Privacy Policy

What Crafily collects when you use crafily.com, why it is held, how long it is kept, and what you can ask to have done with it.

Last updated 23 October 2026

Who is responsible

Crafily is run by Joseph-Israel and Michelle Kadjo from a studio outside Hagerstown, Maryland, and decides how the information described here is used. Write to [email protected] about anything on this page.

What is collected

Only what a small studio needs to answer you and finish what you asked for.

What you type. Your name, your email address, the measurement you give us, and anything you write in a form on this site.
The pictures you send. Reference photographs sent with a commission, including pictures of people where you choose to send them.
What an order leaves behind. Payments are handled by a payment provider. We receive a record of the amount, the date, and the name, email and delivery address you gave. We never see or store your full card number.
What the server writes down. Your IP address, the browser you used, which pages you asked for and when, in ordinary web-server logs.
What cookies hold. Described in the Cookie Policy.

Why it is held, and on what footing

To reply to you and to make the piece you asked for, because we are performing an agreement with you, or taking the steps you asked for before one.
To keep records of money received, because the law requires those records to be kept.
To keep the site working, secure and free of abuse, and to show finished work in a portfolio, because we have a legitimate interest in doing so, weighed against your privacy.
Anything else is done only if you agree to it, and you may withdraw that agreement at any time.

The pictures you send

Reference photographs are used to make the piece you asked for and to talk to you about it. They are not sold, not passed to anyone else, and not used to train or evaluate any machine-learning system.

They are kept while the work is live and for 12 months afterwards in case you come back about it. Ask sooner and they are deleted sooner. A photograph is shown publicly only with your permission. See Copyright and Image Use.

The mailing list

You are added to the list only when you type your address and tick the box. Buying something does not put you on it.

At the moment you tick it we store your address, the exact wording you agreed to, the date, and the IP address the request came from. That record exists so we can show, later, what you were told and when. A confirmation email goes out, and the address stays dormant until you follow the link in it. An unconfirmed address is never written to again.

Every email carries a link that takes you off the list. One click, nothing to fill in. Once you use it we keep the address marked as stopped rather than deleting it, so that nothing can put it back by accident. Ask and the record goes altogether.

A basket left behind

If you put something in your basket and leave the site, the contents are held so you can come back to them. Against that we store the items, what they came to, and your email address only if you had already given it, at checkout or by signing in. A basket with no address attached is never written to.

If the studio has reminders switched on you may receive up to three notes about it, spread over a few days. They stop the moment you order. The link in them carries nothing about you beyond a signed reference to the basket itself, and a basket nobody returns to is deleted within thirty days.

Your parcel

When an order is packed we record the carrier and the tracking number against it. Both are sent to you. If you look an order up without signing in, the order number and the email on the order must match before anything is shown, and repeated attempts from one address are refused.

Who else sees it

A few suppliers handle information on our behalf, each only for the job they do, and none of them may use it for their own purposes.

The company that hosts this site and its backups.
The payment provider that takes payment at checkout.
The carrier that carries your parcel, which needs your name and delivery address.
The service that carries our email, including list and reminder mail.
Anyone we are legally obliged to tell, such as a tax authority or a court order.

Your information is never sold, rented or traded, and it is never shared for cross-context behavioural advertising.

How long it is kept

Enquiries that did not become work: 12 months.
Records of orders and money received: 7 years, because tax records must be kept.
Workshop bookings: 24 months, so we know who has sat at the bench before.
Mailing list: until you take yourself off it, then the record that you did so is kept so the address is not added again.
Baskets left behind: thirty days.
Server logs: a short period, then overwritten.

Where it is held

The site and its backups sit on servers in the United States. If you write to us from elsewhere, what you send is transferred there, either because it is necessary to do what you asked or because you agreed to it.

What you can ask for

Wherever you live, you may ask for any of the following, and it costs nothing to ask.

A copy of what is held about you.
A correction, if something is wrong.
Deletion, where there is no longer a reason to keep it.
A pause on using it while a disagreement is sorted out.
An objection to a use that rests on legitimate interests.
A portable copy, in a form another service can read.

Write to [email protected] and you will have an answer within thirty days. You will not be treated any differently for asking.

If you are in the United Kingdom or the European Economic Area you may also complain to your national data protection authority. If you are in California, you have the rights to know, delete and correct set out above. We do not sell or share personal information, and we honour an opt-out preference signal sent by your browser.

Children

Children are welcome at the bench on a Saturday, with an adult. This website is not meant for children under 16 to use on their own, and we do not knowingly collect anything from them here. A workshop seat is booked by the adult bringing them. If you believe a child has sent us something, write to [email protected] and it will be deleted.

Keeping it safe

The site is served over an encrypted connection, access to what is stored is limited to those who need it, and passwords are never stored in a readable form. No site can promise perfect security, and we do not.

Changes to this policy

If this policy changes, the new version is posted here with a new date. Last updated 23 October 2026.

Questions about anything on this page go to [email protected], or come to the bench on a Wednesday or Saturday afternoon between 1:00p and 4:00p.