Privacy Policy
This Privacy Policy describes how CRAWFORD DESIGN SRL collects, uses, stores, shares and protects the personal data of users who visit or use the website crawforddesign.co and the related online services, including purchases made through the website, customer service communications, marketing activities, reviews, cookies and tracking technologies.
For the purposes of this Privacy Policy, the website crawforddesign.co and the related online services are collectively referred to as the “Platform”.
We process personal data in accordance with the applicable data protection laws, including, where applicable:
Regulation (EU) 2016/679, known as the General Data Protection Regulation or “GDPR”;
the Italian Privacy Code, as amended and supplemented;
the United Kingdom General Data Protection Regulation, known as the “UK GDPR”;
the United Kingdom Data Protection Act 2018;
the applicable legislation on electronic communications, direct marketing, cookies and tracking technologies.
By using our Platform, making a purchase, creating an account, subscribing to our marketing communications or otherwise providing us with personal data, you confirm that you have read this Privacy Policy.
If anything is unclear, you can contact us using the contact details provided in the “Contact Us” section.
Who is the data controller and how you can contact us
The data controller of your personal data, meaning the entity that determines the purposes and means of the processing, is:
CRAWFORD DESIGN SRL
Via Tiziano Vecellio 18
43124 Parma (PR)
Italy
VAT No. / Tax Code: 03152290346
Website: crawforddesign.co
Email for general enquiries: info@crawforddesignofficial.com
Email for privacy enquiries: info@crawforddesignofficial.com
To exercise your data protection rights, you can contact us at the email address indicated above, specifying “Privacy request” in the subject line.
Data Protection Officer
As of the date of this Privacy Policy, Crawford Design has not appointed a Data Protection Officer, unless otherwise communicated.
DPO / Data Protection Officer: Not appointed
What personal data we collect
We collect different categories of personal data depending on how you interact with the Platform.
2.1 Data you provide directly to us
We collect the data you provide when you browse the website, place an order, create a customer account, contact us, subscribe to the newsletter, leave a review, request assistance or use product personalization features.
This data may include:
Identification and contact data
first and last name;
email address;
telephone number;
billing address;
shipping address;
country, city, postal code and other data required for delivery.
Customer account data
login credentials;
order history;
preferences associated with the account;
saved addresses;
account settings.
Order data
products purchased;
size, color, model or product variant;
quantity;
order amount;
date and time of purchase;
order status;
information on shipping, delivery, returns, exchanges and refunds.
Payment data
chosen payment method;
payment confirmation or status;
data required for fraud prevention and transaction management.
Full payment card details are generally processed directly by payment service providers and are not fully stored by Crawford Design.
Product personalization data
initials, acronyms, letters or other short text elements that you choose to add to the personalized product;
any instructions strictly necessary to create the personalized product.
We ask you not to enter sensitive information, data relating to minors, health data, financial data, religious or political information, or any other data that is not necessary for product personalization in the personalization fields.
Customer service data
messages sent to customer service;
requests for information;
complaints;
requests for returns, exchanges or refunds;
communications relating to warranty, delivery, payment or product issues;
any attachments or images that you choose to send us in order to receive assistance.
Reviews and user-generated content data
product reviews;
star ratings;
name, initials or identifier displayed together with the review;
any photos, videos or content that you voluntarily choose to upload;
information relating to the product purchased or reviewed.
Marketing preferences
consent to receive marketing communications;
subscription or unsubscription from the newsletter;
email communication preferences;
interactions with our emails, such as openings, clicks and content preferences.
2.2 Data collected automatically
When you visit or use the Platform, we automatically collect certain information through cookies, pixels, tags, server logs and similar technologies.
This data may include:
Technical and device data
IP address;
browser type and version;
operating system;
device type;
device identifiers;
browser language;
time zone;
referring URL;
technical information relating to the connection.
Usage and browsing data
pages visited;
products viewed;
products added to cart;
products removed from cart;
checkouts initiated;
purchases completed;
date and time of visits;
session duration;
clicks, scrolls and interactions with the website;
data relating to abandoned carts;
browsing preferences.
Approximate location data
country, region or city estimated on the basis of the IP address or other technical information.
We do not collect precise geolocation data unless you voluntarily choose to provide it or unless it is necessary for specific features, where available.
2.3 Data received from third parties
We may receive personal data about you from third parties that help us operate the Platform, process payments, deliver orders, prevent fraud, carry out marketing activities and improve our services.
These parties may include:
Shopify, as the e-commerce platform;
payment service providers, such as Shopify Payments, Stripe, PayPal, Klarna, Apple Pay, Google Pay or other payment methods available on the website;
logistics providers, warehouses, fulfillment partners and parties involved in shipping products;
couriers and postal operators, including Poste Italiane and Royal Mail;
email marketing platforms, such as Klaviyo;
review platforms, such as Loox;
advertising and measurement platforms, such as Meta/Facebook;
Shopify apps for tracking, reviews, upsells, bundles, checkout optimization or similar features;
IT, hosting, security, analytics and cloud providers;
professional consultants, accountants, lawyers or other advisors.
Personal data relating to personalized products
Some Crawford Design products may be personalized with initials, acronyms or other short text elements provided by the customer.
We use this data exclusively to:
create the personalized product;
verify the accuracy of the requested personalization;
fulfill the order;
manage shipping, assistance, returns, replacements, complaints or warranty;
comply with legal, tax and accounting obligations, where applicable.
We do not use personalization data for targeted advertising, advertising profiling or the creation of custom audiences.
We do not share initials or personalization data with advertising partners for advertising purposes.
We invite you to enter only the information necessary to create the product in the personalization fields.
Children’s privacy
The Platform and Crawford Design products are intended for an adult audience and are not directed at children.
We do not knowingly collect personal data directly from children and do not knowingly allow children to create accounts or place orders.
If you believe that a child has provided us with personal data without the appropriate consent of a parent or guardian, we invite you to contact us at the address indicated in the “Contact Us” section. We will do our best to verify the situation and delete such data, where necessary.
Purposes of processing and legal bases
We process your personal data only when there is an appropriate legal basis and for specific, explicit and legitimate purposes.
The main legal bases are:
performance of a contract, when the processing is necessary to manage an order, provide a product, create an account or respond to a request connected to a purchase;
compliance with legal obligations, when we must comply with tax, accounting, consumer protection, customs, regulatory obligations or requests from authorities;
legitimate interest, when we process data to manage and improve our business, prevent fraud, ensure security, protect our rights or carry out reasonable commercial activities, provided that such interests are not overridden by your rights and freedoms;
consent, when required, for example for certain marketing activities, non-essential cookies, advertising tracking or newsletter subscription.
5.1 Website and customer account management
We use your data to:
allow you to browse the Platform;
create and manage your customer account;
save addresses and preferences;
allow you to view your order history;
ensure the proper functioning of the website and checkout.
Legal basis: performance of a contract, pre-contractual measures, legitimate interest.
5.2 Order, payment and shipping management
We use your data to:
receive and confirm orders;
process payments;
prevent fraudulent or unauthorized transactions;
prepare and personalize products;
transmit the necessary data to suppliers, warehouses, fulfillment partners and couriers;
ship products to the destination country;
provide shipping and delivery updates;
manage any delays, logistics issues or communications connected to the order.
Legal basis: performance of a contract, legal obligation, legitimate interest.
5.3 Management of personalized products
We use initials, acronyms or other text elements provided by you to create personalized products.
Legal basis: performance of a contract, legitimate interest for assistance, quality checks, returns, complaints and warranty.
5.4 Customer service, returns, exchanges, refunds and warranty
We use your data to:
respond to requests sent to customer service;
manage returns, exchanges, refunds and complaints;
verify issues relating to the product, shipping or payment;
provide after-sales assistance;
keep a record of communications necessary for the proper management of the relationship with the customer.
Legal basis: performance of a contract, legal obligation, legitimate interest.
5.5 Transactional emails and service communications
We may send you non-promotional communications relating to:
order confirmation;
payment confirmation;
shipping updates;
delivery;
order changes;
customer service;
returns, exchanges or refunds;
important updates relating to the service or security.
These communications are necessary to manage the contractual relationship and do not require marketing consent.
Legal basis: performance of a contract, legal obligation, legitimate interest.
5.6 Email marketing, newsletters, abandoned carts and post-purchase communications
If you subscribe to the newsletter, provide your consent or if applicable law allows it in relation to existing customers, we may send you marketing communications by email, including:
offers and promotions;
product news;
communications relating to Crawford Design;
abandoned cart emails;
post-purchase emails;
product recommendations;
review requests;
seasonal or promotional campaigns.
We use Klaviyo or similar platforms to manage email marketing, automations, segmentation, abandoned carts and post-purchase communications.
You can unsubscribe at any time by clicking the unsubscribe link in the emails or by contacting us at the address indicated in the “Contact Us” section.
Legal basis: consent, legitimate interest within the limits permitted by applicable law, performance of a contract for communications strictly connected to the order.
5.7 Product reviews and user content
We may invite you to leave a review after your purchase. If you decide to do so, we may process and publish:
name, initials or identifier indicated by you;
review text;
rating;
any images or videos voluntarily uploaded;
product reviewed;
date of the review.
We use Loox or similar platforms to collect, manage and display reviews.
Reviews may be publicly visible on the Platform or in marketing communications, unless you request their removal where applicable.
Legal basis: consent, legitimate interest, performance of a contract where the review is connected to purchase verification.
5.8 Online advertising and Meta/Facebook Ads
We use Meta/Facebook Ads and related technologies, such as Meta Pixel or similar tools, to:
measure the effectiveness of advertising campaigns;
understand which ads generate visits, carts or purchases;
show more relevant ads;
create custom or similar audiences, where permitted;
carry out retargeting towards users who have visited the Platform or interacted with our content.
In relation to these activities, we may share data with Meta such as:
IP address;
browser or device information;
browsing events, such as product views, add-to-cart events or purchases;
cookie or pixel identifiers;
email address or telephone number in pseudonymized or hashed form, where applicable;
data relating to interactions with the website.
Where required by law, we use these technologies only after obtaining your consent through a cookie banner or equivalent tools.
You can manage your preferences through the cookie banner, browser settings, Meta platform settings and the available opt-out tools.
Legal basis: consent for non-essential cookies and tracking where required; legitimate interest for aggregate measurement, security and improvement of commercial activities, where permitted.
5.9 Analytics, website improvement and commercial optimization
We use aggregated, statistical or pseudonymized data to:
understand how the website is used;
improve browsing, checkout and product pages;
analyze commercial performance;
test offers, bundles, upsells or layouts;
improve products and services;
prevent technical issues;
understand general user behavior.
Legal basis: legitimate interest, consent where required for cookies or non-essential tools.
5.10 Security, fraud prevention and protection of our rights
We use personal data to:
prevent fraud, chargebacks, abuse and unauthorized transactions;
protect the Platform from unauthorized access;
verify system security;
detect suspicious activities;
manage disputes;
exercise or defend rights in judicial or extrajudicial proceedings.
Legal basis: legitimate interest, legal obligation.
5.11 Legal, tax and accounting obligations
We process and store certain data to comply with legal obligations, including:
tax and accounting obligations;
obligations relating to invoicing, accounting documentation and administrative records;
customs or logistics obligations where applicable;
consumer protection obligations;
requests from authorities, courts or entitled parties.
Legal basis: legal obligation, legitimate interest.
How we share your personal data
We share your personal data only when necessary for the purposes described in this Privacy Policy and, where appropriate, on the basis of contractual agreements requiring recipients to comply with confidentiality, security and data protection obligations.
We may share personal data with the following categories of recipients.
6.1 E-commerce platform and technical providers
We use Shopify to manage the e-commerce website, product catalog, checkout, orders and certain related features.
We may also use Shopify apps or technical providers for:
order tracking;
upsells and bundles;
reviews;
email marketing;
analytics and reporting;
security;
checkout optimization;
returns and exchanges management;
customer service.
6.2 Payment providers
We share data necessary to process payments with payment service providers, including, by way of example:
Shopify Payments;
Stripe;
PayPal;
Klarna;
Apple Pay;
Google Pay;
other payment providers available on the website.
These parties may act as independent data controllers for certain activities, such as fraud prevention, payment verification, regulatory compliance and transaction management.
6.3 Suppliers, fulfillment, warehouses and shipping
Because products may be shipped by suppliers or logistics partners also located outside the European Union and the United Kingdom, we share the data necessary for the preparation, personalization, fulfillment and shipping of orders with suppliers, logistics partners, fulfillment centers, warehouses and operators involved in the delivery chain.
The data shared may include:
first and last name;
shipping address;
telephone number;
email address, where necessary for shipping updates;
product purchased;
any personalization data necessary to create the product;
information necessary for customs, logistics or delivery.
For Italy and the United Kingdom, we may share data with couriers and postal operators, including Poste Italiane, Royal Mail and other delivery partners that may be used.
6.4 Email marketing and communications
We use Klaviyo or similar platforms to manage:
newsletters;
promotional emails;
abandoned cart emails;
post-purchase communications;
customer segmentation;
email automations;
campaign performance measurement.
6.5 Reviews
We use Loox or similar platforms to collect, verify, manage and publish product reviews.
6.6 Advertising and measurement
We share certain data with Meta/Facebook for advertising, measurement, retargeting, conversion analysis and campaign optimization, according to your privacy and cookie preferences.
6.7 Advisors and authorities
We may share personal data with:
accountants;
tax advisors;
lawyers;
auditors;
privacy or IT consultants;
banks;
insurance companies;
public authorities;
courts;
law enforcement agencies;
other parties when required by law or necessary to protect our rights.
6.8 Corporate transactions
In the event of a merger, acquisition, sale of a business unit, reorganization, sale of assets or similar transactions, personal data may be transferred to potential buyers, advisors or parties involved in the transaction, within the limits permitted by law.
International data transfers
CRAWFORD DESIGN SRL is based in Italy. However, some suppliers, technological, logistics, advertising, payment or fulfillment partners may be located outside the European Economic Area, the United Kingdom or the country in which you are located.
In particular, the data necessary to fulfill the order may be transferred or made accessible to suppliers, logistics partners or parties involved in the production, personalization, preparation or shipping of the purchased products, including where such parties are located in countries outside the EU or outside the UK.
In addition, some technology providers, cloud platforms, marketing tools, payment systems or advertising partners may process data in countries outside the EU or outside the UK, including, by way of example, the United States, China or other countries in which such providers operate.
When we transfer personal data to countries that do not provide a level of protection considered adequate under applicable law, we adopt appropriate safeguards, such as:
Standard Contractual Clauses approved by the European Commission;
UK International Data Transfer Agreement or UK Addendum, where applicable;
appropriate contractual, technical and organizational measures;
international transfer assessments, where required;
limitation of the data transferred to what is necessary for the specific purpose.
You can contact us at the address indicated in the “Contact Us” section to receive more information about the safeguards adopted for international transfers.
How long we retain your personal data
We retain personal data only for as long as necessary for the purposes for which it was collected, unless a longer period is required or permitted by law.
The criteria used to determine retention periods include:
duration of the relationship with the customer;
need to manage orders, assistance, returns, exchanges, refunds and warranty;
tax, accounting and administrative obligations;
limitation periods for any rights or claims;
applicable regulatory obligations;
consent or withdrawal of consent;
need to prevent fraud or abuse.
In general:
Data relating to orders, payments, invoicing and accounting documentation
This data is retained for the period required by the applicable tax and accounting legislation, generally up to 10 years or for any different period provided by law.
Customer account data
This data is retained for the entire duration of the account and subsequently for the time necessary to manage legal obligations, disputes, security, fraud prevention or user requests.
Shipping and delivery data
This data is retained for the time necessary to complete delivery, manage any logistics issues, returns, complaints, warranty or legal obligations.
Personalization data
Initials, acronyms or other information used to personalize the product are retained for the time necessary for production, order fulfillment, delivery, customer service, returns, replacements and warranty. Thereafter, such data is deleted, anonymized or retained only if necessary for legal obligations, protection of rights or management of disputes.
Customer service data
This data is retained for the time necessary to manage the request and for a reasonable subsequent period useful to document assistance, complaints, returns, refunds or potential disputes.
Email marketing data
This data is retained until consent is withdrawn, unsubscribe, objection to processing or termination of the marketing purpose, except for the minimum retention necessary to document opt-out preferences.
Review data
This data is retained for as long as the review remains published or until you request its removal, where applicable, except where retention is necessary for legal obligations or protection of rights.
Cookies and tracking data
This data is retained according to what is indicated in the Cookie section and in the settings of the cookie banner or consent management platform.
We may retain anonymized or aggregated data for longer periods, provided that it can no longer identify you.
Cookies and tracking technologies
We use cookies, pixels, tags, web beacons, scripts, SDKs and similar technologies to operate the Platform, improve the user experience, analyze traffic, measure performance and show more relevant advertising.
Cookies may be set directly by us or by third parties.
9.1 Types of cookies used
Necessary cookies
These are essential for the operation of the Platform and enable features such as cart, checkout, payment, security, account access and order management. Without these cookies, certain parts of the website cannot function properly.
Functional cookies
These allow us to remember preferences and settings, such as language, country, currency or other user experience customizations.
Analytics cookies
These help us understand how users interact with the Platform, which pages they visit, which products they view and how we can improve the website, content and features.
Advertising and marketing cookies
These are used to show relevant ads, measure advertising campaigns, carry out retargeting and understand the effectiveness of our advertising activities, including through Meta/Facebook Ads.
Social media and third-party cookies
These may be set by external platforms when you interact with social content, ads, pixels or integrated tools.
9.2 Consent management
Where required by law, we use non-essential cookies, including analytics, advertising or profiling cookies, only after obtaining your consent.
You can manage cookie preferences through:
the cookie banner and privacy/cookie tools made available on the Platform through Shopify;
any privacy settings available on the website;
browser settings;
tools made available by third parties, such as Meta or other providers.
You can change or withdraw your consent at any time, where technically available.
If you reject or disable certain cookies, some Platform features may not function properly or may be less personalized.
9.3 Meta Pixel and advertising tools
We use Meta Pixel or similar technologies to measure conversions, optimize advertising campaigns and show more relevant ads.
These tools may collect information relating to your activity on the Platform, such as pages viewed, products added to cart, checkouts initiated and purchases completed.
Where required by applicable law, these tools are activated only after your consent.
Direct marketing and communication preferences
We may send you marketing communications by email if:
you have given your consent;
you have purchased a product from us and applicable law allows the sending of communications relating to similar products or services, always with the possibility to object;
you have voluntarily subscribed to the newsletter;
you have started a checkout or abandoned a cart, within the limits permitted by applicable law and the preferences expressed.
Each promotional email contains a link or instructions to unsubscribe.
Unsubscribing from marketing communications does not prevent the sending of transactional or service communications relating to orders, shipping, payments, returns, security or legal obligations.
As of the date of this Privacy Policy, Crawford Design does not use SMS marketing.
Automated decision-making and profiling
We do not make decisions based solely on automated processing that produce legal effects or similarly significantly affect you.
However, we may use automated tools to:
segment users and customers for marketing purposes;
send abandoned cart or post-purchase emails;
show more relevant ads;
prevent fraud;
analyze performance and aggregated user behavior;
personalize content or offers.
Where these activities require consent, we carry them out only after obtaining consent or according to the preferences you have expressed.
Data security
We adopt reasonable and appropriate technical and organizational measures to protect personal data against loss, misuse, unauthorized access, disclosure, alteration or destruction.
These measures may include:
limited access to personal data;
authentication and access controls;
use of secure e-commerce and payment platforms;
protection of IT systems;
contractual agreements with suppliers;
internal procedures for data management;
monitoring and prevention of fraud or abuse.
However, no data transmission or storage system can be guaranteed to be completely secure. The use of the Platform therefore takes place with the awareness that there is always a residual risk associated with the transmission of data online.
If you have created an account, you are responsible for keeping your login credentials confidential. We invite you to use secure passwords and not to share them with third parties.
Your rights
Depending on the country in which you are located and the applicable law, you may exercise various rights in relation to your personal data.
If you are located in the European Union, the European Economic Area or the United Kingdom, you have, within the limits provided by law, the following rights:
Right of access
You can ask us to confirm whether or not personal data concerning you is being processed and to receive a copy of such data.
Right to rectification
You can ask us to correct inaccurate or incomplete personal data.
Right to erasure
You can ask us to delete your personal data in certain circumstances, for example when it is no longer necessary in relation to the purposes for which it was collected.
Right to restriction of processing
You can ask us to restrict the processing of your data in certain circumstances.
Right to data portability
You can ask us to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, where applicable.
Right to object
You can object to processing based on our legitimate interest, including profiling, in the cases provided by law. You can object to direct marketing at any time.
Right to withdraw consent
Where processing is based on consent, you can withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
Right to lodge a complaint
You have the right to lodge a complaint with a competent supervisory authority.
If you are located in Italy, you can contact the Italian Data Protection Authority.
If you are located in the United Kingdom, you can contact the Information Commissioner’s Office.
How to exercise your rights
To exercise your rights or submit privacy-related requests, you can contact us at:
Privacy email: info@crawforddesignofficial.com
To help us properly manage your request, we ask you to indicate “Privacy request” in the subject line of the email.
We may ask you for additional information to verify your identity, such as:
email address used for the order;
order number;
first and last name;
information necessary to confirm that the request comes from the data subject or an authorized representative.
We will respond to requests within the time limits provided by applicable law.
If a request is manifestly unfounded, excessive, repetitive or unverifiable, we may refuse it or adopt the measures permitted by law. In such case, we will provide you with an explanation.
You will not suffer any discrimination for exercising your privacy rights.
Links to third-party websites or services
The Platform may contain links to third-party websites, services, social networks or platforms that are not controlled by Crawford Design.
This Privacy Policy does not apply to such third-party websites or services.
We are not responsible for the privacy practices, content or security of external websites or services. We invite you to read the privacy policies of third parties before providing personal data or using their services.
Translations of this Privacy Policy
The Platform may be available in multiple languages, including through automatic translation tools or third-party translation solutions.
In the event of discrepancies between the translated versions of this Privacy Policy, the English-language version shall prevail.
Translations are provided to facilitate understanding by international users.
Changes to this Privacy Policy
We may periodically update this Privacy Policy to reflect changes in our practices, the services offered, the suppliers used, applicable law or for other operational, legal or regulatory reasons.
When we update this Privacy Policy:
we publish the new version on the Platform;
we update the “Last updated” date;
where required by law or appropriate, we provide a more prominent notice or direct communication.
We invite you to periodically review this page to stay informed about how we process your personal data.
Contact Us
For questions, concerns, requests or to exercise your data protection rights, you can contact us at:
CRAWFORD DESIGN SRL
Via Tiziano Vecellio 18
43124 Parma (PR)
Italy
Email for general enquiries: info@crawforddesignofficial.com
Privacy email: info@crawforddesignofficial.com
Website: crawforddesign.co