Privacy Policy

Siesta Crafts Ltd, trading as Adaptatrap ("Adaptatrap", "we", "us", "our"), takes your privacy seriously. This notice explains what personal data we collect, how we use it, and the rights you have under UK data protection law.

1. Who we are

Siesta Crafts Ltd is a UK-based retailer and wholesaler of world music instruments, giftware and related products, trading here as Adaptatrap.

Registered office: Unit 17, Roper Close, Canterbury, Kent, CT2 7EP
Company number: 4852622
Data protection lead: Tim Harper
Contact: via our contact page / 01227 786066

2. Our legal basis for processing

We process personal data under these bases set out in the UK GDPR and Data Protection Act 2018: performance of a contract (to take, fulfil and deliver orders, manage accounts and provide customer service); legal obligation (tax, accounting and fraud prevention); legitimate interests (to run and improve our business and keep it secure); and consent (for optional activities such as email marketing and certain analytics cookies).

3. How we collect your data

We collect information when you place an order (online, by phone or by email), get in touch for help or product advice, sign up for our newsletter, browse our website (through cookies and analytics), or meet us at a fair or in our shop.

4. What we collect

Identity and contact details — name, address, email and telephone number.
Order and account information — purchase history, delivery details and invoices.
Payment data — handled securely by our payment providers; we never store full card details.
Technical and analytics data — IP address, device and browser information, and how you use the site (where you have consented).
Customer service records.

We do not collect special-category data such as race, religion, health or biometric information.

5. How we use your data

To process and fulfil orders, provide support, manage your account and send essential service updates, prevent fraud and keep the site secure, send marketing emails where you have opted in, and improve our range, website and service. You can opt out of marketing at any time.

6. How long we keep it

Orders and invoices: 6 years (a legal requirement).
Marketing data: until you unsubscribe, or after 2 years of inactivity.

7. Who we share it with

We never sell or rent your data. We may share it with couriers (such as Royal Mail and DPD) to deliver your order, payment providers (such as Shopify Payments and PayPal) to take payment securely, and legal authorities where required for fraud prevention or compliance. Some providers operate outside the UK; where they do, we make sure appropriate safeguards such as Standard Contractual Clauses are in place.

8. Cookies and tracking

We use cookies and analytics tools to help the site work, measure how it performs and support our marketing. Non-essential cookies only run with your consent. Essential cookies are needed for the site to work, including secure checkout and account login. Analytics cookies (such as Google Analytics) help us understand how visitors use the site, and run only with consent. Marketing cookies are used with consent for personalised advertising through services such as Google Ads, Meta and Shopify marketing tools.

Our store is hosted by Shopify, which may use aggregated customer-interaction data across participating merchants to provide enhanced services such as improved search and recommendations, marketing tools, fraud detection and personalisation. Your data may be processed in Shopify global infrastructure, including outside the UK. Shopify full privacy policy is on their website.

9. Your rights

Under UK GDPR you have the right to access the data we hold, have it corrected or erased, restrict or object to how we use it, stop marketing at any time, and receive your data in a portable format. Send requests via our contact page; we may need to verify your identity first.

10. Security and breaches

We protect your data with secure servers, encryption, firewalls and access controls. If a breach occurs, we will notify the ICO within 72 hours where legally required and contact anyone affected as necessary.

11. Other websites

Our site may link to other websites. We are not responsible for their privacy practices, so please review their policies separately.

12. Changes

We may update this policy from time to time; any changes will appear on this page.

13. Contact us

For any privacy query: Siesta Crafts Ltd (Adaptatrap), Unit 17, Roper Close, Canterbury, Kent, CT2 7EP. Get in touch via our contact page or call 01227 786066. For more on UK data protection, see the ICO at ico.org.uk.