1. Who we are

Concrete Gems Crochet is operated by Gemma Williams (“we”, “us”, “our”).

Contact details:
Gemma Williams
12 Reading Road
Woodley
Reading
RG5 3DB
United Kingdom

Email: gemma@concretegems.co.uk

For the purposes of data protection law, we are the data controller of your personal data.

2. What Data We Collect

We may collect and process the following types of personal data:

a) Information you provide directly

  • Name and email address (e.g. when subscribing to emails or downloading freebies)
  • Information submitted via contact forms or email enquiries

b) Automatically collected data

  • IP address
  • Browser type and device information
  • Pages visited and time spent on the site

This data is collected through cookies and similar technologies.

3. How We Use Your Data

We use your personal data to:

  • Provide access to free resources and downloads
  • Send newsletters, updates, and promotional content
  • Respond to enquiries and provide customer support
  • Analyse and improve website performance and user experience
  • Comply with legal obligations

4. Legal Bases for Processing

We rely on the following lawful bases under UK GDPR:

  • Contract – where necessary to fulfil a purchase (via third-party platforms)
  • Consent – for email marketing and freebie downloads
  • Legitimate interests – We rely on legitimate interests where it is necessary to improve our website, content, and services, provided that these interests are not overridden by your rights and freedoms.
  • Legal obligation – for record-keeping and tax purposes

5. Email Marketing

We use Kit to manage our email list.

You may subscribe via:

  • Free downloads
  • Website forms (including via Grow app)
  • Collaborative promotions such as blog hops

We do not add individuals to our email list without their consent.

You can unsubscribe at any time by clicking the link in any email.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience and analyse website usage.

These include:

  • Google Analytics
  • Pinterest tag
  • Advertising and analytics services provided via Mediavine

We use CookieYes to manage cookie consent.

You can accept or reject non-essential cookies via our cookie banner.

7. Third-Party Services

We share data with trusted third-party services where necessary, including:

  • Etsy and Ravelry (for product sales)
  • Thinkific (for course hosting)
  • Email marketing provider (Kit)
  • Analytics and advertising providers
  • Embedded content providers such as YouTube: Pages on this website may include embedded content (e.g. videos). Embedded content from other websites behaves in the same way as if you visited those websites directly.

These providers may process your data in accordance with their own privacy policies.

We may also disclose personal data where required to do so by law, or in response to valid requests by public authorities.

8. International Data Transfers

Some of our third-party providers may process data outside the United Kingdom.

Where this occurs, we ensure appropriate safeguards are in place, such as:

  • Standard contractual clauses
  • Adequacy regulations (where applicable)

9. Data Retention

We retain personal data only as long as necessary:

  • Email subscribers: until you unsubscribe
  • Customer purchase data: retained by platforms such as Etsy for up to 6 years for legal and tax purposes
  • Analytics data: retained in line with platform settings

10. Children’s Data

Our services are intended for adults.

  • Our crochet course is purchased by parents or guardians
  • We do not knowingly collect personal data from children under 13

If we become aware that such data has been collected, it will be deleted promptly.

11. Your Rights

Under UK GDPR, you have the right to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request deletion of your data
  • Restrict or object to processing
  • Request transfer of your data
  • Withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal

To exercise your rights, contact us at gemma@concretegems.co.uk. We may need to request specific information from you to help us confirm your identity before responding to any data protection request.

12. Complaints

If you have concerns about how your data is handled, please contact us in the first instance.

We will acknowledge your complaint and aim to respond within 30 days.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO): https://ico.org.uk

13. Changes to This Policy

We may update this privacy policy from time to time.

Any changes will be posted on this page with an updated revision date.

14. Contact

If you have any questions about this policy or your data, please contact:

gemma@concretegems.co.uk

GPSR

For details on GPSR compliancy, visit the Legal Information page.