We love to serve our customers and we want you to be informed about what we do with your personal data.  This Privacy Notice will let you know what happens to your personal data and how we keep it safe and secure. 
We’ll update this Privacy Notice from time to time, so please do check back in to stay informed.

Who are we?

We are Cream Cornwall, Our Registered Address is 51, Church Street, Falmouth, Cornwall, TR11 3DS, Our Company Registration Number is 09936453 and our ICO Registration Number is ZA755036.  We are a Data Controller as defined by the General Data Protection Regulation and the Data Protection Act 2018. 
You can contact us on 01326 450840 or email us at info@creamcornwall.co.uk

What about your Personal Data?

 When you visit our website: We use cookies on our website.  Some of these cookies are necessary to ensure that the website works correctly, and other cookies require your consent.  You can find out more about our cookies and how you can manage your consent in our cookie policy here.  Our website is on the Shopify platform and the personal data held on it is held securely and only accessible by employees of Cream Cornwall and a few organisations who we work with when strictly necessary.

 When you purchase from our website: we will process your name, billing/delivery address, email address, phone number and payment details.  This is so we can fulfil your order and our contract to you.
You may wish to register an account on our website, in which case, we will keep a record of your purchase history.

 When you purchase from one of our shops: We will process your payment details via our payment processors in a safe and secure way so that we can fulfil our contract to you.

 We’ll keep records of purchases for 7 years according to HMRC guidelines on our online secure system.  Any paper records are shredded when no longer needed.

 When you join our marketing list: We will collect your name and email address.  If you are prospective customer, this will be by your consent, via our website.  If you are a customer of ours, you’ll be on the list because we have a legitimate interest in sending you marketing communications.  In either case, you can opt out at any time. 

 When you are on one of our marketing list, we will keep your personal data until you opt out of us sending you marketing emails.  We regularly review our email marketing list and if you haven’t opened our emails or emails have bounced, we’ll assume that you no longer wish to hear from us, and we will move your name to our suppression list.  You can always opt back in if you’d like to hear from us again.

 If you send us an enquiry via email, social media or the website: We will answer your enquiry and enter into correspondence with you.  We’ll keep this as long as is necessary and then for a further 12 months.

What communications will you receive from us?

 Non-Marketing Communications

 If you have placed an order with us:  we might contact you by phone, text or email to let you know how your order is progressing, if there’s an issue or when you expect delivery.

 Marketing Communications

 If you’re one of our customers: we’d love to send you updates on new products or special offers. When you purchase, we’ll check with you that you’re happy to be on our list, if you leave the box unticked, we’ll make sure that you are opt out of our marketing communications. 

 If you’ve not purchased anything from us yet: you are welcome to subscribe to our email marketing list where we’ll keep you in the loop about special promotions, events and workshops.

 If you are on our email marketing list, and you decide to opt out, your data will then go onto our ‘suppression’ list which means that we won’t email you again by mistake.

We use social media sites such as Pinterest, Facebook, Twitter and Instagram.  We occasionally use paid advertising within these platforms.  If we use custom audiences and transfer your personal data from our database, we will only do this with your express consent.  If you choose to follow us on our social media sites, we will see your name and such details as you choose to disclose.

 We use social plugins on the website product pages which allow you to share products with your friends and families.  These buttons are deactivated by default and only activated once you click on them.  When you click on these buttons your personal data will be transferred to the plugin provider.  This will include IP addresses and may be used to serve you relevant ads.

 We will use other online advertising such as Google Ad Words, however you are able to manage your cookie preferences on our cookie tool.

 We use segmentation in our email marketing to make sure that messages are tailored to you.  We’ll be able to see how successful our email campaigns are by gathering data such as open rate and click through rate.  This helps us to improve our service to you.

 

  1. Who do we share your data with?

 

We are very careful about who we share your personal data with.  We make sure that the organisations we work with take your personal data as seriously as we do. We would never share your data with third parties for marketing activity without your express consent.

 

 

The organisations we share data with are:

Couriers, IT Consultants, Our Website platform, EPOS system and Webhosts, Marketing Consultancy, Email Marketing Platform, our Accountant, Xero, our accounting package and Solicitor (if required).  We use DropBox, Trello and GSuite within the business to communicate and make sure we run efficiently.

 

The Payment Processors we use are:

Stripe, PayPal, ClearPay, and Payment Sense.  When you provide us with your credit card information, we follow PCI-DSS requirements and your information is encrypted using SSL technology to ensure it is secure.

If you choose to pay by LayBuy, Klarna or Clearpay, your Personal Data will be passed on so that payment can be arranged.  You will then subject to the companies terms and Privacy Notice.

 

Who do we share your data with?

 We are very careful about who we share your personal data with.  We make sure that the organisations we work with take your personal data as seriously as we do. We would never share your data with third parties for marketing activity without your express consent.

 The organisations we share data with are:

Couriers, IT Consultants, Our Website platform, EPOS system and Webhosts, Marketing Consultancy, Email Marketing Platform, our Accountant, Xero, our accounting package and Solicitor (if required).  We use DropBox, Trello and GSuite within the business to communicate and make sure we run efficiently.

 The Payment Processors we use are:

Stripe, PayPal, ClearPay, and Payment Sense.  When you provide us with your credit card information, we follow PCI-DSS requirements and your information is encrypted using SSL technology to ensure it is secure.

If you choose to pay by LayBuy, Klarna or Clearpay, your Personal Data will be passed on so that payment can be arranged.  You will then subject to the companies terms and Privacy Notice.

 Our Social Media:

We have the following accounts: Pinterest, Twitter, Instagram, Linkedin and Facebook.  You can find a copy of our Privacy Notice on our Facebook Page.

 In the event that Cream Cornwall sells or transfers some or all of its assets, your personal data may be transferred. 

 Do we transfer your personal data outside of the UK/EEA?

 The systems, apps and third parties we use that are outside of the UK/EEA have the proper safeguards in place.  Trello and DropBox have servers that are based in the USA, however, these organisations have signed up to EU/US Privacy Shield.

What are your rights

 You have a right:

 To be Informed about how we process your personal data

  • To have access to your personal data
  • To have any necessary rectification of your personal data made
  • To have your personal data erased in certain circumstances
  • To have your personal data copied and sent to a third party (portability)
  • To object to us processing your personal data (eg: you can withdraw your consent to marketing communications)
  • To restrict our use of your personal data
  • You have a right to know about automated processing (We don’t do any automated processing)

    What to do if you have a question

 If you wish to exercise any of your rights, please contact us in the first instance on info@creamcornwall.co.uk

You can get in touch with the ICO directly here

Data Protection Legislation relating to this Privacy Notice:

We will update this privacy notice from time to time, so please check back to see what has changed.