Cream & Co may change this policy from time to time by updating this page. You should check this page from time to time to ensure that you are happy with any changes.
- Who we are (Who is collecting the data)
- What we collect (What data is being collected)
- Legal basis for collection (What is the legal basis for processing the data)
- Third party access (Will the data be shared with any third parties)
- How we use personal data (How will the information be used)
- How you choose what we collect and use
- Links to other web sites
- Data retention (How long will the data be stored for)
- Your rights (What rights does the data subject have)
- Complaints (How can the data subject raise a complaint)
Who we are
Cream & Co is the trading name for Impact by Design Limited which is a Data Controller registered under the Data Protection Act.
Data Protection Officer: Please ensure all correspondence concerning Data Protection are sent to firstname.lastname@example.org with the words DATA PROTECTION at the start of the subject line.
You are also able to get in touch with us by writing to Cream & Co, Impact by Design Limited, Yew Tree House, Holt Lane, Holt, Dorset, BH21 7DJ, United Kingdom.
What we collect
We may collect data from you directly, such as via phone call, via information you enter into our website, via social media pages and data about your purchase. We also collect some data automatically, such as information about your device and what parts of our site you interact with or spend time using, including using technologies such as cookies, third-party analytics and web server logs.
Personal data provided by you
We may collect they following:
Contact information such as name, address (incl. Shipping and Billiing), email and phone number
Contact information for people who you would like us to send a message to, on your behalf (please ensure that they have consented to receive the message)
Log-in credentials, if you register a User Account with us
If your provide it, gender, date of birth and VAT / Tax number
Payment information (only partlaly retained) such as payment card number, expiry date, and security code
Purchase history, orders, receipts, invoicing, deliveries, returns, vouchers and product preferences
Content you provide such as enquiries, tags, reviews, comments, likes, wish list, surveys, photo and video
Information provided to us through social media networks
Notes on interactions with us through telephone, online, in store, at events, etc.
Your marketing and communication preferences
Data collected by automated means
When you access our site, emails, social media or view / click adverts (incl. on third party websites) or access via your device / mobile , we may collect information about your usage and the device by automated means such as cookies, third party analytics, web server logs or web beacons
Technical data such as IP address, platform, device type, operating system and version, unique device identifiers, browser, browser language, domain and other systems data
Usage statistics such as pages visited and features used, time spent on pages, your search queries, click data, date and time, and other data regarding your use of the services
Location data incl. geo-location, country, city, and geographic coordinates based on your IP address.
Information provided by/to third party analytics and social media which is is based on your on line activity and interests. Often grouped to provide market segment (for example there may be a segment for eco-aware fasion consious shoppers)
Technology used for collection
Cookies neccessary for the site to work as intended. These are small text files sent to your device in order to identify your browser and to store information and settings.You can opt to not receive these by updating your browser settings, but your use of our site will be adversly affected
Web server logs my log details such as the address of the link that connected to our site, IP address, domain, operating system, version, browser type, language, country, time zone, and other system settings
Web beacons, which are small tags that may be added to our web pages, are used to link with web servers and their cookies
Third party web analytics such as Google Analytics and Facebook Pixel, may also utilize cookies, web logs and beacons to collect information and help analyze how our site is used. For example a Google Analytics cookie used on our site, Google advertising cookies used on third party sites and other third party identifiers may be used to analyze site visitors. If you wish to disable Google Analytics or find out more please see https://tools.google.com/dlpage/gaoptout?hl=en and https://support.google.com/analytics/answer/6004245 respectivley
Third party cookies are used to support additional functions on our site such as when you use social sharing actions incl. facebook, like, twitter, tweet, google+, pinterest, linked in
Third party targeted advertising on our site, our emails, and of third parties, may use the above methods to provide tailored adverts to you or provide feedback allowing us to track the effectivness and relevance of our advertising campaings
Our web site is not intended for persons under the age of 18
Legal basis for collection
The law on data protection and GDPR sets out a number of reasons that a company may collect and process personal information, these include the following
Consent: We may process your personal data on the basis that you have consented to such processing. For example, when you tick a box to confirm you would like to receive marketing emails from us
Contractual necessity: We may process personal data on the basis that such processing is necessary in order to enter into or perform a contract with you. For example if you order an item for delivery from us, we need your address details for us to pass to the courier so that delivery can be made
Legal Compliance: We may need to process your personal data on the basis that we have a legal obligation to do so. For example, we may need to pass on details law enforcement in order to prevent or assist in the investigation of fraud
Legitimate interests: We may process personal data on the basis that we have a legitimate interest in doing so, provided that such legitimate interest does not materially impact your rights and freedoms under GDPR and the law. For example a legitimate interest which would be reasonably expected as part of managing our business would be the analysis of shopping history to make personalized offers available to you and to identify trends so that we can predict stock levels. We may also use your address information to send marketing information that we believe would be of interest to you
Third party access
We will not sell, distribute or lease your personal data to third parties, other than as descriibed here. We may share your data with:
Our own subsidiaries.
Service providers for the performance of speciific services to/for us. We do not authorize these service providers to use or further share this data other than as neccessary to perform the services or to comply with the law. For example we provide delivery information to couriers; information neccessary for credit card processing to the relevant payment processor, our web site is hosted by a separate web hosting services company, our marketing, email distribution and your marketing preferences are managed by other trusted service providers.
Other third parties if we have your permission to do so.
Third parties that we would be required to cooperate with for the investigation and prevention of fraud, for prevention of financial loss, complance with the law and our legal duties.
US service providers incl. Google and Facebook are certified to the EU-US Privacy Shield as set out by the European Commission regarding the collection, use and retention of personal data transferred from the EEA to the US. A list of EU-US privacy shield covered companies is detailed in https://www.privacyshield.gov/list
We may use your personal information to send you promotional information about third parties which we think you may find interesting if you tell us that you wish this to happen.
How we use personal data
We use the information you provide to:
Create a profile along with aggregated data to better understand our customers
Send you marketing and other information we beleive of interest to you, provided you tell us you wish us to do so
Process payment transactions, such as when you order a product from us using a credit card or other means to secure payment
Arrange delivery or collection of items you have ordered
Communicate with you to answer your queries, provide products and services, clarify items and provide updates relating to your order or to facilitate other requests and discussion we have
Manage your account
View and provide services and information to you, including your purchase history, recently viewed, cart and wish list items.
Capture, and display publicly, content you provide such as your reviews, tags and other information relevant to our products and service.
Facilitate and communicate, incl. capture, registration and display of, social media actions you take. For example, your use of the facebook-like button.
Tailor and target advertising, on our site and elsewhere, to be of more interest to you. For example, we may use third-party platforms such as Google, Facebook, Twitter, Pinterests and other social media. We may convert some of your data to create a unique value that can be matched by those third parties to a user they have on their platform, which then allows them to provide interest based advertising. These platforms may have their own privacy policies.
Idenify trends and manage stock levels, assist with product planning and selection
Determine the effectivness of our marketing, analyse the use of our site along with other data, to improve our buisness and services provided to you.
Comply with applicable laws, cooperate with third parties for the investigation and prevention of fraud and financial loss, the application of industry standards and our business practice
How you choose what we collect and use
You may choose to restrict the collection or use of your personal information, and the technologies used to collect it.
Adjust your mailing preferences by using the following link: Preferences
You are able to click unsubscribe in any of our emails to request that you no longer receive direct marketing emails from us
Adjust settings in your account by logging into it on our web site
Whenever you are asked to fill in a form on the web site, look for the box that you can click to indicate that you do / do not want the information to be used for direct marketing purposes
If you have previously agreed to us using your personal information for direct marketing purposes, you may change your mind at any time by writing to or emailing us the Data Protection Officer as described near the start of this page in the section titled Who we are.
If you believe that any information we are holding on you is incorrect or incomplete, please write to or email us as soon as possible, at the above address. We will promptly correct any information found to be incorrect.
You can opt to not receive cookies (these are descibed above in: Technology used for collection) by updating your browser settings, but your use of our site will be adversly affected
You can disable Google Analytics as detailed in https://tools.google.com/dlpage/gaoptout?hl=en
Disable geo-location on your device
We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online.
Links to other web sites
Our web site may contain links to other web sites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other web site. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.
We keep your personal data for no longer than neccessary for the purpose for which it was collected, including consideration for any legal requirements. After this time your data will be scheduled for deletion or be anonymized. Typically this will be the duration of our relationship or 5-10 years for orders depending on type of product or for the length of the warranty if one was provided, which ever is the greater. We may keep information to facilitate marketing activity and your communication preferences beyond this point.
Your rights over personal data
You have certain rights over the personal data we collect from you. You may request:
A copy of the data to be provided to you or a third party. We would need verified proof of your identity before sending. If we receive repeated or excessive requests we may charge a small fee.
Correction of your personal data where it is found to be incorrect, incomplete or not current. Please make us aware or attempt to correct as soon as you find this.
Erasure of your personal data where there is no good reason for us to continue holding it
Withdrawal of your consent, such that our future use of your personal data is retricted. You may do at any time, even if you have previously given consent.
Withdrawal of your consent for the use of your your personal data for direct marketing in particular.
To register your objection, in relation to your specific situation, to the use of your data we process under legitimate interest.
Restriction of our use of the data to only the relevent purpose, for example if we are holding your personal data only for contractual reasons, or that the data is pending erasure.
That decisions which significantly effect you and made soley on the automated processing of your personal data, i.e. have not been yet been reviewed by a human, are so reviewed by a human.
In the first instance please contact us directly to see if we are able to rectify or/and resolve your issue amicably. We would hope that after this you feel that we have handled your personal data in accordance with our policy and the law. However, you may also lodge a complaint with the data protection authority.
For the list of web site cookies we collect see the List of cookies we collect section.
These are small text files sent to your device in order to identify your browser and to store information and settings.You can opt to not receive these by updating your browser settings, but your use of our site will be adversly affected
Types of cookie we use include:
Web site cookies neccessary for the site to work as intended, such as to authenticate users or offer site features
Functional cookies to recognise when you return to our site and recall preferences etc.
Traffic logging cookies to count visits, identify which pages are being used and how visitors move around the site. This helps us analyse data about web page traffic and improve our web site in order to tailor it to customer needs.
Third party cookies to support additional functions on our site such as when you use social sharing actions incl. facebook, like, twitter, tweet, google+, pinterest, linked in
Third party web analytics such as Google Analytics and Facebook Pixel, may also utilize cookies to collect information and help analyse how our site is used. For example a Google Analytics cookie used on our site, Google advertising cookies used on third party sites and other third party identifiers may be used to analyse site visitors.
The table below lists the cookies we collect and what information they store.
|COOKIE name||COOKIE Description|
|CART||The association with your shopping cart.|
|CATEGORY_INFO||Stores the category info on the page, that allows to display pages more quickly.|
|COMPARE||The items that you have in the Compare Products list.|
|CURRENCY||Your preferred currency|
|CUSTOMER||An encrypted version of your customer id with the store.|
|CUSTOMER_AUTH||An indicator if you are currently logged into the store.|
|CUSTOMER_INFO||An encrypted version of the customer group you belong to.|
|CUSTOMER_SEGMENT_IDS||Stores the Customer Segment ID|
|EXTERNAL_NO_CACHE||A flag, which indicates whether caching is disabled or not.|
|FRONTEND||You sesssion ID on the server.|
|GUEST-VIEW||Allows guests to edit their orders.|
|LAST_CATEGORY||The last category you visited.|
|LAST_PRODUCT||The most recent product you have viewed.|
|NEWMESSAGE||Indicates whether a new message has been received.|
|NO_CACHE||Indicates whether it is allowed to use cache.|
|PERSISTENT_SHOPPING_CART||A link to information about your cart and viewing history if you have asked the site.|
|POLL||The ID of any polls you have recently voted in.|
|POLLN||Information on what polls you have voted on.|
|RECENTLYCOMPARED||The items that you have recently compared.|
|STF||Information on products you have emailed to friends.|
|STORE||The store view or language you have selected.|
|VIEWED_PRODUCT_IDS||The products that you have recently viewed.|
|WISHLIST||An encrypted list of products added to your Wishlist.|
|WISHLIST_CNT||The number of items in your Wishlist.|
|__utma||Unique visitors to our site updated for each page viewed|
|__utmb||Individual session/visits to our site updated for each page viewed|
|__utmx||The website variation used for Web Optimization and consistent user experience|
|__utmz||Type of referal used to reach our site|