Effective October 7, 2026
RJA Custom Craftworks (“we”, “us”) makes personalised products to order. This policy explains what information we collect when you use this website, how we use it, and the choices you have. We never sell your information.
What we collect
- Requests and orders. Your name, email address and phone number, any notes you add, and the personalisation for each item (for example the name and number on a keychain). If an order is shipped, we also collect the delivery address.
- Personalisation that includes a child’s name. Many of our keychains carry a child’s first name or jersey number. That information is supplied by a parent, guardian or team organiser. We use it only to make and deliver the item.
- School pre-orders (such as a school or team keychain): the parent’s name, email and mobile number, plus the class parent’s name and the grade, so the order can be handed out through the right class.
- Payments. Card payments are processed by Stripe. Your card number goes straight to Stripe and is never stored on this website. We receive a confirmation of payment and the last details Stripe shares with merchants (such as the card brand).
- Messages you send through our contact form.
- Technical information: your IP address and browser details, which our security tools use to block attacks and spam, and anonymous usage data described under Cookies below.
How we use it
- To quote, make, deliver and support the items you ask for, and to reply to your messages.
- To take payment and keep the records the law requires for sales and taxes.
- To keep the website secure and free of spam.
- To understand, in aggregate, how people use the site so we can improve it.
We do not use personalisation (such as a child’s name) for marketing, we do not publish it, and we do not show it to other customers.
Cookies and third-party services
- Store cookies (WooCommerce) remember what is in your request list or cart while you shop.
- Google Analytics tells us how many people visit and which pages they use. It uses cookies and does not tell us who you are. You can opt out with Google’s browser add-on.
- Google reCAPTCHA protects our login, checkout and forms from bots. It is subject to the Google Privacy Policy and Terms of Service.
- Stripe processes payments, as described above.
- Our site is hosted by WPMU DEV, which runs the servers, backups and security tools on our behalf.
Who we share it with
We share information only with the services that help us run the store (payment processing, hosting, delivery carriers when something is shipped, and email). They may use it only to provide that service. We may also disclose information if the law requires it. We do not sell or rent personal information.
Children
This website is meant for adults: parents, guardians, coaches and organisers. It is not directed at children under 13, and we do not knowingly collect information from them. If you believe a child has sent us information, please contact us and we will delete it.
How long we keep it
We keep order records for as long as we need them for the order and for our tax and accounting records. Requests that never become an order, and contact form messages, are deleted after 24 months. You can ask us to delete your information sooner, unless we are required by law to keep it.
Your choices
You can ask to see, correct or delete the information we hold about you by contacting us. You can also block or delete cookies in your browser; the site will still work, although your request list may not be remembered between visits.
Security
The site uses encrypted connections (HTTPS), login protection, spam protection and regular backups. No system is perfectly secure, but we take reasonable steps to protect your information.
Changes
If we change this policy, we will update it on this page and change the date at the top.
Contact
Questions about privacy? Please use our contact page.