Privacy Policy

This Privacy Policy describes how The Craft Table ("we," "us," or "our") collects, uses, shares, and protects personal information when you visit our website at thecrafttable.com (the "Site"), subscribe to our newsletter, or otherwise interact with us. By using the Site, you agree to the practices described in this policy.

If you have questions about this policy, please contact us at privacy@thecrafttable.com.

1. Information We Collect

1.1 Information You Provide Directly

We collect information you provide when you:

• Subscribe to our email newsletter (name, email address)
• Submit a contact form (name, email address, message content)
• Create an account, if applicable (name, email address, password)
• Participate in surveys or promotions (varies by promotion)
• Apply for a position with us (name, contact details, employment history)

1.2 Information Collected Automatically

When you visit the Site, we and our service providers automatically collect certain technical information, including:

• Log data: IP address, browser type and version, operating system, referring URLs, pages viewed, date and time of access
• Device data: Device type, screen resolution, language settings
• Cookies and similar technologies: Session cookies, persistent cookies, pixel tags, and web beacons (see Section 4 below for details)
• Analytics data: Aggregated data about how users navigate and interact with the Site

1.3 Information from Third Parties

We may receive information about you from third parties, such as social media platforms if you interact with our social media accounts, or advertising partners who help us understand the performance of our ads.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Delivering content: To operate, maintain, and improve the Site and provide you with the content you request
• Newsletter: To send our weekly email newsletter to subscribers who have opted in, and transactional messages related to your subscription
• Communications: To respond to enquiries, corrections, and support requests
• Analytics and improvement: To understand how the Site is used and improve its content, structure, and performance
• Advertising: To measure the performance of display advertisements and serve relevant advertising (see Section 5)
• Legal compliance: To comply with applicable laws, regulations, and legal processes
• Security: To detect, prevent, and respond to fraud, abuse, and security incidents

We do not sell your personal information to third parties. We do not use personal information to make automated decisions that have legal or similarly significant effects on you.

3. Legal Basis for Processing (EEA / UK Visitors)

If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal information on the following legal bases:

• Consent: When you subscribe to our newsletter or accept non-essential cookies, we process your data based on your consent. You may withdraw consent at any time.
• Legitimate interests: We process technical and analytics data based on our legitimate interest in understanding how the Site is used and improving it, provided this interest is not overridden by your rights and interests.
• Legal obligation: When we are required by law to process your data (for example, in response to a lawful request from a public authority).
• Contract performance: When processing is necessary to deliver a service you have requested (for example, sending you a newsletter you subscribed to).

4. Cookies and Tracking Technologies

We use the following types of cookies on the Site:

• Essential cookies: Required for the Site to function correctly. These cannot be disabled.
• Analytics cookies: Help us understand how visitors use the Site. We use Google Analytics (with IP anonymisation enabled) and Cloudflare Web Analytics.
• Advertising cookies: Used to measure the performance of display advertising and, where you have consented, to serve interest-based ads. We use Google Ad Manager and Meta Pixel.
• Preference cookies: Remember your settings (for example, dark mode preference, newsletter dismissal).

You can manage cookie preferences through your browser settings or through the cookie preference centre accessible via the link in our Site footer. Note that disabling certain cookies may affect Site functionality.

5. Advertising

The Craft Table displays advertising from third-party advertising networks, including Google Ad Manager. These networks may use cookies and similar technologies to serve advertisements based on your interests and browsing behaviour across websites. We do not share your name or email address with advertising partners.

To opt out of interest-based advertising by Google, visit Google Ads Settings. To opt out of interest-based advertising more broadly, visit the Digital Advertising Alliance opt-out page or the Your Online Choices tool in the EEA.

6. How We Share Your Information

We share personal information with third parties only in the following circumstances:

• Service providers: Companies that provide services on our behalf, such as email delivery (Mailchimp), analytics (Google Analytics), hosting (Cloudflare, AWS), and payment processing. These providers are contractually obligated to use your data only to provide their services to us.
• Legal requirements: When required by law, court order, or government authority, or when we believe disclosure is necessary to protect our rights, property, or safety, or that of others.
• Business transfers: In connection with a merger, acquisition, or sale of all or substantially all of our assets, your information may be transferred to the acquiring entity.
• With your consent: In any other circumstances, only with your explicit consent.

7. International Data Transfers

The Craft Table is based in the United States. If you are accessing the Site from the EEA, UK, or another jurisdiction, your information may be transferred to and stored in the US, which may not provide the same level of data protection as your home country. Where we transfer data from the EEA or UK to the US, we rely on Standard Contractual Clauses approved by the European Commission, or other appropriate safeguards.

8. Data Retention

We retain personal information for as long as necessary to fulfil the purposes described in this policy, unless a longer retention period is required or permitted by law:

• Newsletter subscriber data: Retained until you unsubscribe, plus a reasonable period afterwards to honour opt-out preferences
• Contact form submissions: Retained for 24 months from the date of receipt
• Analytics data: Aggregated analytics data is retained for up to 26 months
• Log files: Retained for up to 90 days for security purposes

9. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data, subject to certain exceptions
• Objection: Object to processing of your data based on legitimate interests
• Restriction: Request that we restrict processing of your data in certain circumstances
• Portability: Receive your data in a structured, machine-readable format
• Withdrawal of consent: Withdraw consent at any time where processing is based on consent (including unsubscribing from the newsletter)

To exercise any of these rights, email us at privacy@thecrafttable.com. We will respond within 30 days. If you are in the EEA or UK and are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete it, and the right to opt out of the "sale" of personal information (we do not sell personal information). To exercise CCPA rights, email privacy@thecrafttable.com with "California Privacy Request" in the subject line.

10. Children's Privacy

The Site is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete it promptly. If you believe we have collected information from a child under 13, please contact us at privacy@thecrafttable.com.

11. Third-Party Links

The Site may contain links to third-party websites, including social media platforms, referenced sources, and partner sites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies before providing any personal information to them.

12. Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, alteration, or disclosure. These include HTTPS encryption, access controls, and regular security reviews. However, no internet transmission or storage system is completely secure, and we cannot guarantee absolute security.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify newsletter subscribers by email. We encourage you to review this policy periodically.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• By email: privacy@thecrafttable.com
• By phone: +1 409-942-6979
• By mail: The Craft Table, Privacy Team, 2275 Hamilton Drive, Texas City, TX 77591, United States

For EEA and UK residents, our data controller is The Craft Table Inc., with the address listed above.