Privacy Policy
Last updated: 7 September 2026
Craft Academy (“we”, “us”, “our”) operates the website craft-academy.base44.app (the “Site”). We are committed to protecting and respecting your privacy. This Privacy Policy explains what personal information we collect, how we use it, and the choices and rights you have. By using the Site, you agree to the practices described in this Policy.
Who We Are
The Site is operated by Craft Academy, the business behind craft-academy.base44.app. This Privacy Policy applies to the Site and the services offered through it, including browsing courses, registering for a course, and contacting the academy. If you have any questions about this Policy or how we handle your information, please contact us at hello@craft-academy.base44.app.
Information You Provide to Us
When you create an account, register for a course, or contact us, you may provide: your name, email address, telephone number, and account information such as a password. When you contact the academy you may share any information you choose to include in your message.
Information Collected When You Use the Site
When you visit and use the Site, certain technical information is processed to operate and secure it. This includes your IP address and approximate location derived from it, which we use for country detection at checkout, to apply the relevant shipping and payment options, and for security and fraud prevention. Our service infrastructure may also generate standard server logs as part of operating and securing the Site. We do not use analytics or similar tracking to measure how you browse individual pages, and we do not compile profiles of your browsing activity across pages.
Registrations, Payments & Transaction Information
When you register for a course, we collect and store registration and transaction information, including the course, the session, the price, payment status, registration status, and a record of your communications with the academy regarding your registration. This information is necessary to manage your registration and provide customer service.
Payment Processing
Payments are processed through third-party payment providers such as Stripe and PayPal. When you pay, your payment information is handled directly by the payment provider and is subject to that provider's terms and privacy policy. Craft Academy does not receive, access, or store your full payment-card details. We receive only a confirmation of the transaction and limited information necessary to identify and fulfil your order, such as a transaction reference and the last digits of your card where applicable.
Google Sign-In & OAuth
If you choose to sign in using Google, Google authenticates you and may provide Craft Academy with basic account information associated with your Google account, such as your name, email address, profile picture and a unique Google account identifier, depending on the information made available through the authentication service. We use this information solely to authenticate you, identify or create your Craft Academy account, and provide account-related functionality. We may store this information as part of your Craft Academy account for as long as necessary to provide the account and as otherwise described in this Privacy Policy. We do not receive or store your Google password, access your emails, contacts, files or other Google services through Google Sign-In. We do not sell Google user data or use Google user data for advertising. Google user data is shared only with service providers where necessary to operate and secure the Site, or where required by law. Your use of Google Sign-In is also subject to Google's applicable terms and privacy policy.
How We Use Your Information
We use your personal information to: create and manage your account; process and manage your course registrations; handle payments and, where applicable, refunds; provide customer service and respond to your enquiries; send you registration confirmations, reminders, notifications, and important account or policy messages; personalise and improve your experience on the Site; prevent fraud and secure the Site; and comply with our legal obligations.
Legal Bases for Processing
Where the GDPR applies, we process personal information on one or more of the following legal bases: • Contractual necessity — where processing is necessary to enter into or perform a contract with you, including managing your account, processing purchases, accepted offers and auction transactions, arranging delivery, and providing related customer service. • Legal obligations — where processing is necessary to comply with applicable legal, accounting, tax, regulatory or other obligations. • Legitimate interests — where processing is necessary for our legitimate interests, including operating and securing the Site, preventing fraud and abuse, administering our business, improving our services and providing customer support, provided that those interests are not overridden by your rights and interests. • Consent — where applicable law requires your consent, including for certain marketing communications and non-essential cookies or similar technologies. Where we rely on consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
Course Attendance & Customer Service
We use your name and contact details to manage your registration, confirm your place, send you session details and reminders, and assist you with any questions or issues relating to your course. For in-person sessions, the information needed for you to attend is shared only to the extent necessary to run the session.
Fraud Prevention & Website Security
We use your information, including order and transaction details and technical data, to detect and prevent fraud, abuse, and unauthorised activity, and to help protect the security of the Site and our customers. We may use automated and manual checks, and may share information with payment providers or other parties where necessary to assess and prevent fraud.
Communications & Notifications
We may contact you by email or through in-site notifications about your registrations, courses, account, and, where you have agreed to receive them, other communications from the academy. You can manage notification preferences in your account, and you may opt out of non-essential marketing communications at any time using the unsubscribe link or by contacting us. We will always send service messages necessary to operate your registrations or account.
Cookies & Similar Technologies
We use cookies and similar technologies (such as local storage) to keep you signed in, remember your preferences, and to help secure the Site. Most browsers allow you to refuse or delete cookies, but some features of the Site may not work properly without them. Where required by law, we will ask for your consent before placing non-essential cookies.
Third-Party Service Providers
We work with trusted third-party service providers that help us operate the Site and run our business, including payment providers (such as Stripe), email and communication providers, hosting services, and fraud-prevention tools. These providers process your information on our behalf and only for the purposes we instruct. They are bound by their own privacy and security obligations, and we share only the information necessary to provide the relevant service.
Data Retention
We keep your personal information only for as long as is necessary to provide our services, fulfil your orders, comply with our legal and tax obligations, resolve disputes, and enforce our agreements. Account and order information is typically retained for the duration of your relationship with us and for a reasonable period afterwards as required by law. When information is no longer needed, we delete it or anonymise it.
Data Security
We take reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, misuse, or alteration, including access controls, encryption in transit, and secure storage. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. We do not store your full payment-card details — these are handled solely by our payment providers.
Your Privacy Rights
Depending on where you live, you may have rights under applicable data protection laws, including the EU and UK General Data Protection Regulation (GDPR). These rights may include: accessing the personal information we hold about you; correcting inaccurate information; requesting deletion of your personal information; restricting or objecting to certain processing; receiving a copy of your information in a structured, portable format (data portability); and withdrawing any consent you have given. To exercise any of these rights, or to make any other request regarding your personal information, please contact us at hello@craft-academy.base44.app. We will respond in accordance with applicable law and may need to verify your identity before acting on your request. You also have the right to lodge a complaint with the competent data protection supervisory authority if you believe that your personal information has been processed in violation of applicable data protection law.
International Data Transfers
Because we and some of our third-party service providers operate internationally, your personal information may be processed in countries other than your own, which may have different data protection laws. Where this occurs, we take steps to ensure your information is protected in line with this Privacy Policy and applicable law, for example by relying on recognised transfer mechanisms such as the EU Standard Contractual Clauses where required.
Children's Privacy
The Site is not directed at children under the age of 16, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us at hello@craft-academy.base44.app and we will take steps to delete it.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we offer. When we do, we will revise the “Last updated” date at the top of this page and, where changes are significant, provide a more prominent notice. We encourage you to review this page periodically.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact the house at hello@craft-academy.base44.app. We are committed to responding promptly and helping you understand and exercise your privacy rights.
This Privacy Policy forms part of your use of Craft Academy and craft-academy.base44.app.