Privacy Policy

1. Introduction

Laser Craft Engraving HH ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data Controller: Laser Craft Engraving HH
Contact Email: [email protected]
Location: Haywards Heath, Sussex, United Kingdom

2. Information We Collect

2.1 Information You Provide

When you place an order or contact us, we collect:

• Personal Details: Name, email address, phone number
• Delivery Information: Shipping address
• Order Details: Products ordered, customization requirements, engraving text
• Payment Information: Processed securely through PayPal (we do not store card details)
• Communication: Messages sent through contact forms or email

2.2 Information Automatically Collected

• Website Analytics: Via Google Analytics (anonymized IP addresses, pages visited, time on site)
• Technical Data: Browser type, device information, IP address
• Cookies: See our Cookie Policy section below

3. How We Use Your Information

We use your personal information for the following purposes:

• Order Fulfillment: Processing and delivering your custom engraved products
• Communication: Sending order confirmations, updates, and responding to inquiries
• Legal Compliance: Meeting UK tax and accounting requirements
• Service Improvement: Understanding how customers use our website to improve user experience
• Marketing: Sending promotional emails (only with your explicit consent, which you can withdraw anytime)

Legal Basis for Processing:

• Contract Performance: Processing your order
• Legal Obligation: Tax and accounting records
• Legitimate Interest: Website analytics and fraud prevention
• Consent: Marketing communications (opt-in only)

4. Data Sharing and Third Parties

We do not sell your personal information. We share data only with:

• Payment Processors: PayPal for secure payment processing
• Delivery Services: Royal Mail or courier services for shipping (name and address only)
• Email Service: Resend for transactional email delivery
• Analytics: Google Analytics (anonymized data)
• Hosting Provider: Abacus.AI for website hosting and data storage

All third parties are contractually obligated to protect your data and use it only for the specified purpose.

5. Data Retention

We retain your personal information for:

• Order Data: 7 years (UK tax law requirement)
• Marketing Consents: Until you withdraw consent
• Website Analytics: 26 months (Google Analytics default)
• Inactive Accounts: Deleted after 3 years of inactivity

6. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a machine-readable format
• Right to Object: Object to processing based on legitimate interests or direct marketing
• Right to Withdraw Consent: Withdraw marketing consent at any time

To exercise any of these rights, contact us at [email protected]. We will respond within one month.

7. Cookies

We use the following types of cookies:

• Essential Cookies: Required for website functionality (shopping cart, authentication)
• Analytics Cookies: Google Analytics to understand website usage
• Preference Cookies: Remember your settings (e.g., dismissed banners)

You can control cookies through your browser settings. Blocking essential cookies may affect website functionality.

8. Data Security

We implement appropriate technical and organizational measures to protect your data:

• Secure HTTPS encryption for all data transmission
• Database encryption at rest
• Regular security updates and monitoring
• Access controls limiting who can view your data
• Secure payment processing through PayPal (PCI-DSS compliant)

While we take security seriously, no internet transmission is 100% secure. We cannot guarantee absolute security.

9. Children's Privacy

Our services are not directed at children under 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. International Transfers

Your data is primarily stored in the UK/EU. Some third-party services (e.g., Abacus.AI hosting) may process data outside the UK. In such cases, we ensure adequate safeguards are in place through standard contractual clauses or adequacy decisions.

11. Changes to This Policy

We may update this Privacy Policy periodically. The "Last updated" date at the top will reflect any changes. Significant changes will be communicated via email to registered customers.

12. Complaints

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):

ICO Contact Details:
Website: ico.org.uk
Phone: 0303 123 1113
Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

13. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

Email: [email protected]
Business Name: Laser Craft Engraving HH
Location: Haywards Heath, Sussex, United Kingdom