Privacy Policy

1. Introduction

Craft Canvas Clothing is committed to protecting your personal data. This Privacy Policy explains what data we collect, how we use it, and your rights under the General Data Protection Regulation (GDPR) and Hungarian data protection law (Act CXII of 2011).

Data Controller: Craft Canvas Clothing, Budapest, Hungary. Contact: info@craftcanvas-clothing.com

2. Data We Collect

When you place an order or contact us, we may collect:

  • Identity data: first name, last name.
  • Contact data: email address, phone number, delivery address.
  • Order data: items ordered, specifications, and order correspondence.
  • Financial data: payment confirmation references (we do not store full card details — payments are processed by our third-party provider).
  • Technical data: IP address, browser type, pages visited (via cookies — see Section 7).

3. Legal Basis for Processing

We process your personal data under the following GDPR Article 6 legal bases:

  • Contract performance: to process and fulfil your order.
  • Legal obligation: to comply with tax, accounting, and consumer protection laws.
  • Legitimate interest: to communicate about your order and prevent fraud.
  • Consent: for marketing emails (only where you have opted in).

4. How We Use Your Data

  • To process, produce, and deliver your custom order.
  • To send order confirmation, production updates, and shipping notifications.
  • To handle returns, complaints, or after-sales queries.
  • To comply with legal obligations (invoicing, accounting).
  • To send promotional emails if you have subscribed (you may unsubscribe at any time).

5. Data Sharing & Third Parties

We do not sell your personal data. We share it only where necessary:

  • Payment processors: to handle card transactions securely.
  • Shipping carriers: your name and address to enable delivery.
  • IT and hosting providers: under GDPR-compliant data processing agreements.
  • Legal authorities: where required by applicable law.

6. Data Retention

  • Order and financial records: 8 years (Hungarian accounting law).
  • Customer communication records: 3 years after last interaction.
  • Marketing consent records: until consent is withdrawn.

7. Cookies

Our website uses cookies to improve your experience:

  • Essential cookies: required for site functionality.
  • Analytics cookies: to understand visitor behaviour (e.g., Google Analytics).
  • Marketing cookies: only with your explicit consent.

You can manage cookie preferences via the cookie banner on our website or your browser settings.

8. Your Rights Under GDPR

  • Right of access: request a copy of your personal data.
  • Right to rectification: correct inaccurate data.
  • Right to erasure: request deletion where no legal obligation prevents it.
  • Right to restriction: limit how we process your data.
  • Right to data portability: receive your data in a machine-readable format.
  • Right to object: object to processing based on legitimate interest.
  • Right to withdraw consent: withdraw marketing consent at any time.

To exercise any right, contact us at [your@email.com]. We will respond within 30 days.

9. Supervisory Authority

If you believe your data has been mishandled, you may lodge a complaint with:

  • National Authority for Data Protection and Freedom of Information (NAIH)
  • Website: www.naih.hu
  • Address: 1055 Budapest, Falk Miksa utca 9–11, Hungary

10. Policy Updates

We may update this Privacy Policy from time to time. The effective date above indicates the latest revision. Material changes will be communicated via our website.

11. Contact

  • Email: info@craftcanvas-clothing.com
  • Website: https://craftcanvas-clothing.com
  • Address: Budapest, Hungary