Policy

Privacy Policy

How CraftGate collects, uses and protects your personal information.

Last updated: 1 August 2026

Who we are

CraftGate Heritage Ltd, a UK limited company registered in England and Wales (company number 17229861), with its registered office at 111 New Union Street, Coventry CV1 2NT.

For the purposes of UK data protection law, CraftGate Heritage Ltd is the data controller for personal information collected through this website and platform.

What data we collect

  • •Email address and name
  • •Age and location
  • •Craft interests and preferences
  • •Placement applications and application history
  • •Learning progress and quiz scores
  • •Optional equality monitoring information (e.g. gender) where you choose to provide it
  • •For under-18 students: parent or guardian name and email, and their consent confirmation
  • •If you take part in a CraftGate survey or research: your responses and the contact details you provide - see "Survey and research participants" below

Equality monitoring

If you choose to share equality monitoring information (for example, gender), we process it under legitimate interest to measure how well CraftGate is reaching the people the heritage sector needs to reach. This information is never shown on your profile, never shared with hosts, and only ever reported in aggregate form for internal review and funder reporting. You can decline to share it, and you can remove it from your profile at any time.

How we use your data

  • •Matching students with suitable heritage craft placements
  • •Tracking learning progress and awarding badges
  • •Communicating with you about placements, applications, and your account
  • •Safeguarding - ensuring the welfare of young people on placements

Legal basis for processing

We process your personal data on the basis of legitimate interests for the operation of the platform (matching students with placements, verifying host organisations, tracking learning progress). Where we send marketing communications, we do so on the basis of your consent, which you can withdraw at any time.

Who we share data with

  • •Host organisations - your application data is shared with hosts when you apply for a placement
  • •NOCN - for award validation where applicable
  • •We do not sell your personal data to third parties

Survey and research participants

Separately from the student platform, CraftGate carries out surveys and research with heritage craft practitioners, employers and organisations - for example, our practitioner survey about training, placements and workforce needs. If you take part, this section explains how we handle your information.

What we collect. Your name and contact details, information about your craft practice or organisation, and the views, experiences and preferences you choose to share in your responses. This may include commercially sensitive information about your business.

How we use it. We use survey and research responses to understand practitioner needs and inform the development of our services; to prepare funding applications; for strategic and sector reporting; and for communications relating to heritage craft skills, training pathways and workforce development. Where you ask us to, we also use your contact details to follow up with you about hosting, teaching or partnership.

Lawful basis. We process this information on the basis of our legitimate interests in developing CraftGate's services and in evidencing skills and workforce needs in the heritage sector. Where you provide contact details and ask us to get in touch, we use them for that purpose. You can object to this processing at any time (see Your rights under UK GDPR).

Sharing. We do not share your individual responses, your contact details, or commercially sensitive information about your business with any third party without your permission. Where findings are used externally - for example in a funding application or a sector report - they are aggregated and anonymised, so that you are not personally or commercially identifiable.

Retention. We keep your personal survey data for as long as it is needed for the purposes above, and you can ask us to delete it at any time (see Your rights under UK GDPR). Aggregated and anonymised findings, which contain no personal identifiers, may be kept indefinitely.

Data retention

Your account and associated data are retained for as long as your account is active. If you request deletion of your account, we will remove your personal data within 30 days, except where we are required to retain it for legal or safeguarding purposes.

Your rights under UK GDPR

  • •The right to access your personal data
  • •The right to rectification - correcting inaccurate data
  • •The right to erasure - requesting deletion of your data
  • •The right to data portability - receiving your data in a structured format
  • •The right to object to processing
  • •The right to withdraw consent at any time

To exercise any of these rights, please contact us at office@craftgate.org.

Changes to this policy

We may update this policy from time to time - for example, when we add new features or services, or when legal requirements change. The date at the top of this page shows when it was last revised.

Contact us

If you have questions about this privacy policy or wish to exercise your data rights, please get in touch.

Email office@craftgate.org