Privacy Policy

Privacy Policy

Last Updated: July 13, 2026

This Privacy Policy describes how Craftphilia Limited ("Craftphilia," "we," "us") collects, uses, and shares your personal information when you visit craftphilia.com (the "Site"), make a purchase, or otherwise interact with us.

1. Information We Collect

Information you provide to us:

  • Contact details: name, email address, shipping and billing address, phone number
  • Order information: products purchased, order value, delivery details
  • Account information: login credentials and preferences, if you create an account
  • Communications: messages you send to our support team
  • Content you submit: reviews, photos, comments, and design files you choose to share

Information collected automatically:

  • Device and usage data: IP address, browser type, operating system, pages viewed, referring URLs, and interactions with the Site
  • Cookies and similar technologies (see Section 5)

Information from third parties:

  • Payment confirmation from payment processors (we never receive or store your full card number)
  • Shipping status from logistics carriers
  • Analytics and advertising data from the partners listed below

2. How We Use Your Information

  • To process and fulfill your orders, arrange shipping, and provide customer support
  • To provide warranty service and manage returns
  • To send transactional emails (order confirmation, shipping updates)
  • To send marketing emails, if you have opted in — you can unsubscribe at any time
  • To operate, analyze, and improve the Site, our products, and our marketing
  • To personalize your experience and show you relevant advertising
  • To detect and prevent fraud, and to comply with legal obligations

3. Legal Bases for Processing (EEA/UK Visitors)

Where the EU/UK General Data Protection Regulation (GDPR) applies, we process your personal data on the following legal bases: performance of a contract (processing your orders), legitimate interests (improving our Site, preventing fraud, direct marketing to existing customers), consent (marketing communications and non-essential cookies), and legal obligation (tax and accounting requirements).

4. How We Share Your Information

We share personal information with service providers who help us operate our business, including:

  • E-commerce platform: Shopify Inc., which hosts our Site and processes orders
  • Payment processors (e.g., Shopify Payments, PayPal)
  • Shipping and fulfillment partners that deliver your orders
  • Email marketing platforms that send our newsletters and order updates
  • Analytics and advertising partners, as described in Section 5

We may also disclose information to comply with applicable laws, respond to lawful requests, enforce our Terms of Service, or protect our rights. If Craftphilia is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

We do not sell your personal information for money. However, our use of advertising cookies may constitute "sharing" or a "sale" under certain U.S. state laws — see Section 8 for your opt-out rights.

5. Cookies, Analytics & Advertising

We and our partners use cookies, pixels, and similar technologies for the following purposes:

  • Essential: site functionality, shopping cart, checkout, and security (always active)
  • Analytics: understanding how visitors use the Site — e.g., Google Analytics
  • Advertising: measuring and delivering relevant ads — e.g., Meta (Facebook/Instagram) Pixel, Google Ads, TikTok Pixel, Pinterest Tag, Microsoft Advertising
  • Marketing: email campaign performance and personalization

You can manage cookies through your browser settings, and EEA/UK visitors can manage consent through our cookie banner. You can also opt out of personalized advertising via:

  • Google: adssettings.google.com
  • Meta: facebook.com/adpreferences
  • Digital Advertising Alliance: optout.aboutads.info

6. Data Retention

We retain personal information for as long as needed to fulfill the purposes described in this policy — typically for as long as you have an account or as required for our business and legal obligations (e.g., tax records). When no longer needed, information is deleted or anonymized.

7. International Data Transfers

We are a Hong Kong company fulfilling orders from the United States, and our service providers may process data in the U.S. and other countries. Where GDPR applies, transfers outside the EEA/UK are protected by appropriate safeguards, such as the European Commission's Standard Contractual Clauses.

8. Your Privacy Rights

If you are in the EEA or UK (GDPR), you have the right to: access your personal data; correct inaccurate data; request deletion; restrict or object to processing (including direct marketing); data portability; and withdraw consent at any time. You also have the right to lodge a complaint with your local supervisory authority.

If you are a U.S. resident (including under the California Consumer Privacy Act, CCPA/CPRA), you have the right to: know what personal information we collect and how it is used; access and receive a copy of your personal information; correct inaccurate information; request deletion; and opt out of the "sale" or "sharing" of personal information for targeted advertising. We will never discriminate against you for exercising your rights.

To exercise any of these rights, email support@craftphilia.com with the subject line "Privacy Request." We may need to verify your identity before fulfilling your request. Authorized agents may submit requests on your behalf where permitted by law.

To opt out of targeted advertising cookies, you may also use the cookie settings on our Site or the industry opt-out links in Section 5. We honor Global Privacy Control (GPC) signals where required by law.

9. Email Marketing

If you subscribe to our newsletter or opt in at checkout, we will send you news, tutorials, and offers. Every marketing email includes an unsubscribe link. Unsubscribing does not affect transactional emails about your orders.

10. Children's Privacy

The Site is not directed to children. We do not knowingly collect personal information from children under 13 (or under 16 in the EEA/UK). If you believe a child has provided us personal information, contact us and we will delete it.

11. Security

We use industry-standard technical and organizational measures to protect your information, including encryption in transit (HTTPS) and access controls. No method of transmission or storage is 100% secure, but we work continuously to protect your data.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last Updated" date reflects the latest revision. Material changes will be communicated through the Site or by email where appropriate.

13. Contact Us

Email: support@craftphilia.com Craftphilia Limited Unit 205, Unit C, 2/F, Mong Kok, Kowloon, Hong Kong SAR