Privacy Policy

Last updated: 11 September 2026

1. Who We Are

This website, https://crofame.com, is operated by Crofame Ltd (“Crofame”, “we”, “us” or “our”).

For the purposes of UK data protection law, Crofame Ltd is the data controller of the personal information described in this Privacy Policy.

Company: Crofame Ltd
Registered address: [insert registered office address]
Company number: [insert company number]
Email: [insert privacy/contact email]

This Privacy Policy explains what personal information we collect, why we collect it, how we use it, how long we keep it, who we may share it with, and the rights available to you.

2. Information We May Collect

Depending on how you use our website, we may collect:

• your name;
• email address;
• telephone number;
• billing and delivery address;
• account username and account information;
• order and transaction information;
• products or services purchased;
• communications you send to us;
• comments or reviews;
• IP address;
• browser and device information;
• website usage information;
• cookie preferences;
• payment-related information supplied to our payment providers.

We do not normally receive or store your full payment-card details. Card payments are processed by the payment provider available at checkout.

3. How We Use Your Information

We may use personal information to:

• process and fulfil orders;
• provide products and services;
• administer customer accounts;
• communicate with you about your order;
• respond to enquiries and customer-support requests;
• process refunds, cancellations or returns;
• maintain accounting, tax and business records;
• prevent fraud and protect the security of our website;
• manage comments, reviews and user-generated content;
• improve the website and our services;
• send marketing communications where you have consented or where otherwise permitted by law;
• comply with legal and regulatory obligations.

4. Our Lawful Bases for Processing

Under UK data protection law, we rely on different lawful bases depending on the purpose.

Contract

We process information where it is necessary to enter into or perform a contract with you, including:

• processing an order;
• arranging payment;
• delivering products or services;
• managing your customer account;
• responding to issues relating to your purchase.

Legal obligation

We may retain and process information where required for purposes such as:

• tax;
• accounting;
• fraud prevention;
• regulatory compliance;
• responding to lawful requests from authorities.

Legitimate interests

We may process information where necessary for our legitimate business interests, including:

• operating and securing our website;
• preventing misuse and fraud;
• improving our services;
• handling customer enquiries;
• maintaining appropriate business records.

We consider your rights and interests before relying on legitimate interests.

Consent

Where consent is required, we rely on your consent for activities such as certain:

• marketing communications;
• analytics technologies;
• advertising or non-essential cookies.

You may withdraw consent at any time.

5. Orders and WooCommerce

Our online store is powered by WooCommerce.

When you place an order, we may collect information including your:

• name;
• billing address;
• delivery address;
• email address;
• telephone number;
• order details;
• account details, if you create an account;
• IP address and technical information related to the transaction.

We use this information to process your purchase, fulfil orders, provide customer service, manage refunds and returns, and maintain legally required business records.

WooCommerce allows store owners to configure how long different categories of order and account data are retained, and its privacy tools support data export and erasure requests.

6. Payments

Payments may be processed by third-party payment providers available through our checkout, such as Stripe and/or WooPayments where enabled.

These providers may process information required to authorise and complete your payment, including payment-card information, transaction details, device information and fraud-prevention information.

Crofame does not normally store your complete payment-card number.

Payment providers process personal information under their own privacy policies and may act as independent controllers or processors depending on the particular activity. Stripe, for example, states that it may act as either a controller or processor depending on the service being provided.

7. Customer Accounts

If you create an account on Crofame.com, we may store the personal information you provide in your profile.

You may be able to view or update certain account information through the My Account area.

Website administrators may also access account information where necessary to operate the website, provide customer support, fulfil orders or maintain security.

8. Comments and Reviews

If comments or reviews are enabled and you submit one, we may collect:

• the information entered in the form;
• your IP address;
• browser information.

This information may be used for moderation, security and spam detection.

Where Gravatar is used, an anonymised value created from your email address may be sent to the Gravatar service to determine whether you use that service.

After a comment is approved, a profile image associated with your Gravatar account may be visible publicly alongside your comment.

9. Media Uploads

If the website allows you to upload images, you should avoid uploading images containing embedded location information such as EXIF GPS data.

Visitors may be able to download publicly available images and extract embedded metadata.

10. Cookies and Similar Technologies

Crofame.com may use cookies and similar technologies for purposes including:

• keeping the website functioning;
• remembering your shopping cart;
• maintaining logged-in sessions;
• remembering preferences;
• website security;
• measuring website usage;
• analytics;
• marketing, where applicable.

Cookies that are strictly necessary may be placed without consent where permitted by law.

Where non-essential cookies are used, such as certain analytics or advertising cookies, we will seek consent where required.

Under UK rules, visitors must be given information about cookies and generally must consent to non-essential cookies before they are used.

More information should be provided in our separate Cookie Policy and through our cookie-preference tool.

11. Embedded Content and Third-Party Services

Pages on this website may contain content supplied by third parties, including:

• videos;
• social-media posts;
• maps;
• images;
• payment services;
• external websites.

Embedded content may behave as though you visited the third-party website directly.

Those third parties may collect technical information, set cookies or monitor your interaction with their services in accordance with their own privacy policies.

12. Who We May Share Information With

We may share personal information where necessary with trusted third parties that help us operate our business, including:

• website and hosting providers;
• WooCommerce and website service providers;
• payment processors;
• delivery and fulfilment providers;
• IT and security providers;
• email service providers;
• analytics providers, where enabled;
• professional advisers such as accountants or legal advisers;
• government, tax, regulatory or law-enforcement authorities where legally required.

We do not sell personal information to advertisers.

13. International Transfers

Some providers we use may process information outside the United Kingdom.

Where personal information is transferred internationally, we seek to use appropriate safeguards as required by applicable UK data protection law, such as adequacy regulations or approved contractual safeguards.

14. How Long We Keep Your Information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting and tax requirements.

For example:

• customer account information may be retained while the account remains active;
• abandoned, cancelled or failed order information may be retained for a shorter period according to our WooCommerce retention settings;
• completed order and transaction records may be retained for the period required for accounting, tax, legal and fraud-prevention purposes;
• comments may be retained until they are deleted or no longer required;
• enquiry correspondence may be retained for as long as reasonably necessary to deal with the enquiry and any related matter.

Where information is no longer required, we may delete or anonymise it.

15. Marketing Communications

Where you choose to receive marketing communications from us, we may use your contact details to send information about Crofame products, services, launches, offers or updates.

You can unsubscribe at any time by:

• using the unsubscribe link in an email; or
• contacting us at [insert email].

Unsubscribing from marketing does not prevent us from sending essential transactional messages relating to an order or account.

16. Security

We use reasonable technical and organisational measures intended to protect personal information from:

• unauthorised access;
• loss;
• misuse;
• alteration;
• disclosure;
• destruction.

However, no internet transmission or storage system can be guaranteed to be completely secure.

17. Your Data Protection Rights

Depending on the circumstances, under UK data protection law you may have the right to:

• request access to your personal information;
• request correction of inaccurate information;
• request deletion of your information;
• request restriction of processing;
• object to certain processing;
• request transfer of certain information to another organisation;
• withdraw consent where processing is based on consent.

Some rights are subject to legal exceptions. For example, we may need to retain certain order or transaction information even after an erasure request because of accounting, tax or other legal obligations. WooCommerce similarly recognises that some order, tax and payment records may need to remain following an account-deletion request.

To exercise your rights, contact:

office@crofame.com

We may need to verify your identity before completing a request.

18. Complaints

If you have concerns about how we use your personal information, please contact us first so we can try to resolve the matter.

You also have the right to complain to the UK supervisory authority:

Information Commissioner’s Office (ICO)

19. Children

Our website and online store are not specifically directed at children, and we do not knowingly seek to collect personal information from children where parental consent would be required.

20. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to:

• our services;
• our website;
• legal requirements;
• third-party providers.

The latest version will always be published on this page with the updated date shown above.

21. Contact Us

For questions about this Privacy Policy or your personal information, contact:

Crofame Ltd
Email: crofame@post.com
Registered address: London, United Kingdom.