Privacy policy

Siesta Crafts Ltd. Trading as Siesta

At Siesta, we take your privacy seriously and are committed to protecting your personal data. This Privacy Notice explains what personal data we collect, how we use it, and under what circumstances we may share it with third parties.

Who We Are

Siesta is a wholesaler and retailer of giftware, clothing, musical instruments, and religious items based in Canterbury, UK. Our registered office is:

Unit 17 Roper Close, Canterbury, Kent, CT2 7EP

Company Number: 4852622

Privacy Officer: Tim Harper

Legal Basis for Processing Data

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we process your personal data based on the following legal bases:

  • Performance of a Contract – To process orders, manage accounts, and fulfil transactions.
  • Legal Obligation – To comply with tax, fraud prevention, and accounting requirements.
  • Legitimate Interest – For business operations, including customer support and fraud prevention.
  • Consent – Where required, such as for marketing communications.

How We Collect Personal Data

We collect personal data when you:

  • Purchase goods via our website, email, or phone.
  • Contact us by email, phone, or in person at our shop or trade fairs.
  • Sign up for our newsletter or request product information.

What Personal Data We Collect

We may collect the following data:

  • Name, address, email address, and phone number.
  • Payment details (processed securely via third-party providers).
  • IP address and browsing data for analytics.
  • Order history and customer support interactions.

We do not collect sensitive data such as race, religion, biometric data, or health information.

How We Use Your Data

We may use your data for the following purposes:

  • Processing and fulfilling orders.
  • Providing customer support.
  • Managing accounts, invoices, and payments.
  • Notifying you of important business updates (e.g., trade fair attendance, price changes).
  • Fraud detection and account security.

If you have opted in, we may send you information about new products or promotions. You can opt out at any time.

Shopify Network Intelligence

Our wholesale store is hosted by Shopify. When you visit or make purchases on our store, Shopify processes your personal data as part of providing our platform. This includes Shopify's use of data from interactions with our store, and with other Shopify merchants, to provide enhanced services such as improved fraud detection, product recommendations, and ad targeting optimisation. This feature is known as Shopify Network Intelligence.

Shopify acts as a data controller in its own right in relation to these enhanced services. You can review Shopify's Consumer Privacy Policy at https://www.shopify.com/legal/privacy/consumers and exercise your data rights with Shopify directly via their privacy portal at https://privacy.shopify.com.

Where Shopify processes your data in connection with these services, that processing may involve transfers outside the UK. Shopify ensures compliance with such transfers via Standard Contractual Clauses and other lawful mechanisms.

How Long We Keep Your Data

We retain personal data only for as long as necessary:

  • Order history and invoicing records: 6 years (UK tax law requirement).
  • Email marketing data: Until you opt out or 2 years after last engagement.
  • Job applications: 6 months unless consent is given for longer.

Who We Share Your Data With

We do not sell or rent personal data. However, we may share data with:

  • Couriers (e.g., Royal Mail, DHL) – For order delivery.
  • Payment Providers (e.g., PayPal, Shopify Payments etc) – For processing transactions.
  • Credit Reference Agencies – If applying for a business credit account.
  • Legal Authorities – If required by law for fraud prevention or regulatory compliance.

Some of these third parties may process data outside the UK/EU. Where applicable, we ensure compliance via Standard Contractual Clauses (SCCs) or other lawful mechanisms.

Cookies & Tracking

We use cookies and analytics tools to improve website functionality, measure performance, and track visitor analytics. Non-essential cookies (including analytics and marketing cookies) only run once you have given consent via our cookie consent banner. You can change or withdraw your consent at any time through the banner.

  • Essential Cookies – Required for purchases and secure logins.
  • Analytics Cookies (Google Analytics, Microsoft Clarity) – Track how users interact with our site. Only used with your consent.
  • Marketing Cookies (Google Ads, Facebook Pixel) – Only used with your consent.

Microsoft Clarity

We use Microsoft Clarity to analyse how visitors interact with our website through heatmaps and session replays.

Clarity may collect:

  • Clicks, scrolls, mouse movements, and navigation patterns
  • Device and technical details (browser, OS, screen size)
  • Page performance metrics
  • A masked view of webpage content for replay purposes

Sensitive information (such as payment details or passwords) is automatically masked.

How Microsoft uses this data: Microsoft acts as an independent data controller, meaning it may:

  • Use de-identified behavioural data to improve its own products
  • Process data on servers worldwide, including outside the UK/EU
  • Combine anonymised data from our site with data from other sites using Clarity

More information: https://privacy.microsoft.com

Clarity operates only if you accept analytics cookies via our consent banner.

Your Rights Under UK GDPR

You have the right to:

  • Access your data – Request a copy of the data we hold.
  • Correct inaccuracies – Update incorrect or incomplete data.
  • Request deletion – Ask us to delete your data (where applicable).
  • Restrict processing – Limit how we use your data.
  • Object to processing – Opt out of direct marketing.
  • Request data portability – Transfer your data to another service provider.

To exercise these rights, contact us via the contact form or call 01227 786066. We may require identity verification for security reasons.

Data Security & Breach Response

We use encryption, secure servers, and access controls to protect your data. If a data breach occurs, we will notify the ICO (Information Commissioner's Office) within 72 hours where required and inform affected users if necessary.

Third-Party Links

Our website may contain links to third-party sites. We are not responsible for their privacy policies and recommend reviewing them separately.

Changes to This Privacy Policy

We may update this Privacy Policy periodically. Updates will be posted on our website. Please check back from time to time.

Last updated: 02/07/2026

Contact Us

For any privacy-related questions, please contact:

📍 Siesta Crafts Ltd.

Unit 17 Roper Close, Canterbury, Kent, CT2 7EP

📧 Contact Us

📞 Phone: 01227 786066

🌍 Website: www.siestacrafts.co.uk

For more information on UK GDPR, visit the ICO website: https://ico.org.uk.

Discount Code