Privacy Policy & Terms and Conditions

Creativityplus.uk Limited
Effective Date: 13/02/2025

1. Introduction

Creativityplus.uk Limited ("Company," "we," "us," or "our") is committed to safeguarding your privacy and ensuring that your personal data is protected. This Privacy Policy outlines how we collect, use, disclose, and secure your information when you interact with us through our website (creativityplus.uk), visit our physical premises, or place orders via phone. By using our services, you agree to the data practices described in this policy. If you do not agree with any part of this policy, please refrain from using our services.

2. Data We Collect

We collect various types of data to provide and improve our services, enhance user experience, and comply with legal obligations.

2.1 Personal Data

Personal data refers to any information that can directly or indirectly identify an individual. We may collect the following types of personal data:

• Full Name (first name, last name, middle name, if applicable)

• Billing and Shipping Address (including postal code and country)

• Email Address (for communication and service updates)

• Phone Number (mobile and/or landline for customer support and notifications)

• Payment Information (handled securely through third-party payment processors; we do not store full payment details)

• Date of Birth (to verify age for restricted services and ensure compliance with legal requirements)

• Emergency Contact Details (to ensure safety during certain activities or events)

2.2 Non-Personal Data

We also collect non-personally identifiable information, which helps us improve our services and understand user preferences. This includes:

• Browser Type and Version (for optimizing website performance)

• IP Address (for security and analytics purposes)

• Device Information (such as operating system, screen resolution, and device type)

• Website Usage Data (e.g., pages visited, time spent on the site, referral sources, click patterns)

2.3 Sensitive Data

In specific cases, we may collect sensitive data with your explicit consent:

• Allergy Information (if attending events involving food to ensure safety and prevent allergic reactions)

3. How We Collect Your Data

We collect your data using various methods, including:

• Online Forms: When you submit inquiries, register for events, or book services through our website.

• Physical Forms: When you visit our physical premises and complete registration, consent, or feedback forms.

• Phone Orders: When you place an order or make inquiries over the phone, where details are recorded for transaction processing.

• Automatic Collection Tools: We use cookies, web beacons, and analytics tools to track website performance and user interactions. You can manage your cookie preferences via your browser settings.

4. Purpose of Data Collection

We collect and process your data for the following purposes:

• Service Provision: To deliver our products and services, including processing bookings, orders, and transactions.

• Customer Support: To respond to inquiries, provide assistance, and improve our customer service experience.

• Communications & Marketing: To send service-related notifications, promotional offers, newsletters, and updates (you can opt-out anytime).

• Legal & Regulatory Compliance: To meet legal obligations, including tax reporting, age verification, and fraud prevention.

• Security & Fraud Prevention: To protect against unauthorized transactions, ensure data security, and safeguard our business interests.

• Service Improvements: To analyze user feedback and interactions, improving website functionality and overall customer experience.

5. Legal Basis for Processing Data

Our processing of personal data is based on the following legal grounds:

5.1 Contractual Necessity

We process personal data when it is required to fulfill a contract with you, including providing requested services, processing transactions, or responding to inquiries related to contractual obligations.

5.2 Legitimate Interests

• Processing is carried out to improve our services, ensure the security of our operations, prevent fraudulent activities, and maintain business continuity.

• We conduct analysis and research to optimize our services and personalize user experiences while ensuring data protection.

5.3 Legal Compliance

• We process data to comply with applicable legal, regulatory, and tax obligations, including financial reporting, fraud prevention, and compliance with court orders.

• When required by law enforcement or government authorities, we may disclose personal data as necessary.

5.4 Consent

• Where applicable, we seek explicit consent before processing your personal data, particularly for direct marketing activities, promotional communications, and voluntary participation in surveys or research.

• You have the right to withdraw consent at any time without affecting prior processing based on granted consent.

6. Data Retention

6.1 Retention Period

Personal data is retained only as long as necessary to achieve the specific purposes for which it was collected, or to comply with legal and regulatory obligations.

6.2 Data Minimization

We regularly review our data retention practices to ensure only relevant information is retained and outdated or unnecessary data is securely disposed of.

6.3 Data Disposal

Once the retention period expires, we employ industry-standard procedures to delete, anonymize, or securely dispose of personal data to prevent unauthorized access or misuse.

7. Data Sharing & Third-Party Disclosure

• No Selling or Trading: We do not sell, rent, or trade personal data to third parties under any circumstances.

• Service Providers & Processors: We may share data with trusted third-party service providers who assist us with essential services such as payment processing, IT infrastructure, email communications, customer support, and analytics, subject to strict confidentiality agreements.

• Legal & Regulatory Authorities: We may disclose personal data when required by law, such as in response to legal proceedings, regulatory requirements, fraud investigations, or court orders.

• Business Partners & Affiliates: Where applicable, we may share information with business partners for co-branded promotions or events, but only with your explicit consent.

• Corporate Transactions: In the event of a merger, acquisition, or asset sale, your personal data may be transferred to the relevant entity, ensuring continued protection in accordance with this policy.

8. Data Security

We employ multiple layers of security measures to safeguard personal data from unauthorized access, misuse, or loss. These include:

8.1 Physical Security

• Secure storage of physical records in restricted-access facilities.

• Controlled access to sensitive documents, allowing only authorized personnel to handle them.

• Implementation of surveillance systems and security protocols to prevent unauthorized entry or tampering.

8.2 Digital Security

• End-to-end encryption of sensitive data during transmission and storage.

• Secure server environments with firewalls, intrusion detection systems, and malware protection.

• Multi-factor authentication and strict access controls to ensure that only authorized personnel can access personal data.

• Regular security assessments, vulnerability testing, and patch management to prevent cyber threats.

8.3 Policy and Training

• Regular security audits and reviews of internal data protection policies to ensure compliance with evolving regulations.

• Comprehensive employee training on data protection best practices, secure handling of personal information, and cybersecurity awareness.

• Implementation of incident response protocols to promptly detect, report, and mitigate potential data breaches.​​