Privacy Policy

Last updated: 21-06-2026

At Crafted Haul ("we", "us", or "our"), we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit craftedhaul.com (the "Site") or make a purchase.

By accessing the Site or providing us with your personal information, you agree to the terms of this Privacy Policy.

1. Information We Collect

We collect personal information that you voluntarily provide to us when you:

Create an account on our Site
Place an order or make a purchase
Subscribe to our newsletter or marketing communications
Contact us via email, contact form, or customer support
Participate in a survey, promotion, or product review

Personal information we collect includes:

Identity data: first name, last name, username or display name
Contact data: email address, postal address, phone number
Payment data: payment method details (handled by our payment processor — we do not store full credit card numbers)
Order data: products purchased, order history, delivery preferences, gift recipient details
Profile data: product preferences, wishlists, product reviews, communications with us

Information collected automatically:

When you visit the Site, we automatically collect certain technical information, including:

IP address, browser type and version, device type
Operating system, screen resolution, language settings
Pages visited, time spent on pages, referring URL, click patterns
Approximate geographic location (country/city level, derived from IP)

2. How We Use Your Information

We use the information we collect for the following purposes:

To process and fulfill your orders — including payment processing, shipping, delivery confirmation, and customer support
To manage your account — registration, authentication, order history, preferences
To communicate with you — order confirmations, shipping updates, customer service responses, returns and refunds
To send marketing communications — newsletters, product announcements, special offers (only if you opted in)
To improve our Site and services — analytics, product development, A/B testing, bug fixing
To prevent fraud and ensure security — verifying identity, detecting suspicious activity, protecting our customers
To comply with legal obligations — tax records, accounting, customs declarations, responding to lawful requests from authorities

We will never sell your personal information to third parties for marketing purposes.

3. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, our legal basis for collecting and using your personal information depends on the context:

Performance of a contract: to fulfill your order, process payment, deliver products
Your consent: for marketing emails, non-essential cookies, optional features
Legitimate interests: to operate, secure, and improve our business (where these do not override your rights)
Legal obligation: to comply with tax, accounting, and regulatory requirements

4. Cookies and Similar Tracking Technologies

We use cookies, web beacons, pixels, and similar technologies to operate the Site, analyze traffic, and personalize your experience. The types of cookies we use include:

TypePurposeDuration

Strictly necessary	Cart, checkout, login, security	Session
Performance	Analytics (e.g. Google Analytics, page load times)	Up to 2 years
Functional	Language, currency, preferences	Up to 1 year
Marketing	Targeted ads, retargeting, attribution	Up to 13 months

You can control cookies through your browser settings. Note that disabling certain cookies may affect Site functionality. For marketing emails, every email we send includes an unsubscribe link.

5. Sharing Your Information

We do not sell, trade, or rent your personal information to third parties. We share your information only with the following categories of trusted parties, and only the minimum necessary to perform their function:

5.1 Service providers

Payment processors : Stripe, PayPal, — to securely process your payment
Shipping carriers (e.g. DHL, FedEx, local postal services) — to deliver your order
E-commerce platform (YouCan) — to host the Site and process transactions
Email service providers (e.g. Mailchimp, Klaviyo) — to send transactional and marketing emails
Analytics providers (e.g. Google Analytics) — to understand Site usage
Customer support tools — to respond to your inquiries

5.2 Legal and safety

We may disclose your information when required to do so by law, or when we believe in good faith that disclosure is necessary to:

Comply with a legal obligation, court order, or government request
Protect and defend our rights or property
Prevent or investigate possible wrongdoing in connection with the Site
Protect the personal safety of our users or the public

5.3 Business transfers

If Crafted Haul is involved in a merger, acquisition, or sale of all or part of its assets, your personal information may be transferred. We will notify you before your information is transferred and becomes subject to a different privacy policy.

6. International Data Transfers

Your information may be transferred to, stored, and processed in countries other than your country of residence, including United States. These countries may have data protection laws that differ from your jurisdiction.

When we transfer your personal information internationally, we take appropriate safeguards to protect your data in accordance with this Privacy Policy and applicable law, including:

Using Standard Contractual Clauses approved by the European Commission for transfers from the EEA
Working only with service providers that maintain adequate security standards
Limiting access to your data to what is strictly necessary

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which we collected it, including to satisfy any legal, accounting, or reporting requirements.

Typical retention periods:

Data typeRetention period

Order records, invoices	7-10 years (tax/accounting requirements)
Account data (inactive)	Until you delete your account + 30 days backup
Marketing email list	Until you unsubscribe
Customer support emails	Up to 3 years
Analytics data	Up to 26 months (anonymized)

8. Your Rights and Choices

You have the following rights regarding your personal information:

8.1 General rights (everyone)

Access — request a copy of the personal data we hold about you
Correction — update or correct inaccurate data
Deletion — request that we delete your personal data (subject to legal retention obligations)
Objection — object to certain processing (e.g. direct marketing)
Restriction — request that we limit how we use your data
Data portability — receive your data in a structured, machine-readable format
Withdraw consent — where processing is based on consent, you can withdraw it at any time

8.2 Regional rights

EEA / UK (GDPR): You also have the right to lodge a complaint with your local data protection authority.

California (CCPA/CPRA): You have the right to know what personal information is collected, to delete it, to opt out of its sale or sharing, and to non-discrimination. We do not sell personal information.

Other regions: If you are in a jurisdiction with similar rights, the same protections apply.

To exercise any of these rights, email contact@craftedhaul.com. We will respond within 30 days.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

SSL/TLS encryption for all data in transit
Encrypted storage of sensitive data at rest
Access controls limiting employee access to personal data on a need-to-know basis
Regular security audits and vulnerability scanning
PCI-DSS compliant payment processing through certified third-party providers
Two-factor authentication for administrative accounts
Regular backups stored encrypted in geographically separate locations

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal data, we cannot guarantee absolute security.

10. Children's Privacy

Our Site is not intended for children under the age of 16 (or such higher age as required by your local law). We do not knowingly collect personal information from children. If you are a parent or guardian and you believe your child has provided us with personal information, please contact us at contact@craftedhaul.com. If we learn that we have collected personal information from a child without parental consent, we will delete that information.

11. Third-Party Links and Services

The Site may contain links to third-party websites, plug-ins, and applications. Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party sites and are not responsible for their privacy practices. We encourage you to read the privacy policy of every site you visit.

Third-party services we currently use include:

YouCan.shop — e-commerce platform (privacy policy)
Stripe / PayPal — payment processing (privacy policy)
DHL / FedEx / local courier — shipping
Mailchimp / Klaviyo — email marketing
Google Analytics — site analytics (privacy policy)

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we make changes, we will:

Update the "Last updated" date at the top of this page
For material changes, notify you by email (if you have an account) or via a prominent notice on the Site

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

13. Contact Us

If you have any questions about this Privacy Policy, our data practices, or your rights, please contact us:

Emailcontact@craftedhaul.com

You can also reach us by postal mail at:

Crafted Haul, 30 N Gould St Ste R, Sheridan, Wyoming, 82801.