Privacy Policy for DIYCrafted

Last Updated: March 1, 2025

1. DIYCrafted Privacy Policy Overview

Our website (https://diycrafted.com) is operated by Game Creation (HK) Company Limited, located at Kowloon Hung Hom Kaiser Estate Phase III, 9-11A Hok Yuen Street, Hong Kong. We specialize in handmade DIY craft products for global customers.

2. Information We Collect

We may collect and process the following data:

  • Personal Data: Name, email, shipping/billing address, payment details (processed securely via PayPal/Stripe), and phone number (optional).
  • Automated Data: IP address, browser type, device information, and cookies (see Section 5).
  • User-Generated Data: Comments, product reviews, or media uploads.
  • Marketing Data: Email interactions (via Mailchimp) if you subscribe to our newsletter.

3. How We Use Your Data

  • Process orders and deliver products.
  • Communicate about orders, shipping, or inquiries (via support@diycrafted.com).
  • Send marketing emails (only with consent; unsubscribe anytime via Mailchimp).
  • Improve website functionality and user experience.
  • Prevent fraud and comply with legal obligations.

4. Legal Basis for Processing

  • Contractual Necessity: To fulfill orders and provide services.
  • Consent: For marketing emails and non-essential cookies.
  • Legal Compliance: Tax reporting, fraud prevention, and data retention laws.

5. Cookies & Tracking Technologies

We use cookies to:

  • Remember cart items and login sessions.
  • Analyze traffic via tools like Google Analytics.
  • Enable third-party features (e.g., social media sharing).
    You can manage cookies via browser settings. Essential cookies are required for site functionality.

6. Third-Party Data Sharing

We share data only as necessary with:

  • Payment Processors: PayPal and Stripe (view their policies: PayPal Privacy / Stripe Privacy).
  • Email Services: Mailchimp (Privacy Policy).
  • Shipping Partners: Carrier providers (e.g., DHL, USPS).
  • Legal Authorities: If required by law.

7. International Data Transfers

Your data may be transferred to and processed in Hong Kong, the EU, or the US. We ensure compliance with GDPR and CCPA through contractual safeguards.

8. Data Retention

  • Order data: Retained for 10 years for tax/legal purposes.
  • Marketing data: Retained until consent is withdrawn.
  • Comments/reviews: Retained indefinitely unless deleted by request.

9. Your Rights

Under GDPR/CCPA, you may:

  • Access, correct, or delete your data.
  • Object to processing or restrict data use.
  • Request a portable copy of your data.
  • Withdraw consent (for marketing).
    To exercise these rights, contact us at support@diycrafted.com.

10. Data Security

We use SSL encryption, secure payment gateways, and regular system audits. However, no online method is 100% secure.

11. Children’s Privacy Policy

We do not knowingly collect data from users under 13. Contact us immediately if you believe a child has provided us with information.

12. Privacy Policy Updates

Updates will be posted here with a revised “Last Updated” date. Material changes will be notified via email (for subscribers).

13. Contact Us

For Privacy Policy-related inquiries, email support@diycrafted.com .