PRIVACY POLICY FOR ALIENOR CROS LTD
We are on a mission to champion craftsmanship through Artfully Crafted, a platform dedicated to spotlighting the current generation of master makers and inspiring the next. We also want to look after and keep your personal information secure.
This privacy notice tells you what to expect when we collect personal information from you. It also explains how we will store, handle and keep your personal information safe.
Please read the following carefully to understand our practices regarding your personal information and how we will treat it.
This Privacy Policy, together with our terms and conditions and cookie policy explains how and why we use the information we collect about you. It also sets out how your personal information will be processed, stored and used when you visit our website.
We keep our Privacy Policy under regular review to make sure it is up to date and accurate.
It is important that the personal information we hold about you is accurate and current. Please keep us informed if your personal information changes during our relationship with you.
Important Information About Who We Are:
Artfully Crafted and alienorcros.com is curated by Aliénor Cros who is an interior designer based in London. Aliénor operates as Alienor Cros Ltd and will be referred to as “we,” “us” and “our,” in this policy.
We are the controller for the personal information we process unless otherwise stated and are responsible for your personal information.
We have registered with the ICO (reg. no. ZB898017)
You can contact us by email: info@alienorcros.com
General information
All personal information we collect or are provided with will only be held and stored in accordance with this Privacy Policy and the UK General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018 and any other legislation relating to the protection of personal information (data protection laws).
Changes to our Privacy Policy
Any changes we make to our Privacy Policy in the future will be posted on this page and, where appropriate, notified to you by e-mail.
Please check back frequently to see any updates or changes to our Privacy Policy.
Third-party Links
This website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements or policies. When you leave our website, we encourage you to read the Privacy Policy of every website you visit.
The Information That We Collect, Use and Purpose
We use different methods to collect information from and about you.
We collect personal information to provide you with services. We also collect personal information when you visit our website or contact us by email or social media.
We collect and process information about our clients, customers, suppliers, subcontractors, stake holders, business partners or joint venture partners in order to carry out our obligations arising from any contracts entered into between you and us and to provide you with the information, products and services that you request from us.
We also collect personal information when you are a supplier or retailer, or we have a commercial contract with you.
Personal Information That We Collect and Process.
When you provide personal information to us, we will treat that information in accordance with this Privacy Policy.
Personal information or personal data, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).
Most of the personal information we process is provided to us directly by you for the purpose of providing you with our services.
We collect and process your personal information through your use of this website, including any data you may provide through this website, or when you correspond with us by phone, email or otherwise.
We also collect your personal information when you place an order for services, search for a product or service, participate in discussion boards or other social media functions on our website, or enter a competition, promotion, or survey, and when you report a problem with our website.
We collect or use the following information to provide services and goods, including delivery:
• Names and contact details
• Addresses
• Date of birth
• Purchase or account history
• Payment details (including card or bank information for transfers and direct debits)
• Website user information (including user journeys and cookie tracking)
• Photographs or video recordings
• Information relating to compliments or complaints
We collect or use the following information for service updates or marketing purposes:
• Names and contact details
• Addresses
• Marketing preferences
• Location data
• IP addresses
• Website and app user journey information
• Records of consent, where appropriate
We collect or use the following information to comply with legal requirements:
• Name
• Contact information
• Financial transaction information
We collect or use the following personal information for dealing with queries, complaints, or claims:
• Names and contact details
• Address
• Account information
• Customer or client accounts and records
• Financial transaction information
• Correspondence
This list is not exhaustive, and, in specific instances, we may need to collect additional data for the purposes set out in this Privacy Policy.
Our website is not intended for children and our website does not knowingly collect data relating to children.
Payment Card information:
We may process your personal information to process any payments made for the provision of services. The information may include information for identification and verification, such as your name, credit, debit or other card number, card expiration date, and CVV code.
Any payment transactions carried out by us, or our chosen third-party provider of payment processing services will be kept secure and encrypted where possible.
Information Received from Third Parties
This is information we receive about you from a third party, for example suppliers, subcontractors, stake holders, business partners or joint venture partners and any social media platform, if you use any of the channels advertised on our websites we operate or the other services we provide from time to time. We will only use this information and the combined information where we have a lawful basis.
We may combine information received from other sources with information you give to us and information we collect about you.
We work closely with third parties (including, for example, business partners, sub-contractors in technical, payment and delivery services, advertising networks, analytics providers, search information providers, and creative agencies.
Where your Information is received by us and you have not received a copy of this Privacy Policy, we will notify you when we receive information about you from them and the purposes for which we intend to use that information.
Any data obtained from third parties will be kept in accordance with this Privacy Policy, and with any additional restrictions imposed by the third party that shared your personal information.
If You Fail to Provide Personal Information
Where we need to collect personal information by law, legitimate interest or under the terms of a contract we have with you, and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you. In this case, we may have to cancel a service you have with us, but we will notify you if this is the case at the time.
How We Use the Information We Collect
The law on data protection sets out a number of different reasons for which a company may collect and process your personal information.
We will only use your personal information when the law allows us to do so.
We collect and process personal information about our clients, customers, suppliers, subcontractors, stake holders, business partners or joint venture partners in order to carry out our obligations arising from any contracts entered into between you and us and to provide you with the information, products and services that you request from us.
We also use personal information to provide training and workshops and to report on tenders, bids, and projects.
Lawful Basis for Processing Personal Information license
The lawful bases that we most commonly use to collect and process your personal information are:
- Where you have consented before the processing.
- Where we need to perform a contract, we are about to enter or have entered with you.
- Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
- Where we need to comply with a legal or regulatory obligation
In certain circumstances, we need your personal information to comply with our contractual obligations or to pursue our legitimate interests in a way which might be reasonably expected as part of running our business. For example, in order to deliver the services to you, we need to use the information you provide us to enable us to provide those services.
Whenever you have given us your consent to use your personal information, you have the right to change your mind at any time and withdraw that consent. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent.
Marketing
We strive to provide you with choices regarding certain personal information uses, particularly around marketing and advertising.
If you have given your consent to receive marketing emails you can withdraw this at any time, or if we are relying on our legitimate interests to send you marketing you can object. In either case, just let us know. If you have received a direct marketing email from us and no longer wish to do so, please contact us via info@alienorcros.com.
Cookies
When you visit our website, we may collect certain information by automated means, such as using cookies.
A cookie is a piece of data stored locally on your computer containing information about your activities on the Internet. Each website can send its own cookie to your web browser if your browser's preferences allow it. Many websites do this whenever a user visits their website in order to track online traffic flows. For more information about our use of cookies please see our Cookie Policy.
Profiling and/or Automated Decision Making
Unless otherwise agreed with you, we will not use any of your personal information for automated decision-making or profiling.
Information We Share
We only ever share your personal information with trusted third parties. We will share personal information with our third party service providers, agents, subcontractors and other organisations for the purposes of providing services to us or directly to you on our behalf.
We may share your information with selected third parties including:
● with partners, including business partners, distributors, suppliers and sub-contractors for the performance of any contract we enter into with them or you;
● with our IT providers, our marketing service provider, and / or legal advisors;
● advertisers and advertising networks that require the data to select and serve relevant adverts to you and others; and
● analytics and search engine providers that assist us in the improvement and optimisation of our website.
Where personal information is shared with a managed service provider or other third-party supplier, we work closely with them to ensure that your personal information is secure and protected at all times. We do not allow our third-party service providers to use your personal information for their own purposes and only permit them to process your personal information for specified purposes and in accordance with our instructions.
Our contracts with third parties make it clear that they must hold personal information securely, abide by the principles and provisions of data protection rules, and only use information as we instruct them to. In all instances where we disclose your information to third parties, we will ensure that your information is appropriately protected. If we stop using their services, any of your personal information held by them will either be deleted or rendered anonymous.
We may also disclose your personal information to comply with a regulatory or legal duty, or if it is necessary to disclose personal information in connection with an investigation of suspected or actual fraudulent activity or is based on a lawful disclosure request.
We may also disclose personal information where such disclosure is necessary to protect the safety or security of any persons, and/or otherwise as permitted under applicable law.
We will never:
● Sell your personal information to a third party.
● Share your personal information with a third party for marketing purposes without your consent.
Where Your Personal Information May Be Processed
Your personal information will be stored on systems with technical and organisational security measures and controls located within the UK.
Sometimes we will need to share your personal information with third parties and suppliers outside the UK such as Europe and the USA.
If we do this, we have procedures in place to ensure your personal information receives the same protection as if it were being processed inside the UK. For example, our contracts with third parties stipulate the standards they must follow at all times.
Any transfer of your personal information will follow applicable laws, and we will follow the guiding principles of this Privacy Policy.
How Long We Will Retain Your Personal Information
We will only retain your personal information for as long as is necessary for the purpose or purposes for which we have collected it.
In addition, we limit access to your personal information to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal information on our instructions, and they are subject to a duty of confidentiality.
Details of retention periods for different aspects of your personal information are available in our retention policy which you can request by contacting us.
In some circumstances we will anonymise your personal information (so that it can no longer be associated with you) for analytical or statistical purposes, in which case we may use this information indefinitely without further notice to you.
Data Security
We work hard to keep your information safe. We use a combination of technical, administrative, and physical controls to maintain the security of your personal information and protect against accidental, unlawful or unauthorised destruction, loss, alteration, access, disclosure or use.
All information you provide to us is stored on our secure servers or within secure filing systems. Some of the controls we have in place to protect your personal data include technological controls such as firewalls, user verification, strong data encryption. We utilise industry “good practice” standards to support the maintenance of a robust information security management system. Any payment transactions will be encrypted.
We have put in place procedures to deal with any suspected personal information data breach and will notify you and any applicable regulator when we are legally required to do so.
Your Rights
You are able to exercise your rights which include:
Withdraw your consent
Where our processing of your personal information is based on your consent , you have the right to withdraw your consent at any time. If you do decide to withdraw your consent, we will stop processing your personal data for that purpose.
Your Right to be Informed
We aim to be transparent within our Privacy Policy and provide you with information about how we use your personal information.
Your Right to Object
In some circumstances you can stop the processing of your personal information for reasons connected to your individual situation. We must then do so unless we believe we have a legitimate overriding reason to continue processing your personal information.
Where your details are used for marketing, you can opt out at any time. You are able to unsubscribe from marketing on each contact or you can contact us to object to any processing.
Your Right to Rectification
You have the right to request the correction of your personal information when it is incorrect, out of date or incomplete. If you notify us that the personal information, we hold is complete or inaccurate we will correct or complete the information as soon as possible.
Your Right to Erasure or the Right to be Forgotten
You have the right to request that your personal information be deleted; including if we no longer need it for the purpose we collected it, you withdraw your consent or you object to its processing.
Following your request, we will erase your personal information without undue delay unless the continued retention is necessary and permitted by law. If we make the personal information public, we shall take reasonable steps to inform other data controllers processing about your erasure request.
Your Right to Restrict Processing
You have the right to request that we restrict the processing of your personal information. This can be done in circumstances where we need to verify the accuracy of the information, if you do not wish to have the information erased or you have objected to the processing of the information, and we are considering this request. Once the processing is restricted, we will only continue to process your personal information if you consent, or we have another legal basis for doing so.
Your Right to Access
You have the right to access the personal information we hold about you. Any access request will usually be free of charge and responded to within one month. We will endeavour to provide information in the format requested, but we may charge you a reasonable fee for additional copies.
Your Right to Data Portability
You have the right to receive a copy of your personal information which you gave to us. The copy will be provided in a commonly used and machine-readable format. You can also have it transmitted directly from us to another data controller, where technically possible.
The right not to be subject to automated decision making and profiling.
You have the right to not be subject to solely automatic decisions (i.e., decisions that are made about you by computer without any human input) in relation to any processes that have a legal or similarly significant effect on you.
You will be notified if we make a solely automated decision which produces a legal effect or significantly affects you.
When you request to exercise your rights
You will not have to pay a fee to exercise any of the rights listed above. However, we may charge a reasonable fee if your request is clearly unfounded or excessive, including where requests are repetitive. Alternatively, we could refuse to comply with your request in these circumstances.
We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal information or to exercise any of your other rights. This is a security measure to ensure that personal information is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
We try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
How can we help?
If you have any questions about our use of your personal information, you can make a complaint to us by contacting us via email on info@alienorcros.com.
For further information on data protection please visit the Information Commissioner Office (ICO) website.
The Information Commissioner Office regulates data protection. If you feel that your data has not been handled correctly, or you are unhappy with our response to any requests you have made to us regarding the use of your personal information, you have the right to lodge a complaint with the Information Commissioner’s Office.
You can contact them by calling 0303 123 1113 or visit the website.