Privacy Policy

This website, www.crystallise.me (the “Site”), is owned and operated by Craft Buddy Limited ("Craft Buddy", "we", "us", or "our"), a company registered in England and Wales under company number 07236303, with its registered office at Unit 7, Anglo Business Park, Asheridge Road, Chesham, HP5 2QA. Craft Buddy is committed to protecting and respecting your privacy. This Privacy Policy explains how and why we collect personal data, how we use it, the lawful bases for processing, how long we keep it, and the rights you have under applicable data protection laws. We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR), and the Data Protection Act 2018.

EU Representative

In accordance with Article 27 of the EU General Data Protection Regulation (GDPR), Craft Buddy Limited has appointed an EU representative. Our EU representative is:

Craft Buddy GmbH

Stadtweide 17
46446 Emmerich am Rhein
Nordrhein-Westfalen
Germany
EU data subjects may contact the EU representative in relation to any matters concerning the processing of personal data. If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at service@crystallise.me. We may update this Privacy Policy from time to time. Please review it periodically to ensure you are aware of any changes.

1. Your Rights Under GDPR

Under GDPR, you have the following rights:

• The right to be informed about how your personal data is used
• The right of access to your personal data
• The right to rectification of inaccurate or incomplete data
• The right to erasure (the “right to be forgotten”)
• The right to restrict processing
• The right to data portability
• The right to object to processing
• Rights relating to automated decision-making and profiling

You may exercise any of these rights by contacting us using the details above.

2. Lawful Bases for Processing

We will only process personal data where we have a lawful basis to do so. These include:

• You have given your consent for one or more specific purposes
• Processing is necessary for the performance of a contract or to take steps prior to entering into a contract
• Processing is necessary to comply with a legal obligation
• Processing is necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms

Where consent is relied upon, you may withdraw it at any time.

3. Data Minimisation and Accuracy

We only collect and process personal data that is adequate, relevant, and limited to what is necessary for the purposes for which it is collected. We take reasonable steps to ensure that personal data is accurate and kept up to date. You may request correction or deletion of inaccurate data at any time.

4. Data Retention

We do not retain personal data for longer than is necessary for the purposes for which it was collected. When personal data is no longer required, it is securely deleted or anonymised without undue delay.

5. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure.

6. Data We Collect and Use

We may collect and process the following personal data:

• First name and surname
• Email address
• Country (as selected by the user)
• IP address
• Cookie and device-related identifiers

We use country information to tailor and segment marketing communications so that content is relevant to the user’s location. We may share personal data with trusted third-party service providers (such as IT, hosting, analytics, professional advisers, or marketing service providers) solely for the purpose of providing our services. All such parties are required to keep your data secure and to process it only in accordance with our instructions. We do not transfer personal data outside the European Economic Area (EEA). You may withdraw your consent to marketing communications at any time.

Uploaded Images for Personalisation

Where users upload images to our website for the purpose of creating personalised products or generating personalised instructions, those images are processed solely for that purpose. Uploaded images are not stored by Craft Buddy Limited and are automatically deleted from our servers once the instructions have been generated and the browser session is closed. We do not use uploaded images for any other purpose and they are not shared with third parties. This processing is necessary for the performance of the service requested by the user.

7. Complaints

If you have concerns about how we handle your personal data, please contact us at service@crystallise.me. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO). Further details are available at https://ico.org.uk/concerns/. You are not obliged to provide personal data to us; however, failure to do so may prevent us from providing certain services.  

8. Cookies Policy

Our Site uses cookies and similar technologies to improve functionality and user experience. Cookies may be strictly necessary, analytical, functional, or marketing-related. You will be given the opportunity to manage your cookie preferences via our cookie banner. For full details of the cookies we use and how to control them, please refer to our Cookie Policy displayed on the Site.

9. Customer Reviews (Loox)

We use the Loox customer review platform to collect and display customer reviews.

Use of Images and Videos

By submitting a review, you agree that any images or videos attached may be used for:

• Website display
• Marketing and promotional materials
• Social media content

Attribution and Privacy

Reviews may be displayed alongside your first name and last initial or username. We do not display email addresses or other sensitive personal data.

Rights and Ownership

You retain ownership of your content. By submitting a review, you grant us a non-exclusive, royalty-free, worldwide licence to use the content for the purposes described above.

Opt-Out and Removal

You may request removal of review content or opt out of marketing use by contacting service@crystallise.me.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will take effect upon publication on this page. Last updated: 04 February 2026