Very Crafty Thoughts (VCT)
Gary Flinn trading as Very Crafty Thoughts
Website: www.vct.rocks
Email: gary.vct@mail.com
Business address: 47 Eastville Avenue, Rhyl, LL18 3TL
Last updated: 11 October 2026
At Very Crafty Thoughts, we respect your privacy and are committed to handling your personal information responsibly.
This Privacy Policy explains what information we collect, why we collect it, how we use and protect it, and your rights under UK data protection legislation.
It applies to visitors and customers using our website, purchasing our products, contacting us or submitting photographs and artwork for personalised orders.
 
1. Who We Are
Very Crafty Thoughts (VCT) is a UK-based sole-trader business operated by Gary Flinn.
We specialise in personalised gifts, homeware, engraving, sublimation and custom-made products.
Gary Flinn, trading as Very Crafty Thoughts, is the data controller responsible for personal information collected and used in connection with our business.
For privacy enquiries, please contact gary.vct@mail.com.
 
2. Information We Collect
Depending on how you interact with us, we may collect:
Your name and contact details, including email address and telephone number where provided.
Billing and delivery addresses.
Order details, purchased products and personalisation instructions.
Messages, enquiries and correspondence.
Photographs, artwork, logos, text and designs submitted for personalised products.
Payment and transaction information, such as payment status and transaction references.
Technical information about website visits, including device information and cookie data, where collected.
Payment card details are processed through the payment services available at checkout. We do not need to receive or store your full card details to fulfil an order.
 
3. How We Use Your Information
We use personal information to:
Process, produce and deliver orders.
Personalise products according to customer instructions.
Respond to enquiries and provide customer support.
Contact customers about orders, artwork or delivery.
Process cancellations, refunds and complaints.
Maintain necessary financial and business records.
Protect our website and business against misuse or fraud.
Comply with legal obligations.
Send marketing communications where permitted by law and your preferences.
   We do not sell customers' personal information to advertisers or data brokers.
 
4. Our Legal Reasons for Using Information
Under UK data protection law, we rely on the following lawful bases, depending on the circumstances:
Contract: To process orders, create personalised products, arrange delivery and respond to requests connected with a purchase.
Legal obligation: To maintain records or provide information where required by law.
Legitimate interests: To respond to general enquiries, administer our business, maintain website security and handle disputes, where these interests are not overridden by individuals' rights.
Consent: Where required, for optional marketing communications or non-essential cookies and similar technologies.
You can withdraw consent at any time where consent is the basis for processing. This does not affect processing already carried out lawfully.
 
5. Customer Photographs, Artwork and Designs
Customers may upload photographs, artwork, logos and other designs through the file-upload facility on our Wix Contact page.
We use these files to review requests, prepare designs, create personalised products and resolve related customer-service enquiries.
We do not use customer-submitted photographs or artwork for unrelated advertising, social media or promotional purposes without appropriate permission.
Customers should only submit images and designs they are entitled to share and use. We ask customers to avoid submitting unnecessary sensitive personal information.
Where an uploaded image contains identifiable individuals, it may constitute personal data and will be handled accordingly.
 
6. How Long We Keep Customer Artwork
Our standard practice is to delete customer-uploaded artwork 90 days after the associated order has been completed.
This allows reasonable time to deal with immediate queries, corrections or replacement requests.
We may retain artwork for longer where:
The customer specifically requests that we keep it for future orders.
Retention is reasonably necessary for an unresolved complaint, dispute or legal obligation.
Where artwork is submitted as an enquiry but no order is placed, we aim to delete it within 90 days of the last relevant correspondence, unless a longer period is justified.
Customers can request earlier deletion by emailing gary.vct@mail.com. We will consider these requests in accordance with applicable legal requirements.
 
7. Other Information Retention
We keep personal information only for as long as reasonably necessary for the purposes described in this policy.
Order and transaction records may need to be retained for several years to comply with tax, accounting and other legal obligations.
General enquiries and customer-service correspondence are reviewed periodically and deleted when no longer needed, subject to any legal or business necessity.
 
8. Website Hosting, Payments and Service Providers
Our website and online store are operated using Wix.
Information submitted through our website, including contact-form enquiries and uploaded artwork, may be processed or stored through Wix's services.
We may also share necessary information with trusted service providers involved in operating our business, such as:
Payment-processing providers.
Delivery and postal companies.
Website hosting and technical-service providers.
Accounting or professional advisers, where necessary.
We share only the information reasonably required for the relevant service or lawful purpose.
These providers may operate under their own privacy notices or data-processing arrangements.
 
9. International Data Transfers
Some website, payment or technical-service providers may process or store information outside the United Kingdom.
Where UK data protection law requires safeguards for an international transfer, we will rely on an appropriate lawful transfer mechanism.
 
10. Cookies and Website Analytics
Our website may use cookies and similar technologies to support essential website functions, shopping baskets, checkout, security and site performance.
Additional cookies or tracking technologies may be used for analytics or marketing where enabled.
Where legally required, we will request your consent before using non-essential cookies or similar technologies.
You can manage applicable preferences through the website's cookie controls or your browser settings.
 
11. Marketing Communications
We may occasionally share news, product updates or offers where permitted by law.
Where consent is required, we will obtain it before sending marketing communications.
You can opt out of marketing emails at any time by following the unsubscribe instructions provided or contacting gary.vct@mail.com.
We will not use photographs or personalisation artwork submitted for orders in promotional material without appropriate permission.
 
12. Keeping Your Information Secure
We take reasonable steps to protect personal information against unauthorised access, loss, misuse or disclosure.
This includes using established website services, limiting access to customer information and removing uploaded artwork when it is no longer required.
However, no online system can guarantee absolute security.
If you believe information you have submitted to us has been compromised, please contact us promptly.
 
13. Your Data Protection Rights
Depending on the circumstances, UK data protection law gives you rights including:
Accessing personal information we hold about you.
Requesting correction of inaccurate information.
Requesting deletion of personal information.
Requesting restriction of certain processing.
Objecting to certain uses of your information.
Requesting transfer of eligible information.
Withdrawing consent where processing is based on consent.
These rights are subject to legal conditions and exceptions.
To make a request, email gary.vct@mail.com. We may need to verify your identity before responding.
We will respond within the time limits required by applicable data protection law.

14. Children's Information
Our products may be purchased as gifts for children, including personalised items featuring names or photographs.
Our website is intended for customers able to make purchases lawfully and is not designed to collect information directly from children.
Where customers provide information about children for personalisation, we use it only as reasonably necessary to fulfil the requested order and related purposes.
 
15. External Websites and Links
Our website may contain links to third-party websites or services.
We are not responsible for the privacy practices of websites we do not operate.
We recommend reviewing their privacy notices before submitting personal information.
 
16. Complaints and Concerns
If you have questions or concerns about how we handle your information, please contact us first so we can investigate.
You also have the right to raise a complaint with the UK Information Commissioner's Office (ICO).
Website: www.ico.org.uk
 
17. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our services, website functionality, legal requirements or information-handling practices.
The latest version will be available on our website, together with its most recent update date.
 
18. Contact Us
For questions about this Privacy Policy, customer information or requests concerning your personal data, please contact:
Very Crafty Thoughts (VCT)
Gary Flinn trading as Very Crafty Thoughts
Website: www.vct.rocks
Email: gary.vct@mail.com
Business address: 47 Eastville Avenue, Rhyl, LL18 3TL
You may also contact us through our website contact form.
Thank you for trusting Very Crafty Thoughts with your orders, photographs and personalised designs.