Privacy Policy

01Who we are

CraftingProduct.io is the trade name of Dima Abramov, the controller for the data described here.

02What we collect

• Inquiries. When you submit a workshop qualification form we collect your name, email, company, role, team size, situation, timing, and the problem you describe. A custom project inquiry collects your name, email, company, role, project type, timing, and the project you describe.
• Direct correspondence. Emails and messages you send us, and our replies.
• Event registration. When we run a workshop, community event, or hackathon, we collect the registration details you give us — typically name, email, and whatever the event asks for, such as company, role, dietary or accessibility needs. Depending on the event, registration and ticketing run through Luma.
• Payment and billing. Paid events are processed by Stripe. We receive the billing details and payment confirmation we need for invoicing and accounting. We never receive your full card number.
• Photos and video. We sometimes photograph or film events. We say so in advance, on the registration page or at the event, and you can tell the organiser on the day — or email us — if you would rather not be featured.
• Website usage. Only through the consent-gated tracking described in section 05. Nothing analytics-related loads before you allow it.

03Why we use it, and our legal basis

• Answering inquiries and delivering what you booked — performance of a contract, or steps you asked for before a contract.
• Invoices, payments, and accounting records — legal obligation.
• Keeping the site secure, and documenting or communicating about an event where that is reasonable — our legitimate interests.
• Amplitude analytics and LinkedIn Insight — your consent, which you can withdraw at any time.
• Marketing email — we email you when you opted in, or, as Dutch law allows, to tell an existing customer about similar CraftingProduct services. Every message has an unsubscribe link. Registering for an event never signs you up for a partner's marketing.

04Community and co-branded events

We sometimes organise events with co-organisers, venue hosts, sponsors or delivery partners. Where attendee information will be shared, the registration page or an event-specific privacy notice will identify:

• each organisation receiving the information;
• the specific registration fields it receives;
• the purpose and legal basis for the sharing;
• whether it acts as a processor on our instructions, an independent controller or a joint controller;
• the retention period or criteria applying to it; and
• a link to its privacy policy, where relevant.

We share only the minimum information needed to assess applications where an event is selective, manage registration and entry, send essential event communications, meet accessibility or dietary requests, support safety, process payments where applicable, and deliver the event. Being a sponsor does not by itself give an organisation access to attendee information.

We do not share every registration response with every organisation. Accessibility, dietary and health-related responses may reveal sensitive information. We collect this information only when needed, restrict access to authorised people responsible for providing the requested support, and never use it for marketing. Where it includes special-category data, we rely on the additional legal condition required by data-protection law—normally the attendee’s explicit consent for that specific support request. Wherever possible, we share only the practical requirement rather than the underlying medical or personal details.

If CraftingProduct and a co-organiser jointly decide why and how attendee information is used, we document our respective responsibilities and make the essence of that arrangement available in the event notice. Attendees may contact CraftingProduct to exercise their rights, and we will coordinate with the other organisation where necessary.

Registering for an event does not subscribe an attendee to a partner’s marketing. A named partner may use an attendee’s contact details for its own promotional communications only where the attendee gives separate, optional consent. The option will not be preselected, and refusing or withdrawing consent will not affect registration or attendance.

05Providers and cookies

• Supabase — database hosting for site content, inquiry records, and administrator sign-in. Privacy policy
• Slack — delivers inquiry notifications to our private workspace. Privacy policy
• Amplitude (analytics consent) — product analytics and session replay. The script is not requested or initialised until you grant analytics consent. Privacy policy
• LinkedIn Insight (marketing consent) — marketing attribution. The tag is not requested or initialised until you grant marketing consent. Privacy policy
• Luma — when used for an event: registration and ticketing. Privacy policy
• Stripe — when used for an event: payment processing. Privacy policy

CraftingProduct is hosted and delivered through Lovable and Cloudflare. Cloudflare may set its necessary __cf_bm cookie for bot management and site security; it is not an analytics or marketing cookie. These providers do not receive event registration data through this website. Necessary cookies keep the site working and cannot be switched off. Analytics and marketing cookies load only after you allow that category. Your choice is stored in your browser for six months, after which the banner returns. To change or withdraw it sooner, use Privacy settings in the footer of any page — withdrawing a category stops that service from loading again. Your browser settings give you a further layer of control.

06How long we keep things

• Inquiries. Deleted or anonymised once the conversation is closed and we no longer need them.
• Event registration data. Normally up to 12 months after the event.
• Invoices and accounting records. Seven years, as Dutch tax law requires.
• Event photos and video. Up to five years, or sooner if you ask us to remove them and there is no overriding reason to keep them.

Active client relationships and legal claims can require longer. When we delete something, we remove it from our active systems. Copies in provider backups expire on the provider's normal schedule.

07Your rights

You can ask us to give you a copy of your data, correct it, delete it, transfer it, restrict how we use it, or object to a use based on legitimate interests. Where we rely on consent, you can withdraw it at any time — for cookies, via Privacy settings in the footer.

Email hello@craftingproduct.io and we will respond. If you are unhappy with how we handle it, you can complain to the Dutch data protection authority, Autoriteit Persoonsgegevens.

08Data outside the EEA

Some of our providers process data outside the European Economic Area. Where that happens, we rely on the safeguards that apply to that transfer — an adequacy decision, the EU–US Data Privacy Framework where the provider is certified, or Standard Contractual Clauses.

09Children

This site and our events are for adults working in and around technology. We do not knowingly collect data from children under 16. If you think we have, email us and we will delete it.

10Changes and contact

When this policy changes we post the new version here and update the date at the top. Questions, requests, or corrections: