Privacy policy

How we use your data.

Our Privacy Notice explains the way in which we collect, use, maintain, protect and disclose the personal information of the users of our website and all the products and services offered by Crafted Media Ltd.

Who we are.

Crafted Media Ltd (“Crafted”, “we”, “us”) is registered in England and Wales, company number 06662635. Our registered office is at Hyde Park House, Crown Street, Ipswich, Suffolk, IP1 3LG.

We are registered as a data controller with the Information Commissioner’s Office, registration reference ZA306695.

This notice tells you what to expect when Crafted collects personal information about you, and explains how we store, handle and protect it. It doesn’t cover how we handle our own staff’s data; that’s covered in our internal Data protection and privacy policy.

We only collect personal information such as your name, address, phone number and email address when you give it to us, or when you’ve given a third party permission to share it with us. This notice applies to:

Visitors to our website
Personal data we receive via third-party services
People who use our services
Job applicants, and our current and former employees

Visitors to our website.

When someone visits www.crafted.co.uk, we use the following third-party services:

Google Analytics, to collect standard internet log information and visitor behaviour patterns, such as how many people visit different parts of the site. This is processed in a way that doesn’t identify anyone, and we don’t attempt, or allow Google to attempt, to identify individual visitors.
Lead Forensics, to identify which companies have visited our website. This doesn’t allow us to identify an individual visitor.
Infinity, to present a unique phone number to visitors so we can track how they found our site.
HubSpot, our CRM, to store business enquiry data and manage communications with people who’ve shown interest in our services.
Apollo, to identify companies visiting our website and help us find relevant prospects. This doesn’t allow us to identify an individual visitor.

Our website also relies on cookies for some functionality; see our Cookie Policy for more detail. Where we do want to collect personally identifiable information through the site, we’ll make this clear at the point of collection, along with what we intend to do with it.

Personal data via third-party services.

We use platforms including Mailchimp, Outlook and HubSpot to deliver email communications. These are only used to send you relevant communications; your data is never sold or transferred to businesses outside Crafted.

We’ll only collect and store personal data supplied by a third party, for example at an event or conference, where you’ve given permission for it to be shared with us. We’ll only use this for relevant follow-up activity, on the basis of our legitimate interest.

People who use our services.

We provide services to businesses, and within those businesses we hold the details of people who’ve requested, or are otherwise associated with, the service we provide. We only use these details to deliver the service and for closely related purposes, for example running a survey to find out whether someone was happy with the service they received.

Job applicants and employees.

Crafted is the data controller for the information you provide during a recruitment process, unless we tell you otherwise. If you have questions about the process or how we handle your information, contact us at careers@crafted.co.uk. Full detail on how we collect and use this information is in our Data protection and privacy policy, and on our recruitment and employee information page.

How we collect and use your information.

We collect information about you when you complete a form on our site, register to download content, or attend one of our events. This is usually your name and email address, along with anything else you choose to tell us.

This information is collected through forms on our website, or through third-party software such as Microsoft Teams, and sent to our web server over HTTPS. We collect it to respond to your enquiry, or to get in touch about something you’ve shown interest in, such as a whitepaper or other content.

We use this information solely for our own purposes and won’t sell it or share it with unrelated third parties. It may be transferred to our CRM platform, HubSpot, or the other tools listed above, to help us manage that communication with you.

If you complete a lead extension form within a Google paid ad, Google holds your data for a 30-day window before deleting it. We use this to respond to your enquiry, and this information may also be transferred to our CRM platform.

International data transfers.

Some of the tools described in this notice, including our CRM and email platforms and Google’s lead extension forms, may process your data outside the UK. Where this happens, we make sure appropriate safeguards are in place, such as a UK adequacy decision, standard contractual clauses or an International Data Transfer Agreement.

Grounds for processing.

We process the information you provide on the basis of our legitimate interest, for example to respond to an enquiry submitted through our website, or, where we’re providing a service to you, on the basis that it’s necessary for that contract. We’ve carried out a legitimate interest assessment on the data we collect to support this.

Your rights.

You have the following rights over the information Crafted holds about you:

Right to be informed, we provide this through this notice.
Right of access, we’ll confirm what data we hold about you and give you access to it.
Right of rectification, we’ll correct any data that’s incomplete or inaccurate.
Right to erasure (‘the right to be forgotten’) we’ll erase your data where there’s no compelling reason to keep processing it.
Right to restrict processing, we’ll stop or block processing on request. We may keep enough information to make sure we respect that restriction in future, for example holding your email address on a suppression list.
Right to data portability, in certain circumstances, you can ask for your data in a commonly used, machine-readable format.
Right to object, you can object to us processing your data, unless we need it to establish, exercise or defend a legal claim.

Rights related to automated decision-making, including profiling: Crafted does not use automated decision-making with your information.

To exercise any of these rights, or if you’d like us to access or correct data we hold about you, contact us using the details below. You can read more about your rights on the Information Commissioner’s Office website.

Your right to complain.

If you think we’ve got something wrong with how we’ve collected or used your personal information, we take that seriously and would like the chance to put it right, so please contact us directly first, using the details below. We also welcome any suggestions for improving how we handle personal data.

You also have the right to complain to the ICO, the UK’s supervisory authority, at any time. Contact details are listed on their ‘Report a concern’ page at ico.org.uk.

Protecting your information.

We know how much data security matters, and we treat your data with care. Your information is only accessed by people who need it to do their job. Personal data is encrypted at rest and in transit as far as possible, and we secure information submitted through our site using HTTPS.

We retain personal information only for as long as necessary to fulfil your request, or until you exercise one of the rights set out above.

Links to other websites.

This notice doesn’t cover links within our site to other websites. We encourage you to read the privacy notices of any other websites you visit.

Changes to this notice.

We keep this notice under regular review. It does not cover every detail of how Crafted collects and uses personal information, but we’re happy to provide further explanation on request, using the contact details below.

How to contact us.

If you want to ask about this notice, or exercise any of your rights, email or write to:

dpco@crafted.co.uk

Data Privacy Compliance Officer
Crafted Media Ltd
Hyde Park House
Crown Street
Ipswich
IP1 3LG

Last review: September 2026.