Privacy Policy

Who we are

Legal name: ArtCraftPlay (trading as Art Craft Play).

Registered / correspondence address: ArtCraftPlay, Office no #34, 71-75 Shelton Street Covent Garden London WC2H 9JQ UNITED KINGDOM

Support email: hello@artcraftplay.com. For order or privacy requests, include your account email and order number when you have one.

We are a United Kingdom–based digital retailer. This policy is written for customers worldwide who browse, create an account, or purchase on artcraftplay.com.

Information we collect

Account and contact data: name, email address, password (stored hashed), marketing opt-in preference, and messages you send through Contact or support email.

Order and fulfillment data: items purchased, amounts, currency, order status, download records, gift-card codes you buy or redeem, and the email used at guest checkout.

Payment data: payments are processed by Stripe. We receive payment status, last-four or similar Stripe identifiers, and refund or dispute metadata. We do not store full card numbers on our servers.

Technical and usage data: IP address, browser type, device type, pages viewed, referring URL, approximate location derived from IP, and cookies or similar identifiers needed for sign-in, cart, security, and analytics.

Advertising and measurement data: when you arrive from or interact with our ads, partners such as Meta (Facebook/Instagram), TikTok, and Google may provide click or view identifiers, campaign parameters, and conversion events so we can measure ads and avoid showing irrelevant promotions.

How we use information

To run the store: create accounts, process orders, deliver digital downloads, issue and redeem gift cards, prevent fraud, and provide customer support.

To communicate: send transactional email (receipts, download links, password resets). If you opt in, we may send product updates; you can unsubscribe from marketing at any time.

To improve the site: understand which pages and products are useful, fix errors, and keep the service secure.

To advertise and measure ads: operate and measure Meta Ads, TikTok Ads, and Google Ads (including Google Analytics where enabled). This may include matching hashed emails or device identifiers with advertising partners where permitted by law and by your choices, attributing purchases to campaigns, building lookalike or remarketing audiences, and limiting frequency of ads.

Cookies, pixels, and similar technologies

We use essential cookies for login, cart, and security. We also use analytics and advertising technologies (for example Google Analytics / gtag, Meta Pixel, and TikTok Pixel when configured) that set cookies or read device identifiers to measure traffic and ad performance.

Where non-essential analytics or advertising cookies are used, we ask for your consent through our on-site cookie banner before loading those tools. You can change your choice anytime via Cookie settings in the site footer. You can also control cookies through your browser settings. Blocking essential cookies may prevent checkout or account access. Advertising platforms also offer their own ad-preference and opt-out tools (for example Meta Ad Preferences, TikTok settings, and Google Ads Settings).

Advertising partners (Meta, TikTok, Google)

We use Meta Platforms, TikTok, and Google as advertising and analytics partners. They may process personal data as independent controllers under their own policies when you use their products. We share event data such as page views, add-to-cart, and purchase value (often hashed or aggregated where supported) so we can report conversions and optimize campaigns.

We do not sell your personal information for money. We do share limited data with service providers and advertising platforms as needed to operate the store and ads, under contracts or platform terms that restrict how they use it.

Legal bases and international transfers

Where UK GDPR / EU GDPR applies, we process data because it is necessary to perform a contract (orders and downloads), because we have a legitimate interest in securing and improving the store, or because you consented (for example marketing email or non-essential analytics / advertising cookies).

Our servers and providers may process data in the United Kingdom, European Economic Area, United States, or other countries. When we transfer data internationally we rely on appropriate safeguards required by applicable law (such as standard contractual clauses used by our processors).

Retention, security, and your rights

We keep order records as needed for accounting, tax, fraud prevention, and re-issuing downloads. Account data remains while your account is open. Marketing lists are kept until you unsubscribe or ask us to delete them, subject to records we must retain by law.

We use industry-standard measures to protect data in transit and at rest, but no method of transmission over the internet is completely secure.

Depending on where you live, you may have rights to access, correct, delete, or restrict processing of your personal data, and to object to certain processing (including direct marketing). Contact hello@artcraftplay.com. UK residents may also complain to the Information Commissioner’s Office (ICO).

Children

This store is intended for adults (parents, caregivers, and hobbyists). We do not knowingly collect personal information directly from children under 13 (or the higher age required in your country). See our Student Privacy Policy for classroom and education context. If you believe a child provided personal data, email us and we will delete it promptly.

Changes

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised effective date. Continued use of the site after a change constitutes acceptance of the revised policy.

Effective date: 14 September 2026. Business address for notices: ArtCraftPlay, Office no #34, 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom.