us with personal data, please contact us and we will delete it immediately.

11. Links to Other Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those websites. We encourage you to read the privacy policy of every website you visit.

12. Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. When we make changes, we will update the “Last updated” date at the top of this page. We encourage you to review this policy periodically.