Free UK delivery on orders over £35

Privacy policy

Privacy Policy

Siesta Crafts Ltd. trading as Siesta

At Siesta, we take your privacy seriously. This Privacy Notice explains what personal data we collect, how we use it, and the rights you have under UK data protection law.

1. Who We Are

Siesta Crafts Ltd. (“Siesta”, “we”, “us”, “our”) is a UK-based wholesaler and retailer of giftware, clothing, musical instruments, and religious items.

Registered Office:
Unit 17 Roper Close, Canterbury, Kent, CT2 7EP

Company Number: 4852622
Privacy Officer: Tim Harper
Contact: thewarehouse@siestacrafts.co.uk / 01227 786066

2. Legal Basis for Processing

We process your personal data under the following bases, as defined by the UK GDPR and Data Protection Act 2018:

  • Performance of a Contract – To process and deliver orders, manage accounts, and provide customer service.

  • Legal Obligation – For tax, accounting, and fraud-prevention requirements.

  • Legitimate Interest – To run and improve our business, maintain security, and communicate necessary service updates.

  • Consent – For optional activities such as email marketing and certain analytics cookies.

3. How We Collect Personal Data

We collect data when you:

  • Place orders on our website, by phone, or via email.

  • Contact us for support or product information.

  • Sign up for newsletters or marketing updates.

  • Visit our website (via cookies and analytics tools).

  • Interact with us at trade fairs or in-store.

4. What Personal Data We Collect

Depending on your interaction with us, we may collect:

  • Identity and Contact Details: Name, address, email address, telephone number.

  • Order & Account Information: Purchase history, delivery details, invoices.

  • Payment Data: Handled securely by third-party payment providers; we do not store full card details.

  • Technical & Analytics Data: IP address, device/browser information, and interaction data (where consented).

  • Customer Support Records.

We do not collect sensitive personal data (such as details of race, religion, health, or biometrics).

5. How We Use Your Data

We use your personal data to:

  • Process and fulfil orders.

  • Provide customer support.

  • Manage your account and send essential service updates.

  • Detect fraud and maintain website security.

  • Send marketing emails if you have opted in.

  • Improve our website, product range, and customer experience.

You can opt out of marketing at any time.

6. How Long We Keep Your Data

  • Orders & Invoices: 6 years (legal requirement).

  • Marketing Data: Until you unsubscribe or after 2 years of inactivity.

  • Job Applications: 6 months, unless you consent to longer retention.

7. Who We Share Your Data With

We do not sell or rent personal data. However, we may share your information with:

  • Couriers (e.g., Royal Mail, DHL) for delivery.

  • Payment Providers (e.g., PayPal, Shopify Payments) for secure transactions.

  • Credit Reference Agencies (for B2B credit account applications).

  • Legal Authorities if required for fraud prevention or compliance.

Some service providers operate outside the UK/EU. Where this occurs, we ensure appropriate safeguards, such as Standard Contractual Clauses (SCCs).

8. Cookies & Tracking Technologies

We use cookies and analytics tools to improve site functionality, measure performance, and support marketing. Non-essential cookies only run with your consent.

8.1 Essential Cookies

Required for website operation, secure checkout, and account login.

8.2 Analytics Cookies

Used to understand visitor behaviour and improve user experience.

Google Analytics

Collects aggregated data on page views, traffic patterns, and browsing behaviour.
Runs only with consent.

Microsoft Clarity

We use Microsoft Clarity to analyse how visitors interact with our website through heatmaps and session replays.

Clarity may collect:

  • Clicks, scrolls, mouse movements, and navigation patterns

  • Device and technical details (browser, OS, screen size)

  • Page performance metrics

  • A masked view of webpage content for replay purposes

Sensitive information (such as payment details or passwords) is automatically masked.

How Microsoft uses this data:
Microsoft acts as an independent data controller, meaning it may:

  • Use de-identified behavioural data to improve its own products

  • Process data on servers worldwide, including outside the UK/EU

  • Combine anonymised data from our site with data from other sites using Clarity

More information: https://privacy.microsoft.com

Clarity operates only if you accept analytics cookies via our banner.

8.3 Marketing Cookies

Used with consent for personalised advertising through:

  • Google Ads

  • Facebook/Meta Pixel

  • Shopify marketing tools

8.4 Shopify Network Intelligence

Our store is hosted by Shopify. Shopify may use customer interaction data, aggregated across participating merchants, to provide enhanced services such as:

  • Improved search and recommendations

  • Marketing tools (e.g., Shopify Audiences)

  • Fraud detection

  • Personalisation features

Your data may be processed in Shopify’s global infrastructure, including outside your country.

Customers in the United States (and certain regions) may opt out of “sharing” or “targeted advertising” through Shopify’s built-in privacy controls.

Shopify’s full privacy policy is available on their website.

9. Your Rights Under UK GDPR

You have the right to:

  • Access – Request a copy of the personal data we hold.

  • Rectification – Correct inaccurate or incomplete data.

  • Erasure – Request deletion where applicable.

  • Restriction – Limit how we use your data.

  • Objection – Stop marketing communications at any time.

  • Data Portability – Receive your data in a structured, machine-readable format.

Requests should be sent to thewarehouse@siestacrafts.co.uk. We may need to verify your identity for security purposes.

10. Data Security & Breach Response

We use secure servers, encryption, firewalls, and access controls to protect your data.
If a data breach occurs, we will notify the ICO within 72 hours where legally required and contact affected individuals as necessary.

11. Third-Party Links

Our website may contain links to external websites. We are not responsible for their privacy practices and encourage you to review their policies separately.

12. Updates to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page.

Last updated: 28 November 2025

13. Contact Us

For privacy queries or concerns:

Siesta Crafts Ltd.
Unit 17 Roper Close
Canterbury
Kent
CT2 7EP

📧 Contact us here
📞 Phone: 01227 786066
🌍 Website: www.siestacrafts.co.uk

For more information on the UK GDPR: https://ico.org.uk