Privacy Notice

Introduction

This Privacy Notice explains the types of personal data we may collect about you when you interact with us. It also explains how we’ll store and handle that data, and keep it safe. From time to time we may need to update this Privacy Notice so we suggest that you come back and check it before you interact with us in the future.

Who we are

Creative Boom Limited is a company incorporated in England with company registration number 07437294. Our registered office is at Canada House, 3 Chepstow Street, Manchester M1 5FW.

The sort of personal data we collect

We collect and process the following personal data:

Name, gender and title, including job title
Contact details such as email and postal addresses and phone numbers
Billing and delivery details and payment card information
Details of your interactions with us
Details of your visits to our websites or apps, and which site you came from to ours
Information gathered by the use of cookies in your web browser

How we get your information

Most of the personal data we process is provided to us directly by you for one of the following reasons:

When you purchase a product from us
When you engage with us on social media
When you contact us with queries, complaints etc
When you ask us to provide you with information about a product
When you fill in any forms

We may also receive personal data indirectly when you’ve given a third-party permission to share with us information they hold about you.

Using your personal data

Under the General Data Protection Regulation (GDPR), the lawful bases we rely on for processing your personal data are:

(a) Your consent - For example, if you tick a box to receive emails from us

(b) We have a contractual obligation - For example, if you place an order with us, we’ll collect your details so that we can process your order including your address details so we can deliver your purchase, or pass them to the Royal Mail or a courier so they can deliver your order on our behalf

(c) We have a legal obligation - If the law requires us to, we may need to collect and process your data. For example, we can pass on details of people involved in fraud or other criminal activity affecting our business to law enforcement

(d) We have a legitimate interest - For example, to send you or make available personalised offers. We may also use your details to send you direct marketing information telling you about new products that we think might interest you. We may also combine the information we hold about you with that of our other customers to identify trends and ensure we can keep up with demand or develop new products. We may also use your information to respond to your queries, refund requests and complaints.

If you wish to change how we use your data, you’ll find details in the “Your data protection rights” section below. If you choose not to share your personal data with us, or refuse certain contact permissions, we might not be able to provide some services you have asked for.

Protecting and storing your personal data

We will treat your personal data with the utmost care and take all appropriate steps to protect it.

Whenever we collect or process your personal data, we will only keep it for as long as is necessary for the purpose for which it was collected. For example, we may keep your details for a reasonable period after you place an order with us to fulfil any contractual obligations such as refunds.

When we no longer need to hold your personal data, it will either be deleted completely or anonymised so that we can use the information for business planning or statistical analysis but you will no longer be able to be identified from it.

Sharing your personal data

We may share your personal data with trusted third parties. For example, the Royal Mail or couriers and IT companies who support our website and other business systems.

The following activities are carried out by third-party service providers: Big Cartel for our online shop, Google Analytics for website stats, Royal Mail for delivery services and Mailchimp for email marketing.

We will only provide the information they need to perform their specific services and the contract we have with them will specify the exact purposes for which they may only use your data. We will work closely with them to ensure that your privacy is protected and, if we stop using their services, any of your data held by them will either be deleted completely or anonymised.

We do not envisage that any personal data will be transferred outside of the EEA. However, if this position changes we will put into place procedures to ensure your personal data receives the same protection as if it were being processed inside the EEA.

Your data protection rights

Under data protection law, you have rights including:

(a) Your right of access -You have the right to ask us for copies of your personal data

(b) Your right to rectification -You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete

(d) Your right to restriction of processing -You have the right to ask us to restrict the processing of your personal data in certain circumstances

(e) Your right to object to processing -You have the right to object to the processing of your personal data in certain circumstances

(f) Your right to data portability -You have the right to ask that we transfer the information you gave us to another organisation, or to you, in certain circumstances

You won’t have to pay any charge for exercising your rights. If you make a request, we have one month to respond to you. Please contact us at Canada House, 3 Chepstow Street, Manchester M1 5FW if you wish to make a request or have any questions about this Privacy Notice.

How to complain

You can also complain to the Information Commissioner’s Office if you are unhappy with how we have used your data. You can contact them by calling 0303 123 1113 or write to them at: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF