Privacy Policy

This is a starting point. It must be checked against the data you actually collect and the services you use, and kept up to date for UK GDPR and the Data Protection Act 2018.

Who is responsible for your data

Krazy Gifts is the data controller for personal information collected through this website. Our contact details are below.

What we collect

When you order or contact us we collect your name, email address, delivery and billing address, phone number if you give one, and your order history. Payment card details are handled directly by Stripe and never reach our servers. We also collect basic technical data (such as your IP address and device type) needed to run the site securely.

Why we use it, and our lawful basis

• To take and fulfil your order and provide support — to perform our contract with you.
• To meet our legal obligations, such as keeping tax and accounting records.
• To keep the site secure and prevent fraud — our legitimate interests.
• To send marketing, only where you have asked us to. You can unsubscribe at any time.

Who we share it with

We share data only with the suppliers who help us run the shop: our payment provider (Stripe), delivery carriers, our email provider, and our review provider where you have been invited to leave a review. We do not sell your data.

How long we keep it

Order records are kept for six years to meet HMRC requirements. Marketing consent is kept until you withdraw it. Enquiry correspondence is kept while it is useful for support and then deleted.

Your rights

You have the right to access the data we hold about you, to have it corrected or deleted, to object to or restrict how we use it, and to data portability. To exercise any of these, contact us. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk.

Cookies

We use a small number of cookies to make the site work. See our Cookie Policy for the detail.