Craft ICT Ltd Privacy Notice

Craft ICT cares about your privacy, believes in transparency and understands that we have a responsibility to protect your personal information.

Craft ICT may be both data controller and data processor for your personal information.

How to contact us

Company: Craft ICT Ltd
Email address for privacy related issues or enquiries:
Postal address: 34 St Leonards Street, Mundford, Thetford, Norfolk, IP26 5HG, UK
Telephone number: +44 (0) 1842 845133
Company is registered in England Number 4576389

Information we collect about you

You can visit our websites without disclosing any personally identifiable information about yourself. We do not use cookies* on any of our websites. We may record information if you contact us by telephone or email in relation to any of our services or products.

*Cookies are text files placed on your computer to collect standard internet log information and visitor behaviour information. This information is used to track visitor use of the website and to compile statistical reports on website activity.

We will record information if you place an order with us for any of our services. Information will also be recorded if you are a user of our cloud hosting platform. Only sufficient personal information will be stored to enable us to fulfil our business commitments and our contractual obligations. This would normally be name, address, telephone and email data. Use of our services will result in additional data including, but not limited to, user name, IP address, server logs, device-specific information and location information.

How we will use the information about you

We collect information about you to:
Fulfil our contractual obligations we have with you.
Provide service, product and price information upon request or referral.
Process orders, the issue of invoices and record and monitor payments.
Provision of customer care.
Alert you about any technical issues that could affect the provision of our services.
To notify you about changes to a service or product that may impact upon you.

Where we store your personal information

The majority of such data is held within the UK and Ireland. To fulfil contractual obligations to customers operating outside of the EEA, certain information may be accessed and processed outside the EEA by their staff who work for them.

How long we keep your information

To make sure we meet our legal data protection and privacy obligations, we only hold on to your information for as long as we actually need it for the purposes we acquired it for in the first place.

In most cases, this means we will keep your information for as long as you continue to use our services, and for a reasonable period of time afterwards if you stop doing so. After that we will delete it other than where we lawfully can keep any data for audit or legal reasons.

Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

Other websites

Our website contains links to other websites. This privacy policy only applies to this website so when you link to other websites you should read their own privacy policies.

Your legal rights

You have rights within the European General Data Protection Regulation under certain circumstances to:

Request access to your personal data. This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.

Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.

Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us to continue to process it. For example:
Where you consider that we do not need it any longer for the purposes for which we originally collected it
Where you have withdrawn your consent to us using it and we had relied on that consent
Where you consider that we cannot show a legitimate interest in continuing to process it

You also have the right to ask us to delete or remove your personal data:
Where you have successfully exercised your right to object to processing (see below)
Where you consider that we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law.
However, we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.

Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms.

Request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data:
If you want us to establish your personal information's accuracy.
Where our use of the data is unlawful but you do not want us to erase it.
Where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims.
You have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.

Request the transfer of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format.

Withdraw consent at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent.

No fee is charged to exercise any of your rights unless your request is evidently unfounded, repetitive or excessive.

We may need to request specific information from you to help us confirm your identity. This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

Changes to our privacy policy

We keep our privacy policy under regular review and we will place any updates on this web page. This privacy policy was last updated on 23rd May 2018.