Legal
Privacy Policy
Last updated: May 2025 - Compliant with UK GDPR and the Data Protection Act 2018
1. Who We Are
SpiritCraft Ventures (“we”, “us”, “our”) is the data controller responsible for your personal data. We operate the websites spiritcraftventures.com and spiritcraftventures.co.uk. You can contact us at info@spiritcraftventures.com.
2. What Data We Collect
We collect the following categories of personal data:
Name, email address - provided when you submit our contact form or request access to our products.
The content of messages you send us via our contact form or email.
Pages visited, time spent on site, browser type and approximate location (via IP address). Collected automatically via server logs.
Where you use our automated bidding service, encrypted auction house login credentials you choose to provide. Stored with AES-256 encryption and used solely for authorised bidding operations.
3. How We Use Your Data
We use your name and email to respond to messages sent via our contact form.
We use your data to grant access to and operate our intelligence products.
Your auction credentials are used solely to place bids you have authorised.
Anonymised usage data helps us understand how our platform is used and improve it.
We may retain or disclose data where required by law.
4. Data Sharing
We do not sell your personal data. We may share data with:
- Hosting and infrastructure providers (DigitalOcean) - for operating our servers
- Email service providers - for delivering communications
- Law enforcement or regulatory authorities - where required by law
All third-party processors are bound by data processing agreements and are required to handle your data securely.
5. Data Retention
Contact form submissions are retained for up to 2 years to allow us to manage ongoing enquiries.
Server logs are retained for up to 90 days for security monitoring.
Auction credentials are deleted immediately upon your request or when you cease using our bidding service.
We review and delete data that is no longer necessary on a regular basis.
6. Your Rights Under UK GDPR
Under the UK General Data Protection Regulation and the Data Protection Act 2018, you have the following rights:
Request a copy of the data we hold about you.
Ask us to correct inaccurate or incomplete data.
Request deletion of your data where there is no legitimate reason to retain it.
Ask us to limit how we process your data in certain circumstances.
Receive your data in a structured, machine-readable format.
Object to processing based on legitimate interest.
To exercise any of these rights, email us at info@spiritcraftventures.com. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).
7. Cookies
Our website uses only essential cookies required for the site to function. We do not use tracking cookies, advertising cookies or third-party analytics that require consent. No cookie banner is therefore required.
8. Security
We implement appropriate technical and organisational measures to protect your data, including encrypted data transmission (HTTPS), encrypted storage of sensitive credentials (AES-256), and restricted access to production systems. However, no method of transmission over the internet is 100% secure.
9. International Transfers
Our servers are located in the European Economic Area (DigitalOcean, Amsterdam region). We do not transfer your data outside the UK/EEA without appropriate safeguards in place.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the date at the top of this page. Continued use of our services constitutes acceptance of the updated policy.
11. Contact Us
For any privacy-related questions or to exercise your rights, contact our data team at info@spiritcraftventures.com.