Personal Data Policy


 

In general

Personal data collection and use

Recipients of personal data

Your rights

Erasure of personal data

Security

Contact information

Changes to the Personal Data Policy

 


In general

This policy on the processing of personal data (hereinafter “Personal Data Policy”) describes how CreativityDirect (hereinafter “CreativityDirect”, “us”, “our” or “we”) collects information about you.

The Personal Data Policy applies to personal data which you provide us with or which we collect via the CreativityDirect's website, www.creativitydirect.co.uk (hereinafter “Website”).

With regard to your personal data, CreativityDirect is the data controller. All inquiries to CreativityDirect can be made via the contact information stated under Contact Information.

What personal data do we collect and for what purpose, and what is the legal basis for processing the data?

When you visit our Website, we automatically collect information about you and your use of the Website, e.g. which type of browser you are using, the search terms you use in the Website, your IP address, including your network location, and information about your computer.

  • The purpose of this is to optimise user experience and the Website’s function, and to carry out targeted marketing, including retargeting via Facebook and Google. This data processing is necessary so that we can pursue our interests in improving the Website and showing you relevant offers.
  • The legal basis for the processing is the EU General Data Protection Regulation, Article 6 (1f).

When you purchase a product or communicate with us on the Website, we collect the information that you personally provide, e.g. name, address, e-mail address, telephone number, payment method, information about which products you purchase and any you may have returned, delivery wishes, and information about the IP address from which your purchase is being made.

  • The purpose of this is to enable us to provide the products that you have ordered and to fulfil our agreement with you, and furthermore, that we are able to administer your right to return goods and to make complaints. We may also process information about your purchase in order to comply with legal requirements, including bookkeeping and accounting. When a purchase is made, the IP address is collected in order to pursue our interests in being able to prevent fraud.
  • The legal basis for the processing is the EU General Data Protection Regulation, Article 6 (1b, 1c and 1f).

When you subscribe to our newsletter, we collect information about your e-mail address.

  • The purpose of this is so that we can pursue our interest in being able to supply you with the newsletter.
  • The legal basis for the processing is the EU General Data Protection Regulation, Article 6 (1f).

Recipients of personal data

Information about your name, address, e-mail address, telephone number and order number and specific delivery wishes are forwarded to PostNord, GLS or a carrier, who manages the delivery of the purchased goods to you. In the case of the purchase of stocked goods, the stated information is forwarded to the manufacturer or seller of the goods in question, who in such cases will manage the delivery.

Information may be entrusted to external partners, who process the information on our behalf. We use external partners to, among other things, manage the technical operation of and make improvements to our Website, issue newsletters and target marketing, including retargeting, and for your assessment of our company and products. These companies are data processors and are under our instructions, and they process data that we are the data controller of. The data processors may not use the data for any purpose other than the fulfilment of the agreement with us, and are subject to confidentiality in this regard. We have entered into written data processor agreements with all of the data processors that process personal data on our behalf.

Two of these data processors, Google Analytics owned by/Google LLC and Facebook Inc. are established in the USA. The necessary guarantees for the transfer of data to the USA are ensured through the data processor’s certification under EU-US Privacy Shield, cf. the EU General Data Protection Regulation, Article 45.

Your rights

In order to create openness with regard to the processing of your data, as the data controller, we must inform you of your rights.

Right of access

You are entitled at all times to request information from us about, among other things, what data we have registered about you, to what purpose does the registration serve, which categories of personal data and recipients of data there may be, and information about where the data comes from.

You are entitled to receive a copy of the personal data, which we process about you. If you wish to receive a copy of your personal data, you must send a written request by email, addressed to info@creativitydirect.co.uk. You may be asked to document that you are who you claim to be.

Right to make correction

You have the right to order us to correct any incorrect information about you. If you have become aware of an error in the information that we have registered about you, you are encouraged to contact us in writing about this, so that we can correct the information.

With regard to the information that we have collected in connection with your joining our customer club, you can personally correct this by logging into your personal profile.

Right to erasure

In certain situations, you have the right to have all of your personal data with us erased, e.g. if you withdraw your consent and we do not have another legal basis for continuing with the processing. To the extent that the continued processing of your data is necessary, e.g. in order that we comply with our legal obligations or that a legal requirement can be established, exercised or defended, we are not obligated to delete your personal data.

Right to restriction of processing to storage 

In certain situations, you have the right to restrict processing of your personal data to storage only, e.g. if you believe that the information about you is incorrect. 

Right to data portability

In certain situations, you have the right to have the personal data that you have personally provided to us, returned to you in a structured, commonly used and machine-readable format and have the right to transfer this data to another data controller.

Right to object

You have the right to object at any time to our processing of your personal data for direct marketing, including profiling carried out in order to target our direct marketing.

In addition, you have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data, which we carry out on the basis of pursuing our legitimate interests under which information we collect.

Right to withdraw consent

You have the right to withdraw at any time the consent you gave to us for a given processing of personal data, including for profiling, which is carried out by you as a member of the customer club. If you wish to withdraw your consent, pleases contact us by email at info@creativitydirect.co.uk.

Right to complain

You have the right to submit a complaint at any time about our processing of your personal data to the Danish Data Protection Agency, Borgergade 28, 5, 1300 Copenhagen K. Complaints can also be submitted by email, addressed to dt@datatilsynet.dk or made by telephone by calling +45 33 19 32 00.

Erasure of personal data

With regard to the data collected about your use of the Website, cf. which information is collected, we delete this when you have not used the Website for one year.

Information collected when you register to subscribe to our newsletter is deleted once you have withdrawn your consent to receive the newsletter, unless there is another basis for processing the information.

With regard to information collected in connection with purchases you have made through the Website, cf. which information is collected, we will generally delete this after three years following the end of the calendar year in which you made your purchase. However, information may be stored for a longer period of time if we have a legitimate need for longer storage, e.g. if it is necessary because a legal requirement can be established, exercised or defended, or if storage is necessary for us to meet legal requirements. Accounting material is stored for five years to the end of a calendar year to meet accounting law requirements.

Security

We have carried out appropriate technical and organisational security measures against personal data being accidentally or illegally destroyed, lost or impaired and against becoming available to unauthorised persons, or misused.

Only employees who have a real need to gain access to your personal data in order to carry out their work, are given access to the personal data.

Contact information

CreativityDirect is the data controller for personal data that is collected via the Website.

If you have any questions or comments about this Personal Data Policy or wish to exercise one or more of your rights described in paragraph 4, then please contact:

 

CreativityDirect

Westway House

Transport Ave

Brentford

Middlesex

TW8 9HF

 

Tel.: 020 8566 1680

E-mail: info@creativitydirect.co.uk

 

Changes to the Personal Data Policy

If we make any changes to the Personal Data Policy, you will be informed of this at your next visit to the Website.

Versions

This is version 2.0 of CreativityDirect’s personal data policy, dated 25 May 2018.