Privacy Policy

This privacy policy sets out how Cream & Co uses and protects any information that you give us when you use this website. Cream & Co is committed to ensuring that your privacy is protected. Should we ask you to provide certain information by which you can be identified (personal data) when using this website, then you can be assured that it will only be used in accordance with this privacy statement.

Cream & Co may change this policy from time to time by updating this page. You should check this page from time to time to ensure that you are happy with any changes.

Contents of Privacy Policy

  • Who we are (Who is collecting the data)
  • What we collect (What data is being collected)
  • Legal basis for collection (What is the legal basis for processing the data)
  • Third party access (Will the data be shared with any third parties)
  • How we use personal data (How will the information be used)
  • How you choose what we collect and use
  • Security
  • Links to other web sites 
  • Data retention (How long will the data be stored for)
  • Your rights (What rights does the data subject have)
  • Complaints (How can the data subject raise a complaint)
  • Our cookie policy

Who we are

Cream & Co is the trading name for Impact by Design Limited which is a Data Controller registered under the Data Protection Act. 

Data Protection Officer: Please ensure all correspondence concerning Data Protection are sent to customerservices@creamandco.com with the words DATA PROTECTION at the start of the subject line.

You are also able to get in touch with us by writing to Cream & Co, Impact by Design Limited, Yew Tree House, Holt Lane, Holt, Dorset, BH21 7DJ, United Kingdom.

What we collect

We may collect data from you directly, such as via phone call, via information you enter into our website, via social media pages and data about your purchase. We also collect some data automatically, such as information about your device and what parts of our site you interact with or spend time using, including using technologies such as cookies, third-party analytics and web server logs.

Personal data provided by you

We may collect they following:

Contact information such as name, address (incl. Shipping and Billiing), email and phone number

Contact information for people who you would like us to send a message to, on your behalf (please ensure that they have consented to receive the message)

Log-in credentials, if you register a User Account with us

If your provide it, gender, date of birth and  VAT / Tax number

Payment information (only partlaly retained) such as payment card number, expiry date, and security code

Purchase history, orders, receipts, invoicing, deliveries, returns, vouchers and product preferences

Content you provide such as enquiries, tags, reviews, comments, likes, wish list, surveys, photo and video

Information provided to us through social media networks

Notes on interactions with us through telephone, online, in store, at events, etc. 

Your marketing and communication preferences

Data collected by automated means

When you access our site, emails, social media or view / click adverts (incl. on third party websites) or access via your device / mobile , we may collect information about your usage and the device by automated means such as cookies, third party analytics, web server logs or web beacons 

Technical data such as IP address, platform, device type, operating system and version, unique device identifiers, browser, browser language, domain and other systems data

Usage statistics such as pages visited and features used, time spent on pages, your search queries, click data, date and time, and other data regarding your use of the services

Location data incl. geo-location, country, city, and geographic coordinates based on your IP address.

Information provided by/to third party analytics and social media which is is based on your on line activity and interests. Often grouped to provide market segment (for example there may be a segment for eco-aware fasion consious shoppers)

Technology used for collection

Cookies neccessary for the site to work as intended. These are small text files sent to your device in order to identify your browser and to store information and settings.You can opt to not receive these by updating your browser settings, but your use of our site will be adversly affected  

Web server logs my log details such as the address of the link that connected to our site, IP address, domain, operating system, version, browser type, language, country, time zone, and other system settings

Web beacons, which are small tags that may be added to our web pages, are used to link with web servers and their cookies

Third party web analytics such as Google Analytics and Facebook Pixel, may also utilize cookies, web logs and beacons to collect information and help analyze how our site is used. For example a Google Analytics cookie used on our site, Google advertising cookies used on third party sites and other third party identifiers may be used to analyze site visitors. If you wish to disable Google Analytics or find out more please see https://tools.google.com/dlpage/gaoptout?hl=en  and https://support.google.com/analytics/answer/6004245 respectivley

Third party cookies are used to support additional functions on our site such as when you use social sharing actions incl. facebook, like, twitter, tweet, google+, pinterest, linked in 

Third party targeted advertising on our site, our emails, and of third parties, may use the above methods to provide tailored adverts to you or provide feedback allowing us to track the effectivness and relevance of our advertising campaings 

Children

Our web site is not intended for persons under the age of 18

Legal basis for collection

The law on data protection and GDPR sets out a number of reasons that a company may collect and process personal information, these include the following

Consent: We may process your personal data on the basis that you have consented to such processing. For example, when you tick a box to confirm you would like to receive marketing emails from us

Contractual necessity: We may process personal data on the basis that such processing is necessary in order to enter into or perform a contract with you. For example if you order an item for delivery from us, we need your address details for us to pass to the courier so that delivery can be made 

Legal Compliance: We may need to process your personal data on the basis that we have a legal obligation to do so. For example, we may need to pass on details law enforcement in order to prevent or assist in the investigation of fraud

Legitimate interests: We may process personal data on the basis that we have a legitimate interest in doing so, provided that such legitimate interest does not materially impact your rights and freedoms under GDPR and the law. For example a legitimate interest which would be reasonably expected as part of managing our business would be the analysis of shopping history to make personalized offers available to you and to identify trends so that we can predict stock levels. We may also use your address information to send marketing information that we believe would be of interest to you 

Third party access

We will not sell, distribute or lease your personal data to third parties, other than as descriibed here. We may share your data with:

Our own subsidiaries.

Service providers for the performance of speciific services to/for us. We do not authorize these service providers to use or further share this data other than as neccessary to perform the services or to comply with the law. For example we provide delivery information to couriers; information neccessary for credit card processing to the relevant payment processor, our web site is hosted by a separate web hosting services company, our marketing, email distribution and your marketing preferences are managed by other trusted service providers.

Other third parties if we have your permission to do so.

Third parties that we would be required to cooperate with for the investigation and prevention of fraud, for prevention of financial loss, complance with the law and our legal duties.

US service providers incl. Google and Facebook are certified to the EU-US Privacy Shield as set out by the European Commission regarding the collection, use and retention of personal data transferred from the EEA to the US. A list of EU-US privacy shield covered companies is detailed in https://www.privacyshield.gov/list

If we were to sell a portion of our assets, or our business as a whole, we may share your personal data as part of that sale and make reasonable efforts to direct the receiving entity to maintain and use personal data in a way that is consistent with our privacy policy.

We may use your personal information to send you promotional information about third parties which we think you may find interesting if you tell us that you wish this to happen. 

How we use personal data

We use the information you provide to:

Create a profile along with aggregated data to better understand our customers

Send you marketing and other information we beleive of interest to you, provided you tell us you wish us to do so

Process payment transactions, such as when you order a product from us using a credit card or other means to secure payment

Arrange delivery or collection of items you have ordered

Communicate with you to answer your queries, provide products and services, clarify items and provide updates relating to your order or to facilitate other requests and discussion we have

Manage your account

View and provide services and information to you, including your purchase history, recently viewed, cart and wish list items.

Capture, and display publicly, content you provide such as your reviews, tags and other information relevant to our products and service.

Facilitate and communicate, incl. capture, registration and display of, social media actions you take. For example, your use of the facebook-like button.

Tailor and target advertising, on our site and elsewhere, to be of more interest to you. For example, we may use third-party platforms such as Google, Facebook, Twitter, Pinterests and other social media. We may convert some of your data to create a unique value that can be matched by those third parties to a user they have on their platform, which then allows them to provide interest based advertising. These platforms may have their own privacy policies.

Idenify trends and manage stock levels, assist with product planning and selection

Determine the effectivness of our marketing, analyse the use of our site along with other data, to improve our buisness and services provided to you. 

Comply with applicable laws, cooperate with third parties for the investigation and prevention of fraud and financial loss, the application of industry standards and our business practice

How you choose what we collect and use

You may choose to restrict the collection or use of your personal information, and the technologies used to collect it. 

Adjust your mailing preferences by using the following link: Preferences

You are able to click unsubscribe in any of our emails to request that you no longer receive direct marketing emails from us 

Adjust settings in your account by logging into it on our web site

Whenever you are asked to fill in a form on the web site, look for the box that you can click to indicate that you do / do not want the information to be used for direct marketing purposes

If you have previously agreed to us using your personal information for direct marketing purposes, you may change your mind at any time by writing to or emailing us the Data Protection Officer as described near the start of this page in the section titled Who we are.

If you believe that any information we are holding on you is incorrect or incomplete, please write to or email us as soon as possible, at the above address. We will promptly correct any information found to be incorrect.

You can opt to not receive cookies (these are descibed above in: Technology used for collection) by updating your browser settings, but your use of our site will be adversly affected

You can disable Google Analytics as detailed in https://tools.google.com/dlpage/gaoptout?hl=en 

Disable geo-location on your device

Security

We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online.

Links to other web sites

Our web site may contain links to other web sites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other web site. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.

Data retention

We keep your personal data for no longer than neccessary for the purpose for which it was collected, including consideration for any legal requirements. After this time your data will be scheduled for deletion or be anonymized. Typically this will be the duration of our relationship or 5-10 years for orders depending on type of product or for the length of the warranty if one was provided, which ever is the greater. We may keep information to facilitate marketing activity and your communication preferences beyond this point.

Your rights over personal data

You have certain rights over the personal data we collect from you. You may request:

A copy of the data to be provided to you or a third party. We would need verified proof of your identity before sending. If we receive repeated or excessive requests we may charge a small fee.  

Correction of your personal data where it is found to be incorrect, incomplete or not current. Please make us aware or attempt to correct as soon as you find this. 

Erasure of your personal data where there is no good reason for us to continue holding it

Withdrawal of your consent, such that our future use of your personal data is retricted. You may do at any time, even if you have previously given consent.

Withdrawal of your consent for the use of your your personal data for direct marketing in particular.

To register your objection, in relation to your specific situation, to the use of your data we process under legitimate interest.

Restriction of our use of the data to only the relevent purpose, for example if we are holding your personal data only for contractual reasons, or that the data is pending erasure. 

That decisions which significantly effect you and made soley on the automated processing of your personal data, i.e. have not been yet been reviewed by a human, are so reviewed by a human. 

Complaints

In the first instance please contact us directly to see if we are able to rectify or/and resolve your issue amicably. We would hope that after this you feel that we have handled your personal data in accordance with our policy and the law. However, you may also lodge a complaint with the data protection authority.

Our cookie policy

For the list of web site cookies we collect see the List of cookies we collect section.

How we use cookies

These are small text files sent to your device in order to identify your browser and to store information and settings.You can opt to not receive these by updating your browser settings, but your use of our site will be adversly affected  

Types of cookie we use include:

Web site cookies neccessary for the site to work as intended, such as to authenticate users or offer site features 

Functional cookies to recognise when you return to our site and recall preferences etc.

Traffic logging cookies to count visits, identify which pages are being used and how visitors move around the site. This helps us analyse data about web page traffic and improve our web site in order to tailor it to customer needs.

Third party cookies to support additional functions on our site such as when you use social sharing actions incl. facebook, like, twitter, tweet, google+, pinterest, linked in 

Third party web analytics such as Google Analytics and Facebook Pixel, may also utilize cookies to collect information and help analyse how our site is used. For example a Google Analytics cookie used on our site, Google advertising cookies used on third party sites and other third party identifiers may be used to analyse site visitors. 

List of cookies we collect

The table below lists the cookies we collect and what information they store.

COOKIE nameCOOKIE Description
CART The association with your shopping cart.
CATEGORY_INFO Stores the category info on the page, that allows to display pages more quickly.
COMPARE The items that you have in the Compare Products list.
CURRENCY Your preferred currency
CUSTOMER An encrypted version of your customer id with the store.
CUSTOMER_AUTH An indicator if you are currently logged into the store.
CUSTOMER_INFO An encrypted version of the customer group you belong to.
CUSTOMER_SEGMENT_IDS Stores the Customer Segment ID
EXTERNAL_NO_CACHE A flag, which indicates whether caching is disabled or not.
FRONTEND You sesssion ID on the server.
GUEST-VIEW Allows guests to edit their orders.
LAST_CATEGORY The last category you visited.
LAST_PRODUCT The most recent product you have viewed.
NEWMESSAGE Indicates whether a new message has been received.
NO_CACHE Indicates whether it is allowed to use cache.
PERSISTENT_SHOPPING_CART A link to information about your cart and viewing history if you have asked the site.
POLL The ID of any polls you have recently voted in.
POLLN Information on what polls you have voted on.
RECENTLYCOMPARED The items that you have recently compared.
STF Information on products you have emailed to friends.
STORE The store view or language you have selected.
USER_ALLOWED_SAVE_COOKIE Indicates whether a customer allowed to use cookies.
VIEWED_PRODUCT_IDS The products that you have recently viewed.
WISHLIST An encrypted list of products added to your Wishlist.
WISHLIST_CNT The number of items in your Wishlist.
__utma Unique visitors to our site updated for each page viewed
__utmb Individual session/visits to our site updated for each page viewed
__utmx The website variation used for Web Optimization and consistent user experience
__utmz Type of referal used to reach our site