Privacy Policy

How and why we collect personal data
Site visits (Wix): IP address, browser/device details and pages viewed, so we can keep the site secure and understand anonymous traffic (legitimate interest).
Contact form: Your name and message, so we can reply to your enquiry (steps before a contract).
Purchases and bookings (Wix Stores, Bookings, Programmes, Services): Name, email, postal address, order details and payment information handled by Wix Payments. We use this to deliver what you bought and meet tax obligations (contract and legal obligation).
Member Area: Any profile details you choose to add, so member features work (contract).
Newsletter sign-up (SendFox): Name and email, used only to send the updates you asked for (consent).
We do not knowingly collect data from anyone under 16.
Cookies
Our site sets two kinds of cookies:
Essential cookies from Wix for security and site functions.
Non-essential cookies for Google Analytics (and, if enabled in future, Facebook marketing tags).
On your first visit you see a banner with Accept or Decline. Non-essential cookies—and Google Analytics—are held back until you click Accept.
How we store and share data
Hosting and platform are provided by Wix.com Ltd. Data may be stored on Wix servers in the UK, EU, USA, South Korea, Taiwan or Israel, protected by standard contractual safeguards.
Wix Payments processes all card transactions (PCI-DSS compliant); we never see your full card number.
SendFox stores newsletter subscriber lists under UK-approved safeguards.
Professional advisers (e.g. accountants) may view invoices containing limited personal data to meet legal requirements.
We never sell or rent your information.
How long we keep it
Contact-form messages, purchase records, newsletter details and member profiles are kept until you ask us to remove them or until legal obligations (such as seven-year tax record-keeping) expire. Dormant data is reviewed periodically and deleted when no longer needed.
Security
All traffic is encrypted (HTTPS/TLS). Wix hosting is ISO 27001-certified and encrypts sensitive database fields. Locally-held files are password-protected and backed up.
Your rights
At any time you may:
Request a copy of the personal data we hold on you.
Ask for correction or deletion.
Withdraw consent (for the newsletter or non-essential cookies).
Object to processing based on legitimate interest.
Ask us to port your data to another provider.
Complain to the UK Information Commissioner at ico.org.uk.
We aim to respond within 30 days.
Third-party links
Articles or resources we share may lead to external sites with their own privacy policies. Please check those independently.
Changes to this policy
We will update this notice here and, where changes are material, email subscribers.
The short version
We collect only what we need, keep it safe and respect your choice to leave at any time.
Who we are
Day Crafting is the trading name of Embody Interactive Ltd (Company No 04562258).
Registered address: Troed Yr Esgair Barn, Llangurig, SY18 6RS, UK.
For anything privacy-related please use the contact form at https://daycrafting.com/contact.




