Privacy policy

Privacy Policy — Crestiq Ltd

Last updated: June 2026

Who We Are

Crestiq Ltd is a handmade crochet business based in the United Kingdom. We sell handcrafted crochet animals, flowers, bouquets, bags, and accessories through our online store at crestiq.uk.

When you visit or purchase from our store, you are trusting us with your personal information. We take that responsibility seriously and are fully committed to protecting your privacy in accordance with UK GDPR and the Data Protection Act 2018.

What Information We Collect

When you visit our website or place an order, we may collect the following:

Information you provide directly:

Full name
Email address
Delivery and billing address
Phone number (if provided)
Payment information (processed securely — Crestiq Ltd never stores your card details)
Any messages or notes sent via our Contact page or order notes

Information collected automatically:

IP address
Browser type and version
Pages visited on our site
Date and time of your visit
How you arrived at our website (e.g. Google, Instagram)

This automatic data is collected via cookies and Shopify's built-in analytics to help us understand how our store is used and to improve your experience.

Why We Collect Your Information

Crestiq Ltd uses your personal information only for the following lawful purposes:

To fulfil your order — we need your name and address to process and deliver your purchase
To communicate with you — order confirmations, shipping updates, and responses to your enquiries
To improve our website — understanding visitor behaviour helps us make our store better
To send marketing emails — only where you have opted in; you may unsubscribe at any time
To comply with legal obligations — including maintaining financial records as required by HMRC and Companies House

Crestiq Ltd will never sell, rent, or share your personal data with third parties for their own marketing purposes.

Legal Basis for Processing Your Data

Under UK GDPR, Crestiq Ltd processes your personal data on the following legal grounds:

Contract performance — to process and deliver your order
Legal obligation — to comply with HMRC and Companies House requirements
Legitimate interests — to improve our website and prevent fraud
Consent — for marketing emails, where you have opted in

How We Share Your Information

Your data is shared only with trusted third parties who help us operate our business:

Shopify Inc. — our e-commerce platform. Shopify securely stores and processes order data on our behalf. See shopify.com/legal/privacy
Payment processors — including PayPal, Stripe, and Klarna, who handle payments securely and in compliance with PCI-DSS. Crestiq Ltd never sees or stores your full card details
Royal Mail / courier services — your name and delivery address are shared solely to fulfil delivery of your order
Google Analytics — anonymised website traffic data to help us understand visitor behaviour
Meta (Instagram/Facebook) — limited data may be shared if you arrive via one of our advertisements, in accordance with Meta's data policy

All third parties are contractually required to handle your data securely and lawfully.

Cookies

Our website uses cookies — small text files placed on your device — to ensure the store functions correctly and to understand how it is used.

Types of cookies we use:

Essential cookies — necessary for the shop to function (e.g. maintaining your basket)
Analytics cookies — help us understand visitor behaviour using anonymised data
Marketing cookies — used only with your consent, to show relevant advertisements

You may control or disable cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of our website.

How Long We Keep Your Data

Crestiq Ltd retains personal data only for as long as necessary:

Order records — retained for 7 years to comply with HMRC tax record requirements
Email marketing data — retained until you unsubscribe
Contact form enquiries — retained for up to 12 months

All data is securely deleted once the relevant retention period has expired.

Your Rights Under UK GDPR

As a UK resident, you have the following rights in relation to your personal data:

Right of access — request a copy of the personal data Crestiq Ltd holds about you
Right to rectification — ask us to correct any inaccurate or incomplete information
Right to erasure — request deletion of your personal data, subject to our legal obligations
Right to restrict processing — ask us to limit how we use your data in certain circumstances
Right to data portability — request your data in a structured, commonly used format
Right to object — object to processing based on legitimate interests or for direct marketing
Right to withdraw consent — withdraw marketing consent at any time without affecting prior processing

To exercise any of these rights, please contact us at:
📩 crestiq.uk/pages/contact

Crestiq Ltd will respond to all data requests within 30 days as required by law.

Marketing Communications

If you have subscribed to our mailing list or opted in at checkout, Crestiq Ltd may send you occasional updates about new products, offers, and promotions.

You may unsubscribe at any time by:

Clicking Unsubscribe in any marketing email
Contacting us directly via crestiq.uk/pages/contact

We will never send marketing communications without your prior consent.

Data Security

Crestiq Ltd takes the security of your personal data seriously. Our website is hosted on Shopify, which uses industry-standard SSL/TLS encryption. All payment transactions are encrypted and processed securely by our payment partners.

Whilst we take all reasonable steps to protect your data, no method of internet transmission is entirely secure. In the unlikely event of a data breach that poses a risk to your rights, we will notify the ICO within 72 hours as required by UK GDPR.

Third-Party Links

Our website may contain links to third-party websites such as Instagram. Crestiq Ltd is not responsible for the privacy practices of external sites and encourages you to review their privacy policies independently.

Children's Privacy

Our website is not directed at children under the age of 13. Crestiq Ltd does not knowingly collect personal data from children. If you believe a child has submitted personal information to us, please contact us and we will delete it promptly.

Changes to This Policy

Crestiq Ltd may update this Privacy Policy periodically. Any changes will be published on this page with a revised date at the top. We encourage you to review this policy from time to time.

Complaints

If you are dissatisfied with how Crestiq Ltd has handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

🌐 ico.org.uk
📞 0303 123 1113

Contact Us

For any questions regarding this Privacy Policy or your personal data:

Crestiq Ltd
72 Waverley Road, Leamington Spa, CV31 2DE
Company Number: 17229036
📩 crestiq.uk/pages/contact

This Privacy Policy is governed by the laws of England and Wales. Crestiq Ltd is registered in England and Wales under company number 17229036.

Item added to your cart