Security & Privacy

Privacy Policy Statement

This document sets out the privacy and cookies policy of Laika Limited trading as Creoly("we"/"us" and "our") and explains how we use your personal information (meaning any information about you which is personally identifiable such as your name, address, telephone number or email address and is generally referred to throughout this policy as "Your Information") collected through www.creoly.com (the "Website"). This Privacy Policy together with our terms of use sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.

Who are We?

Laika Limited trading as Creoly is a company registered in Jersey, Channel Islands under registration number 110205 and our registered address is Denvil, La Rue De L'Eglise, St Peter, Jersey JE3 7AG

Information We Collect

We may collect and process the following data about you:

details of transactions you carry out through our Website and of the fulfilment of your orders;
information that you provide by filling in forms on our Website or information that you otherwise provide to us. This includes information provided at the time of registering to use our Website (including your email address, name, address and/or telephone number) or requesting further information. We may also ask you for information when you report a problem with our site;
if you contact us we may keep a record of that correspondence.

How We Use Your Information

We use your information in the following ways:

to ensure that content from our site is presented in the most effective manner for you and your computer;
to provide you with information, products or services that you request from us or which we feel may interest you, where you have consented to be contacted for such purposes;
to carry out our obligations arising from any contracts entered into between you and us;
to notify you about changes to our service;
if you do not want us to use your data in this way please update your marketing preferences by contacting us at hello@creoly.com

Cookies

We may collect information where available such as your IP address, operating system and browser type, for system information. This is statistical data about our users' browsing actions and patterns and does not identify any individual.

Please consult our Cookie Policy for further information about the us of cookies on creoly.com

Will We Share Your Information With Third Parties?

We may share your personal data with the parties set out below for the purposes set out in this privacy policy. We may also share your personal data if the law otherwise allows it.

if we sell or buy any business or assets, in which case we may disclose our personal data to the prospective buyer or seller of such business or assets;
if Laika Limited trading as Creoly or substantially all of its assets are acquired by a third party, in which case personal data held by Laika Limited trading as Creoly will be one of the transferred assets;
if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms of use and other agreements; or to protect the rights, property, or safety of Laika Limited trading as Creoly, our customers or others. This includes exchanging information with other companies for the purposes of fraud protection and credit risk reduction.

Will We Transfer Your Information Overseas?

The information that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area ("EEA"). It may also be processed by staff operating outside the EEA who work for us or one of our suppliers. Such staff may be engaged in, among other things, the fulfillment of your order, the processing of your payment details and the provision of support services. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.

Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

Third Party Links

This website may include links to third-party websites, plug-ins and applications (for example, the ability to sign in with Facebook). Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit.

Data Retention

We will only keep your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

Your legal Rights

If the General Data Protection Regulation applies to you because you are in the European Union, you have rights under data protection laws in relation to your personal data:

The right to be informed – that’s an obligation on us to inform you how we use your personal data (and that’s what we’re doing that in this privacy policy);

The right of access – that’s a right to make what’s known as a ‘data subject access request’ for copy of the personal data we hold about you;

The right to rectification – that’s a right to make us correct personal data about you that may be incomplete or inaccurate;

The right to erasure – that’s also known as the ‘right to be forgotten’ where in certain circumstances you can ask us to delete the personal data we have about you (unless there’s an overriding legal reason we need to keep it);

The right to restrict processing – that’s a right for you in certain circumstances to ask us to suspend processing personal data;

The right to data portability – that’s a right for you to ask us for a copy of your personal data in a common format (for example, a .csv file);

The right to object – that’s a right for you to object to us processing your personal data (for example, if you object to us processing your data for direct marketing); and

Rights in relation to automated decision making and profiling – that’s a right you have for us to be transparent about any profiling we do, or any automated decision making.

These rights are subject to certain rules around when you can exercise them. You can see a lot more information on them, if you are interested, on the UK Information Commissioner’s Office website.

If you wish to exercise any of the rights set out above, please contact us.

You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

We have appointed a data privacy manager who is responsible for overseeing questions in relation to this privacy policy. If you have any questions about this privacy policy, including any requests to exercise your legal rights, please contact the data privacy manager using the details below.

You have the right to make a complaint at any time to the Information Commissioner's Office (“ICO”), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.

Changes to this Privacy and Cookies Policy

The General Data Protection Regulation is new and the ICO is still issuing new bits of guidance about how businesses should follow it. So, you may see little updates to our privacy policy over the coming months. Be sure to check in and have read every now and then. Thank you.

This Privacy and Cookies Policy was last updated on 01/05/2018.

How to contact us

If you have any questions about this privacy policy, or would like to exercise any of your rights, please email us at hello@creoly.com or write to us with your letter addressed to: Data Privacy Manager, Creoly, Denvil, La Rue De L'Eglise, St Peter, Jersey JE3 7AG