Your data
Privacy notice
Last updated 9 August 2026.
We are a small family workshop, not a marketing operation. We ask for the least we can get away with, we use it to make the thing you asked for, and we do not sell it to anyone. This page explains it properly, because the law requires us to and because you are entitled to know.
Who is responsible for your data
Crafted in Essex is the data controller.
23 Crouch Avenue, Hullbridge, Essex, SS5 6BS, United Kingdom.
Email: dpo@craftedinessex.co.uk — our contact address for anything about your data.
What we collect, and why
| When you… | We get | Why we can |
|---|---|---|
| Send the quote form | Your name, email, what you need, and anything you type in the box | To answer you. Legitimate interests — you asked us a question and expect a reply. |
| Message us on WhatsApp | Your phone number, WhatsApp profile name, your messages and any photos you send | Same — to answer you and price the job. |
| Place an order | Name, delivery address, email, order details | To perform the contract, and to meet our tax record-keeping duties. |
We do not use cookies for advertising or analytics, and there is no tracking pixel on this site. That is why you have not been asked to accept anything.
Who else sees it
- FormSubmit — passes the quote form to our email inbox. Their privacy policy is at formsubmit.co/privacy.
- Proton Mail — our email provider, so your message is stored in our mailbox there.
- WhatsApp / Meta — if you choose to message us that way. Their terms apply to that conversation as well as ours.
- Cloudflare — hosts this website and handles the connection.
- Royal Mail or a courier — gets your delivery address, and only that, when we post an order.
That is the whole list. We do not sell, rent or share your details with anyone for marketing, and we will not add you to a mailing list because you asked us for a price.
Transfers outside the UK. FormSubmit and Cloudflare are based outside the UK, so a quote form submission passes through servers abroad on its way to us. Where that happens we rely on the UK Government's adequacy regulations or, where those do not apply, the UK International Data Transfer Addendum. Our mailbox itself is held in Switzerland with Proton Mail, which the UK recognises as providing an adequate level of protection.
How long we keep it
- Enquiries that do not become orders: up to 12 months, then deleted.
- Orders: 6 years after the end of the tax year, because HMRC requires it.
- WhatsApp conversations: deleted on the same basis as enquiries, once the job is done.
Your rights
You can ask us to show you what we hold, correct it, delete it, or stop using it. Just email us — there is no charge and we will respond within one month.
If you think we have got it wrong, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would rather you told us first so we can fix it.
Children
This site is not aimed at children and we do not knowingly collect their details. If a child has sent us something, tell us and we will delete it.