Privacy Policy
Introduction
This Privacy Policy describes how Crafty Kingfisher ("we", "us", or "our") collects, uses, and shares information about you when you use our services. Effective Date: April 18, 2026.
If you have questions about this policy, please contact us at privacy@craftykingfisher.com.
Information We Collect
We collect the following categories of personal data for the purposes described below. Under GDPR Article 6, we rely on the lawful bases shown for each processing purpose:
| Category | Fields collected | Purpose | Lawful basis |
|---|---|---|---|
| Information processed when you browse this website | IP address, Rough network/client information sent with a web request (for example User-Agent and Accept-Language headers), Requested URL path (the page or asset you asked for), HTTP referrer (if your browser sends it), Timestamps of requests, HTTP response status codes | Operating and securing the website (for example to serve pages, detect abuse, and diagnose errors). | Legitimate interests (Article 6(1)(f)) |
| Information that may be inferred from technical data | Browser name/version (often inferred from the User-Agent string), Operating system family (often inferred from the User-Agent string), Device category at a coarse level (for example mobile vs desktop, often inferred from the User-Agent string) | Understanding coarse device and browser capabilities to deliver compatible content. | Legitimate interests (Article 6(1)(f)) |
Automated Decision-Making and Profiling
We do not engage in automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you within the meaning of GDPR Article 22.
Data Retention
We retain your data for the following periods:
| Category | Retention period |
|---|---|
| Information processed when you browse this website | Typically up to 1 hour in our hosting provider dashboard logs; we do not use this site to run product analytics |
| Information that may be inferred from technical data | Same as the request metadata it is derived from (typically up to 1 hour in our hosting provider dashboard logs) |
Whether You Are Required to Provide This Data
For each category of personal data we collect, we set out below whether you are required to provide it — by law, under our contract with you, or as a precondition to entering into a contract — or whether provision is voluntary, together with the consequences of failing to provide it.
| Category | Requirement | Consequences |
|---|---|---|
| Information processed when you browse this website | Voluntary | If you do not wish this information to be processed you can avoid using this website or use browser or network controls where available. |
| Information that may be inferred from technical data | Voluntary | If you do not wish this information to be processed you can avoid using this website or use browser or network controls where available. |
Cookies and Tracking
We use the following types of cookies and tracking technologies:
| Category | Lawful basis |
|---|---|
| Essential cookies — required for the service to function |
Third-Party Services
We share data with the following third-party services:
| Service | Purpose | Privacy policy |
|---|---|---|
| Vercel | Hosting and deployment infrastructure | View |
| Delivery of web fonts/stylesheets when loading Google Fonts linked from this website | View |
Your Rights
You have the following rights regarding your personal data:
- Right to access your personal data
- Right to correct inaccurate data
- Right to request deletion of your data
- Right to receive your data in a portable format
- Right to restrict how we process your data
- Right to object to processing
UK Privacy Rights (UK-GDPR)
This section applies to individuals in the United Kingdom under the UK General Data Protection Regulation (UK-GDPR), as tailored by the Data Protection Act 2018.
Data Controller: Crafty Kingfisher, United Kingdom
We have not appointed a Data Protection Officer. Our processing activities do not meet the thresholds in GDPR Article 37(1) that would require one.
The supervisory authority for data protection in the UK is the Information Commissioner's Office (ICO). If you believe we have not handled your data in accordance with UK data protection law, you have the right to lodge a complaint with the ICO at ico.org.uk/make-a-complaint.
If we transfer your personal data outside the United Kingdom, we ensure appropriate safeguards are in place in accordance with the UK-GDPR, including the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses where applicable.
Contact Us
Contact us:
- Legal Name: Crafty Kingfisher
- Address: United Kingdom
- Email: privacy@craftykingfisher.com