Privacy Policy

1. Who We Are

Crewstitch operates the website crewstitch.co.uk and provides custom branded workwear with embroidery services. When we refer to "we", "us", or "our" in this policy, we mean Crewstitch.

For any data protection enquiries, you can contact us at hello@crewstitch.co.uk.

2. What Data We Collect

When you use our website or place an order, we may collect the following personal data:

• Identity information: your name and company name
• Contact information: your email address, phone number, and delivery address
• Payment information: processed securely via Stripe (we do not store card details)
• Order information: the garments, colours, sizes, quantities, and embroidery details you select
• Uploaded content: company logos and artwork you upload for embroidery
• Communication data: messages you send to us via email or the contact form
• Technical data: your IP address, browser type, and device information collected through analytics

3. Why We Collect It

We collect your personal data for the following purposes:

• To fulfil your order: processing payment, producing your embroidered garments, and delivering them to you
• To communicate with you: sending order confirmations, dispatch notifications, and responding to your enquiries
• To improve our service: understanding how our website is used so we can make it better
• To comply with legal obligations: keeping financial records as required by law

We process your data on the legal bases of contract performance (fulfilling your order), legitimate interest (improving our service and communicating with you), and legal obligation (financial record-keeping).

4. How We Use Your Data

Your data is used solely for the purposes outlined above. We do not sell, rent, or trade your personal information to third parties for marketing purposes.

We may use your email address to send order-related communications. We will not send you marketing emails unless you have explicitly opted in to receive them. You can unsubscribe from any communications at any time.

5. Third Parties

We share your data only with the following third-party service providers who are necessary to fulfil your order and operate our service:

• Stripe: payment processing. Stripe handles your payment card data securely in accordance with PCI-DSS standards. Stripe Privacy Policy
• Cloudinary: image hosting and processing for uploaded logos. Cloudinary Privacy Policy
• Clothes2Order / production partners: garment sourcing and embroidery fulfilment. We share your order details (garment specifications, logo file, and delivery address) with our production partner to produce and ship your order.
• Netlify: website hosting and contact form processing. Netlify Privacy Policy

Each of these providers processes your data only as necessary to provide their service and in accordance with their own privacy policies.

6. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected:

• Order data: retained for 6 years from the date of the order to comply with UK tax and accounting requirements
• Uploaded logos: retained for the duration of your use of our service and deleted upon request
• Contact form submissions: retained for up to 2 years, then deleted
• Analytics data: retained for up to 26 months (standard analytics retention period)

7. Your Rights

Under the UK General Data Protection Regulation (UK GDPR), you have the following rights:

• Right of access: you can request a copy of the personal data we hold about you
• Right to rectification: you can ask us to correct inaccurate data
• Right to erasure: you can ask us to delete your data, subject to legal retention requirements
• Right to restrict processing: you can ask us to limit how we use your data
• Right to data portability: you can request your data in a machine-readable format
• Right to object: you can object to processing based on legitimate interest

To exercise any of these rights, contact us at hello@crewstitch.co.uk. We will respond to your request within 30 days.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

Our website uses cookies to ensure the site functions correctly and to collect anonymous analytics data about how visitors use the site.

• Essential cookies: required for the website to function (e.g., shopping cart, session management). These cannot be disabled.
• Analytics cookies: we use anonymous analytics to understand how visitors interact with our site, which pages are most popular, and where users drop off. This data helps us improve the experience. No personally identifiable information is collected through analytics cookies.

By using our website, you consent to the use of essential cookies. Analytics cookies are used in accordance with our legitimate interest in improving our service.

9. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes using HTTPS encryption across our entire site, secure payment processing through Stripe, and restricting access to personal data to only those who need it.

While we take every reasonable precaution, no method of transmission over the internet is 100% secure. We cannot guarantee the absolute security of your data.

10. Children

Our service is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or for legal, regulatory, or operational reasons. Changes will be posted on this page with an updated revision date.

12. Contact

If you have any questions about this privacy policy or how we handle your data, please contact us:

• Email: hello@crewstitch.co.uk
• Contact form: crewstitch.co.uk/contact

Last updated: January 2025