Our website and other booking systems provides you with the ability to order products and services as well as to make enquiries and request information about our products and services. In order for us to provide you with the website, other booking and ordering facilities and our services we may need to collect personal information about you.
This website is owned and operated by The Creation Station Limited (Company No. 5249876) whose registered office is at Unit 16 Woodbury Business Park, Exeter, EX5 1AY.
If you have any comments or queries about this website or the use of your data, please contact email@example.com. We are a franchise business which means that our services are usually delivered by a business in your area, operating in accordance with our standards and principles. We call these people ‘Local Leaders’ and we and they share your data. This Policy also applies to them and to the data they collect about you.
This is referred to again later in this document. However, throughout this Policy ‘us’ or ‘we’ refers to both The Creation Station and our local leaders.
We last updated this Privacy Statement on 2 May 2018 in line with GDPR.
Personal Information we collect about you
What information we collect about you
We collect information about you in two different categories:
Personal Information you give us
We may collect personal information about you when you:
Personal Information we collect automatically
When you visit our website or use our services, we may collect certain information automatically such as:
How we use your Personal Information
To provide our website, process your request for information or your request for products or services, we may use your information in the following ways:
Our legal basis for using your information
The law only allows us to use your personal information in certain limited circumstances. We have listed these below and what information they allow us to process.
1.) Where you have consented to us using your personal information
When you submit information to us on our website, we will process that information in order to comply with your request for further information. We will also provide you with our newsletter if you have requested it.
2.) Where we need to perform the contract we have entered into with you
Examples of how we may use your information in order to comply with a contract that we have entered into with you:
3.) Where it is necessary for our legitimate interests
We may provide you with marketing information about our own products and services similar to those that you have purchased or enquired about (unless you tell us to stop) and in any event only for a reasonable time period, usually 6 months or a year in case of birthdays.
4.) Where we need to comply with a legal obligation
An example of how we may use your information to fulfil a legal obligation:
We may provide you with information about products, services, special offers, and other news where we feel these may interest you. We may use your information for market research and analysis including profiling so that we can ensure that we tailor our offers to your likes and needs.
Depending on what contact information you have given to us, we may contact you by email or post.
You can opt out of such marketing at any time and if you wish to do so, please email us at firstname.lastname@example.org.
Sharing your Personal Information
We share our data with Local Leaders and they, similarly, share their data with us. We do this so that they can deliver the services, products and information that you have requested. They are not, technically Data Processors but Joint Controllers. However, they, and we, all abide by this one Policy.
Other third parties
We may share your information with certain other third parties including:
We work with the following organisations:
Legal Requirements and Law Enforcement
We may also disclose your personal information to third parties:
Third Party Privacy Policies
Where we store your Personal Information
Storage of Personal Information
We are committed to ensuring that our suppliers have appropriate technical, administrative and physical procedures in place to ensure that your information is protected against loss or misuse. All personal information you provide to us is stored on our secure servers or on secure servers operated by a third party located in the EEA.
All third parties who provide services or software to us are required to sign a contract requiring them to have appropriate technical, administrative and physical procedures in place to ensure that your information is protected against loss or misuse.
Retention of information
We only hold your personal information for as long as necessary for the purposes for which we collected your information.
We have a retention policy which lays down timescales for the retention of information. Customer data retention periods can be found below:
Type of Documents
Description of Document
Name and contact details of people expressing interest in our goods or services.
Up to 6 months from last contact or unsubscribe received.
Name and contact details of all customers including emails, addresses and payment information
7 Years after last order.
Name and email
6 months from the last email - or 30 days max from an unsubscribe received
If you chose to send us information via email, we cannot guarantee the security of such information until it is delivered to us.
Access to information
You have the right to access information that we hold about you. If you wish to receive a copy of the information that we hold, please contact at email@example.com or write to us at the address above.
Changing or deleting your information
You can ask us at any time to change, amend or delete the information that we hold about you or ask us not to contact you with any further marketing information. You can also ask us to restrict the information that we process about you.
You can request that we change, amend, delete your information or restrict our processing by emailing us at firstname.lastname@example.org.
Right to prevent Automated decision making
You have a right to ask us to stop any automated decision making. We do not intentionally carry out such activities, but if you do have any questions or concerns we would be happy to discuss them with you and you can contact us at email@example.com.
Transferring Personal Information
You have the right to request that your personal information is transferred by us to another organisation (this is called “data portability”). Please contact us at firstname.lastname@example.org with the details of what you would like us to do and we will try our best to comply with your request. Ii may not be technically feasible, but we will work with you to try and find a solution.
If you have been through the internal complaints procedure and are still not happy with the result, then you have the right to complain to the Information Commissioner’s Office. They can be contacted as follows:
Address: Information Commissioners Office
How to Contact us