CRAFT Data Protection Statement

Last updated: November 2025

At CRAFT, we take data protection seriously — not just because it’s a legal requirement, but because it’s the right thing to do. Our work is all about helping charities use data with confidence, so it’s important that we lead by example.

This page explains how we protect your personal data when you use the CRAFT platform, including the Academy, the Crew Forums and any tools you access through Actually Data Analytics.


Our Commitment

We’re committed to:

  • Using your data fairly, transparently and only for what you’ve agreed to
  • Collecting only the information we need to run CRAFT and improve your experience
  • Keeping your data secure through strong technical and organisational measures
  • Never selling your data or sharing it for external marketing
  • Giving you control over your information at all times

What Personal Data We Collect

Depending on how you use CRAFT, we may collect:

Account Information

When you sign up (free or paid membership) we collect your name, email address and password.

Profile Information

You can choose to add optional details like your job role, organisation or areas of interest.

Forum Participation

Posts, replies, messages, and profile photos you choose to share in the Crew Forums.

Course Activity

Progress through Academy courses, quiz results and completion status.

Technical Data

IP addresses, browser type, device information and standard analytics used to maintain site performance and security.

Tool Usage (CRAFT Forge Apps)

For tools that process files (like the Data Quality Checker), we do not store uploaded data.
Files are processed temporarily, results are generated, and the data is discarded immediately after.


How We Use Your Data

We use your personal data to:

  • Create and manage your CRAFT account
  • Provide access to courses, tools and forums
  • Track your learning progress
  • Moderate community spaces and keep the environment safe
  • Improve site performance, tools and user experience
  • Send essential service emails (e.g., membership info, course updates, forum notifications)
  • Send optional newsletters or updates — only if you’ve opted in

We only use your data where we have a lawful basis (legitimate interest, consent, contract or legal obligation).


How We Keep Your Data Secure

We use a combination of technical and administrative measures, including:

  • Encrypted connections (HTTPS/TLS)
  • Secure hosting and firewalls
  • Role-based access controls
  • Regular monitoring for vulnerabilities
  • Limited administrator access
  • No unnecessary retention of uploaded tool data

We treat your information with the same care we expect charities to show their supporters’ data.


Who Has Access to Your Data

Your data is accessed only by:

  • Actually Data / Actually Data Analytics staff who maintain CRAFT
  • Trusted service providers who help run the platform (such as hosting, membership systems or analytics), all under strict data-processing agreements

We never share your data with third parties for advertising or unrelated purposes.


How Long We Keep Your Data

  • Account info: kept while your membership is active
  • Forum content: retained to preserve discussions unless you request removal
  • Course data: kept for as long as your account exists, so you can return to your learning
  • Uploaded files in tools: not stored — deleted immediately after processing
  • Cookies: as described in our Privacy Policy

You can request we delete your account at any time.


Your Rights

Under data protection law, you have the right to:

  • Access your personal data
  • Correct inaccurate information
  • Request deletion of your data
  • Restrict or object to certain types of processing
  • Export your data in a common format
  • Withdraw consent where consent was the legal basis

To exercise any of these rights, contact us at:
anthony@actuallydataanalytics.com

We aim to respond within 30 days.


International Data Transfers

CRAFT may use third-party services that store data outside the UK/EU.
Where this happens, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses).


Updates to This Statement

We may update this page to reflect improvements to CRAFT or changes in legislation.
A version number and review date will be included so you always know what’s current.


Questions or Concerns?

If you’d like to discuss anything in this statement, or you have questions about how your data is handled, please get in touch:
anthony@actuallydataanalytics.com

We’re here to help, and we take every query seriously.

Scroll to Top