1. Comments
When visitors leave comments on the site, we collect the data shown in the comments form, along with the visitor’s IP address and browser user agent string to help with spam detection.
An anonymized string (hash) created from your email address may be sent to the Gravatar service to check if you use it. Gravatar’s privacy policy is here: https://automattic.com/privacy/. After your comment is approved, your profile picture may be visible publicly next to your comment.
2. Media
If you upload images to the website (such as product photos or profile pictures), please avoid uploading images with embedded location data (EXIF GPS). Visitors can download and extract this data if it’s included.
3. Cookies
If you leave a comment, you may opt in to saving your name, email, and website in cookies. These exist for your convenience and last one year.
If you visit our login page, a temporary cookie will determine if your browser accepts cookies. It contains no personal data and is discarded when you close your browser.
If you log in, we will set cookies to save your login details and screen display choices. Login cookies last two days; screen option cookies last one year. Choosing “Remember Me” keeps you logged in for two weeks. Logging out deletes login cookies.
If you edit or publish an article or product, an extra cookie is saved in your browser. This cookie contains no personal data and simply stores the post ID of what you just edited. It expires after one day.
4. Embedded content from other websites
Articles and pages on this site may include embedded content (e.g., videos, images, articles). Embedded content behaves as if the visitor has visited the source website directly.
These external sites may collect data about you, use cookies, embed third-party tracking, and monitor your interaction with the embedded content, including if you’re logged into that site.
5. Who we share your data with
When you make a purchase or create a vendor/shop account through our site, we collect:
- Name
- Email address
- Shipping and billing addresses
- Phone number
- IP address
- Payment details (processed via secure third-party payment gateways; we don’t store your card info)
- Any notes or messages related to your order or store
We use this data to:
- Fulfill orders
- Allow vendors to ship products (courier services)
- Manage your customer or vendor account
- Respond to queries or requests
- Prevent fraud
- Improve our services
- Process Payments(e.g., PayFast, PayPal)
Your order and account data is shared with the specific vendor(s) you buy from. Each vendor has access only to their customers’ data and is expected to treat it with the same care and privacy as we do.
If you request a password reset, your IP address will be included in the reset email.
6. How long we retain your data
If you leave a comment, the comment and its metadata are kept indefinitely.
For users who register on our website (as a customer or vendor), we store the personal data provided in their profile. You can view, edit, or delete your data at any time (except the username). Website administrators can also access and manage this information.
Order data is retained as required for accounting, tax, and customer service purposes (typically five years or more depending on applicable law).
7. What rights you have over your data
You can request:
- A copy of the personal data we hold about you
- That we delete any personal data we hold about you (excluding any data we must retain for legal or administrative reasons)
To request data access or deletion, email us at info@craftyaf.co.za.
8. Where your data is sent
Visitor comments may be checked by an automated spam detection service.
Order, vendor, and contact information may be securely transferred to payment processors, shipping services, or vendors.