Privacy & Cookie Policy
Last updated: 27 June 2025
1. Purpose
This Privacy & Cookie Policy ("Policy") explains how Craftled, MB (registration code 305722486, VAT LT100015273316, address Eduardo Andre 14‑5, LT‑02232, Vilnius, Lithuania) collects, uses, shares, and protects personal data when you interact with any Craftled owned and operated website, application, newsletter, job board, or other Service, and describes your rights under the EU General Data Protection Regulation (GDPR), UK GDPR, the California Consumer Privacy Rights Act (CPRA), and other applicable laws.
2. Data We Collect
| Category | Examples | Source |
|---|---|---|
| Account Data | Name, email address, password hash | Provided by you |
| Transaction Data | Purchase amount, last 4 digits of card, VAT number, billing address | Payment processors |
| Usage Data | IP address, browser type, referring pages, pages visited, time spent | Analytics cookies |
| Marketing Data | Newsletter opens, click‑throughs, preference tags | Email marketing platform |
| Job‑Board Data | Résumés, employer contact details, salary information | You/Employers |
| Support Data | Chat transcripts, bug reports, feature requests | You |
3. How & Why We Use Your Data
| Purpose | Legal Basis (GDPR Art. 6) |
|---|---|
| Provide, maintain, and secure the Services | Contract (Art. 6 (1)(b)) |
| Process payments and invoices | Legal obligation (Art. 6 (1)(c)) / Legitimate interest (Art. 6 (1)(f)) |
| Send newsletters and product updates | Consent (Art. 6 (1)(a)) / Legitimate interest (Art. 6 (1)(f)) |
| Display advertising and affiliate offers | Consent (Art. 6 (1)(a)) |
| Improve user experience via analytics | Consent (Art. 6 (1)(a)) |
| Enforce Terms, detect and prevent fraud | Legitimate interest (Art. 6 (1)(f)) |
4. Cookies & Similar Technologies
We use:
- Strictly‑necessary cookies — required for core site functionality and security.
- Analytics cookies (optional) — help us understand usage patterns.
- Advertising cookies (optional) — enable personalised ads and affiliate tracking.
5. Sharing & International Transfers
We share personal data only with trusted processors under Data Processing Agreements. Our data processors include:
- Hetzner — hosting and infrastructure services.
- SpinupWP — server management and deployment.
- Vercel — hosting and deployment platform.
- Resend — email delivery services.
- Encharge.io — email marketing and automation.
- Stripe — payment processing.
- Self-hosted Umami — website analytics.
- Google Workspace — business productivity tools.
6. Retention
We retain personal data only as long as necessary for the purposes described in this Policy or to comply with legal obligations (e.g., 7 years for accounting records under EU tax law). Thereafter we securely delete or anonymize the data.
7. Your Rights
Subject to applicable law, you have the right to:
- access, correct, or delete your personal data;
- restrict or object to processing;
- receive a copy of your data in a portable format;
- withdraw consent at any time (without affecting the lawfulness of processing based on consent before its withdrawal);
- opt‑out of the "sale"/"sharing" of personal information (for California residents).
To exercise these rights, email support@craftled.com. We will respond as soon as possible (or as otherwise required by law).
8. Children's Privacy
The Services are not directed to children under 13, and we do not knowingly collect personal information from them. If we become aware that a child under 13 has provided personal data, we will delete it as required by the U.S. Children's Online Privacy Protection Act (COPPA).
9. Data Security
We use industry‑standard safeguards including TLS encryption in transit, encryption at rest for key databases, least‑privilege access controls, and continuous vulnerability scanning. No internet transmission or storage system is completely secure; you use the Services at your own risk.
10. Changes to This Policy
We may update this Policy occasionally. We will post the revised version at craftled.com/privacy and update the "Last updated" date. Material changes will be notified via email or on‑site banner. Continued use after the effective date constitutes acceptance.
11. Contact
For questions about this Policy or our data‑protection practices, email support@craftled.com.