Skip to Content (Press Enter) Skip to Footer (Press Enter)

Privacy and How We Use Your Information

Last updated: 3rd November 2026

We are committed to protecting and respecting your privacy. This policy sets out the basis on which any information from which you can be identified (referred to as “Personal Data”) that we collect from you, or that you provide to us, will be processed by us. Please read the following carefully to understand our processes and practices regarding your Personal Data and how we will treat it.

The relevant laws are: (i) the Data Protection Act 2018; (ii) the UK General Data Protection Regulation; (iii) the EU General Data Protection Regulation 2016; and (iv) the Privacy and Electronic Communications (EC Directive) Regulations 2003 (together, the “Data Protection Legislation”).

For the purpose of the Data Protection Legislation, we, Hobbycraft Trading Ltd (company number 0806269), Registered office: 7 Enterprise Way, Christchurch, Dorset BH23 6HG, are the Data Controller.

Personal data we may collect from you

We may collect and process the following Personal Data about you:

1. Personal Data you give us

  • to enable you to access our Websites or app and to correspond with us by phone, email or otherwise
  • to allow you, as part of the Hobbycraft Club, to receive information, Products and services that you request from us
  • to provide you with information about other goods and services we offer that are similar to those that you have already purchased or enquired about

The Personal Data you give us may include items such as your name, address, e-mail address and phone number. We rely on ‘contractual necessity’ as the lawful ground for the processing of your Personal Data in such cases.

2. Personal Data that we collect about you

  • to improve our Products and to ensure that Website or app content is presented in the most effective manner for you and for your computer or device
  • to allow you to participate in interactive features of our Websites or app and services, when you choose to do so
  • to make suggestions and recommendations to you for our goods or services that may interest you

This includes automatically collecting and using the following Personal Data: technical information, including your account registered information, payment account reference (PAR) relating to your debit or credit card, and information about your session, including the information (such as scrolling, clicks), and other Personal Data supplied as part of the registration to the Hobbycraft Club and using our Websites or app to purchase products. The legal basis on which we process this Personal Data is primarily for the purpose of pursuing our legitimate interests as an arts and crafts retailer.

3. Personal Data in user generated content

  • Personal Data we collect from your user generated content to use for marketing, advertising and promotional purposes

4. Personal Data we receive from other organisations

We work with Sagacity Solutions Ltd, a UK data and insight company, to add a small amount of extra information to our customer records. Where Sagacity can match your details, it may give us information such as demographic details (for example your likely age band, life stage and household type), financial details (for example your likely income or affluence band) and lifestyle details (for example general interests).

Sagacity collects this information from surveys, competitions and offers that people have signed up to. If Sagacity cannot match you individually, it may use average figures for your postcode area. We do not receive information about your health, religion, ethnicity, sexuality, political views or financial difficulties. We rely on our legitimate interests (see “Customer insight and profiling” below) to receive and use this Personal Data.

Uses made of your Personal Data

We use Personal Data held about you in the following ways:

  • Personal Data you give to us. We will use this Personal Data:
    • to carry out our obligations arising from any contracts entered into between you and us and to provide you with the information, products and services that you request from us;
    • to provide you with information about other goods and services we offer that are similar to those that you have already purchased or enquired about;
    • to notify you about changes to our service; or
    • to ensure that content from our Websites or app is presented in the most effective manner for you and for your computer.
  • Personal Data we collect about you. We will use this Personal Data:
    • to administer our Websites or app and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
    • to improve our Products and to ensure that Website or app content is presented in the most effective manner for you and for your computer or device;
    • to allow you to participate in interactive features of our Websites or app and services, when you choose to do so;
    • as part of our efforts to keep our Websites or app safe and secure;
    • to make suggestions and recommendations to you and other users of our Websites or app about goods or services that may interest you or them;
    • to send you an email if you have bought from us either in store, from any of our Websites or our app, inviting you to review the product/s bought. You will be able to unsubscribe from these emails;
    • to make suggestions and recommendations to you based on purchases you have made whilst providing your Personal Data, Hobbycraft loyalty card number, or a credit or debit card.
  • Customer insight and profiling. We will use the Personal Data you give us, details of what you buy from us (in store, online, in our app and through the Hobbycraft Club), how you interact with our emails and app notifications, and the Personal Data we receive from other organisations:
    • to understand our customers as a whole and how they compare with the wider UK population, so we can plan our products, stores and services;
    • to group customers with similar interests, so the offers, content and adverts you see from us are more relevant to you; and
    • to personalise our emails, app and Websites, and to choose which customers we show online adverts to.

    This is a form of profiling. We use it only for marketing and planning. It does not affect your access to our products, services or prices, and we do not use it to make automated decisions that have a legal or similarly significant effect on you. The legal basis is our legitimate interests in understanding our customers and offering more relevant products, offers and adverts. You can object at any time (see “Your rights”). We will only send you marketing emails or app notifications where you have agreed to them or where the law otherwise allows, and you can unsubscribe at any time.

  • Personal Data we collect from user generated content. We will use this Personal Data for marketing, advertising and promotional purposes in accordance with our Terms and Conditions (using the services of Bazaarvoice, Inc. to do so).
  • Facewatch facial recognition is used within our premises for the lawful purpose of prevention and detection of unlawful acts including theft and violence against our staff and customers.
    • We supply incident details and CCTV images of people responsible for unlawful acts within our premises to Facewatch; and receive alerts from Facewatch if a person entering our premises is known by Facewatch to be responsible for committing an unlawful act in our premises or elsewhere.
    • Our lawful basis for the processing of personal data in this way is that the processing is necessary for a task carried out in the public interest, namely the prevention and detection of crime.
    • Our lawful basis for the processing of criminal offences committed within our premises in this way is that the processing is necessary for a task carried out in the substantial public interest, namely the prevention and detection of crime.
    • Facewatch is the data controller responsible for the processing of personal data by way of facial recognition.
    • We display clear signage in all stores where Facewatch is used. This signage details how to obtain the Facewatch privacy notice.

Disclosure of your Personal Data

We may share your Personal Data with any member of the group of companies of which we are a part.

We may disclose your Personal Data to third parties:

  • in the event that we sell or buy any business or assets, in which case we may disclose your Personal Data to the prospective seller or buyer of such business or assets;
  • if Hobbycraft Trading LTD or substantially all of its assets are acquired by a third party, in which case Personal Data held by it about its users will be one of the transferred assets;
  • in the event you complete a form and give permission to feature in Hobbycraft Plus marketing; the information you provide will be shared with our partner Nerrisa Pratt to facilitate and may be used publicly to promote your small business;
  • in the event you agree to our Terms and Conditions in relation to user generated content, in which case we may disclose your Personal Data on public-facing websites, applications and communications for the purposes of marketing, advertising and promotion (and please note that the collection and processing of this Personal Data is carried out on our behalf by Bazaarvoice, Inc.);
  • if we are under a duty to disclose or share your Personal Data in order to comply with any legal obligation; in order to enforce or apply our relevant terms of use relating to each Product and other agreements; or to protect the rights, property, or safety of Hobbycraft Trading LTD, our users, or others. This includes exchanging Personal Data with other companies and organisations for the purposes of fraud protection and credit risk reduction;
  • to our data and insight partner, Sagacity Solutions Ltd, which uses your name, address, email address, customer number and shopping information to match and add to our customer records and to give us insight reports. Sagacity acts only on our instructions under a contract, may not use our customers’ Personal Data for its own purposes, and keeps it secure in the UK or EEA;
  • we share data with platforms such as Google, Meta and TikTok to tailor the marketing we show you via their sites and products. This may include customer groups we have created as described in “Customer insight and profiling”. Information sent to these platforms for matching is protected (for example, email addresses are encoded) and is used to deliver our adverts;
  • in order for you to place an order for Products and for that order to be fulfilled.

Where we store and transfer your Personal Data

The Personal Data that we collect from you, or that you provide to us, will generally be processed by us at a destination anywhere within the UK or European Economic Area (EEA). Transfers between the EU and UK are made on the basis of an adequacy decision by the European Commission. In processing your Personal Data, it will sometimes be necessary for us to transfer your Personal Data outside the UK and EEA, such as where your information is processed by overseas third party service providers located outside the UK and EEA. We will take all steps reasonably necessary to ensure that your Personal Data is treated securely and in any event in accordance with this policy and Data Protection Legislation when it is processed in a location outside the EEA or UK. We may enter into contracts with entities based outside the EEA and UK where this is required by Data Protection Legislation.

Retention of your Personal Data

We will retain your Personal Data for as long as your account is active or as needed to provide you with access to our Websites or app and services. In relation to Personal Data that we collect from user generated content, we will retain the data for as long as needed for our marketing, promotional and advertising purposes. If you wish to cancel your account or otherwise request that we no longer use your Personal Data, contact us at privacy@hobbycraft.co.uk. We will only retain and use your Personal Data thereafter as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

Sagacity deletes the Personal Data we send it within 30 days of finishing its work for us. We keep the extra information Sagacity gives us for as long as we work with Sagacity, unless you object sooner, and then delete it. Customer groups and insight created from it are kept for as long as your account is active. If you object, we remove you from them.

International payments made through our websites are made via our partner Global E. Global E require that data captured is retained by Global E to meet tax and financial legal requirements for a period of 7 years before deletion. Any queries can be directed to Global E at dataprotection@globale.com.

Security of your Personal Data

The security of your Personal Data is important to us. We comply with accepted industry standards to protect the Personal Data submitted to us. We use strict procedures and advanced security features to try to prevent unauthorised access. No method of transmission over the Internet, or method of electronic storage, is however 100% secure. Therefore, we cannot guarantee its absolute security.

Where we have given you (or where you have chosen) a password which enables you to access certain parts of our Websites or app, you are responsible for keeping this password confidential. You are not permitted to share a password with anyone.

Our Websites or app may, from time to time, contain links to and from the websites of our partners, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. We encourage you to carefully read the privacy notice of any website you visit.

Your rights

You have the following rights in relation to the handling of your Personal Data:

  • You have the right to request details of your Personal Data held about you by us
  • You have the right to have inaccuracies corrected for Personal Data held about you by us
  • You have the right to have Personal Data held about you erased / deleted
  • You have the right to object to us using your Personal Data for direct marketing, and to object to other processing we carry out on the basis of our legitimate interests, including profiling and customer insight. If you object to direct marketing or to profiling for marketing, we will stop
  • You have the right to restrict the processing for Personal Data held about you by us, including automated decision-making
  • You have the right to data portability for Personal Data held about you by us
  • You have the right to withdraw your consent to our processing of your Personal Data at any time

You can exercise any of your rights outlined above by contacting us at privacy@hobbycraft.co.uk and we will action your request within one month. Where we receive a large number of requests, or receive especially complex requests, this may be extended by a maximum of two further months. If we fail to meet these deadlines or if you feel your rights have not been adequately respected, you may complain to the Supervisory Authority and/or seek a judicial remedy.

If you do not want us to add information from other organisations to your record, or to use your Personal Data for customer insight and profiling, email privacy@hobbycraft.co.uk. We will delete the extra information we received about you, ask Sagacity to delete anything it holds about you for us, and remove you from our customer groups and online advertising audiences. This will not affect your purchases or your Hobbycraft Club membership.

Changes to our Privacy Policy

Any changes we may make to our privacy policy in the future will be posted on our websites and, where appropriate, notified to you by e-mail.

Contact

Questions, comments and requests regarding this privacy policy are welcomed and should be addressed to privacy@hobbycraft.co.uk

Top