Privacy Policy
1. Introduction
Creatix UK respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains how we collect, use, store, share and protect personal information when you:
Visit the Creatix website or online shop.
Create or use a customer account.
Purchase CCTV equipment, point-of-sale equipment, software or other products.
Request a quotation.
Contact us with an enquiry.
Request technical support.
Purchase custom website design, software development or another professional service.
Subscribe to marketing communications.
Submit a review, testimonial or other content where these features are available.
This policy also explains your rights under UK data protection law and how you can contact us about your personal information.
This policy is intended to meet the transparency requirements of the UK General Data Protection Regulation, the Data Protection Act 2018 as amended, including amendments introduced by the Data (Use and Access) Act 2025, and the Privacy and Electronic Communications Regulations 2003 where applicable.
UK data protection rules require organisations to explain why personal information is collected, how it is used, who it is shared with, how long it is kept and what rights individuals have.
2. Who We Are
The organisation responsible for the personal information covered by this policy is:
Legal and trading name: Creatix UK
Business address: Unit 1a Louis Street, Hull, HU3 1LY
Privacy email: privacy@creatix.uk
Telephone: 01482 298859
For the purposes of UK data protection law, Creatix UK is normally the data controller for personal information collected through our shop, website, sales, enquiries and customer relationships.
A data controller decides why and how personal information is processed.
References in this policy to “Creatix”, “Creatix UK”, “we”, “us” or “our” mean Creatix UK.
3. When Creatix Acts as a Data Processor
When we provide custom website design, hosting, software development, technical support, CCTV configuration or POS services to another business, we may sometimes process personal information on that business’s behalf.
For example, this may occur if a business customer gives us authorised access to its:
Website customer database.
Booking system.
Point-of-sale system.
Employee or customer records.
CCTV system or recorded footage.
Email account.
Hosting account.
Software database.
Technical logs or backups.
In these circumstances, the business customer will normally be the data controller and Creatix will act as its data processor. We will process the information only as required to provide the agreed service, in accordance with the customer’s documented instructions and the applicable contract or data-processing agreement.
The business customer remains responsible for explaining its own use of personal information to its customers, staff and other individuals.
This Privacy Policy primarily describes the personal information for which Creatix acts as the data controller. Where Creatix acts only as a processor, requests relating to that information may need to be referred to the relevant business customer.
4. What Is Personal Information?
Personal information is information relating to an identified or identifiable individual.
It can include obvious identifiers, such as a person’s name, address and email address, as well as information such as an IP address, customer account number, order history or device information where that information can be linked to an individual.
5. Personal Information We Collect
The information we collect depends on how you use our website, shop and services.
5.1 Identity and contact information
This may include:
Your full name.
Your business or trading name.
Your job title or role.
Your billing address.
Your delivery address.
Your email address.
Your telephone number.
Your preferred method of contact.
The name and contact details of an authorised business representative.
5.2 Customer account information
If customer accounts are available, we may collect:
Your account username or email address.
Authentication and account security information.
Account preferences.
Saved billing or delivery addresses.
Previous orders.
Saved baskets or wish lists where available.
Communication and marketing preferences.
Account creation, login and activity information.
You are responsible for keeping your login information confidential and for notifying us if you believe that your account has been accessed without permission.
5.3 Order and transaction information
When you place an order, we may collect:
Products or services purchased.
Order number.
Order date and value.
Billing and delivery details.
Delivery instructions.
Payment method.
Payment status.
Transaction reference.
Discount or promotional code information.
Refund, cancellation, return or chargeback information.
Courier and tracking information.
Communications relating to the order.
5.4 Payment information
Payments may be processed using Stripe or another payment provider displayed during checkout.
Creatix does not store complete payment card numbers or card security codes in its own shop database. Payment details are entered into or passed securely to the applicable payment provider.
We may receive and retain limited payment information, such as:
The payment status.
Transaction reference.
Amount and currency.
Payment date.
Card type or brand.
The final digits of a card number.
Fraud or security-check results.
Refund or chargeback information.
Stripe may collect transaction information including names, contact details, billing and delivery addresses, payment-method information, purchase amount and payment status. Depending on the activity, Stripe may act as a data processor, data controller or both. Stripe’s own privacy information applies to its independent processing activities.
5.5 Delivery information
To arrange and monitor delivery, we may collect and use:
Recipient name.
Delivery address.
Telephone number.
Email address.
Delivery instructions.
Courier tracking number.
Delivery status.
Details of failed delivery attempts.
Return-to-sender information.
Proof of delivery where provided by the courier.
Where an order is being sent to somebody other than the customer, the customer is responsible for ensuring that they are authorised to provide the recipient’s details and that the recipient is made aware of this Privacy Policy where appropriate.
5.6 Enquiries, quotations and support information
When you contact us, we may collect:
Your name and contact details.
Your business information.
The content of your enquiry.
Products or services you are interested in.
Technical information about your equipment, website or software.
Photographs, screenshots or recordings you send to us.
Support messages and previous communications.
Quote details and project requirements.
Fault, warranty or return information.
Any documents you voluntarily provide.
5.7 Custom website and software project information
When you use our custom web design, hosting or software services, we may receive:
Website content.
Logos, images and branding files.
Product or service information.
Staff or business contact details.
Domain and hosting information.
Website administrator details.
Technical account identifiers.
Database or system configuration information.
Project notes, instructions and correspondence.
Test data.
Data required to migrate, repair or support an existing system.
Customers should not provide live personal information, passwords, special-category information or confidential databases unless it is genuinely necessary and appropriate security arrangements have been agreed.
Where possible, customers should provide anonymised or test data for development and testing.
5.8 Reviews and published content
Where our website allows reviews or testimonials, we may collect:
Your display name.
Rating.
Review or testimonial text.
Photographs or other content you choose to submit.
Information showing whether you purchased the relevant product or service.
Information submitted for publication may be visible to other website visitors. Please do not include unnecessary personal or confidential information in publicly visible content.
5.9 Website and technical information
When you visit our website, our systems may automatically collect:
IP address.
Browser type and version.
Device type.
Operating system.
Screen or device information.
Approximate location derived from an IP address.
Pages visited.
Links or buttons selected.
Time and date of access.
Referring website or search source.
Session information.
Shopping-basket activity.
Login attempts.
Error, diagnostic and security information.
Cookie and privacy preferences.
We use this information to operate the shop, maintain security, diagnose problems and understand how the website is being used.
5.10 Marketing preferences
Where marketing is available, we may record:
Whether you agreed to receive marketing.
The date, time and method of your choice.
The type of communications requested.
Whether messages were delivered or opened, where this feature is used with appropriate permission.
Your unsubscribe or objection request.
6. Special-Category and Criminal-Offence Information
Creatix does not normally need to collect special-category personal information through its online shop.
Special-category information includes information about a person’s:
Health.
Race or ethnic origin.
Religious or philosophical beliefs.
Political opinions.
Trade-union membership.
Genetics.
Biometrics used for identification.
Sex life or sexual orientation.
We also do not normally request information about criminal convictions or offences.
Please do not provide this type of information unless it is genuinely necessary and we have specifically asked you to provide it.
Where special-category or criminal-offence information is genuinely required, we will identify an appropriate lawful basis and any additional legal condition required before processing it.
7. How We Obtain Personal Information
We normally obtain personal information directly from you when you:
Browse our website.
Create an account.
Add products to your basket.
Place an order.
Make a payment.
Request a quotation.
Contact us.
Request support.
Enter into a service agreement with us.
Submit content or a review.
Choose to receive marketing.
We may also receive relevant information from:
Stripe and other payment providers.
Banks, card networks and financial institutions.
Delivery couriers and fulfilment providers.
Website hosting and email providers.
Security and fraud-prevention providers.
A company or organisation you represent.
A person placing an order on your behalf.
A customer giving us authorised access to a system requiring support.
Publicly available business directories, websites or Companies House records.
Professional advisers, insurers or legal representatives.
Law enforcement, courts, regulators or public authorities where legally permitted.
8. Why We Use Personal Information and Our Lawful Bases
UK data protection law requires us to have a lawful basis for each use of personal information.
The lawful bases most relevant to Creatix are:
Performance of a contract.
Taking steps before entering into a contract.
Compliance with a legal obligation.
Legitimate interests.
Consent.
8.1 Processing orders and supplying products
We use your information to:
Accept and process orders.
Confirm product availability.
Take and verify payment.
Send order confirmations.
Package and dispatch products.
Arrange delivery.
Provide tracking.
Process returns, refunds and warranty requests.
Communicate about your purchase.
Our lawful basis is normally that the processing is necessary to enter into or perform a contract with you.
We may also rely on legal obligations for accounting, taxation and consumer-protection records.
8.2 Providing quotations and services
We use your information to:
Understand your requirements.
Prepare quotations.
Discuss possible work.
Enter into service agreements.
Provide website, software, technical or support services.
Manage projects and customer relationships.
Maintain records of completed work.
Our lawful basis is normally taking steps at your request before entering into a contract or performing a contract with you.
8.3 Payment processing and fraud prevention
We use relevant information to:
Process payments.
Confirm that payment has been authorised.
Prevent fraudulent transactions.
Respond to payment disputes.
Process refunds.
Protect our customers and business.
Maintain transaction records.
Our lawful bases are performance of a contract, compliance with legal obligations and our legitimate interests in preventing fraud, protecting our business and securing transactions.
Payment providers, banks and card issuers may carry out their own identity, fraud and security checks under their own legal responsibilities.
8.4 Customer service and technical support
We use relevant information to:
Answer enquiries.
Investigate faults.
Provide technical support.
Resolve complaints.
Manage returns and warranty claims.
Keep an appropriate history of assistance provided.
Our lawful bases are performance of a contract and our legitimate interests in providing customer service, maintaining service quality and resolving problems.
8.5 Website operation and security
We use technical and account information to:
Operate our website and shop.
Maintain shopping baskets and login sessions.
Authenticate users.
Protect customer accounts.
Prevent unauthorised access and malicious activity.
Diagnose faults.
Maintain backups.
Monitor system performance.
Investigate security incidents.
Keep evidence where fraud or misuse is suspected.
Our lawful bases are our legitimate interests in operating a secure and reliable website, performance of a contract where necessary to provide shop functionality, and compliance with legal obligations where applicable.
8.6 Legal and accounting obligations
We may use and retain information to:
Maintain invoices and transaction records.
Comply with tax and accounting requirements.
Respond to lawful regulatory or court requests.
Manage product-safety obligations.
Protect consumer rights.
Establish, exercise or defend legal claims.
Cooperate with lawful fraud or criminal investigations.
Our lawful basis is compliance with a legal obligation and, where appropriate, our legitimate interests in protecting our legal rights.
8.7 Business administration and improvement
We may use information to:
Review business performance.
Understand demand for products and services.
Improve our website and customer service.
Maintain internal records.
Train staff.
Review complaints and service problems.
Develop new products or services.
Manage insurance, professional advice or business restructuring.
Where possible, we use aggregated or anonymised information.
Our lawful basis is our legitimate interests in managing and improving Creatix, provided those interests are not overridden by your rights and interests.
8.8 Marketing
We may send information about Creatix products and services where:
You have specifically agreed to receive it; or
The law permits us to contact an existing customer about our own similar products or services and we have provided an opportunity to opt out.
Where we rely on consent, you may withdraw that consent at any time.
Where the existing-customer or “soft opt-in” rule applies, our UK GDPR lawful basis will normally be legitimate interests. The soft opt-in only applies where the relevant legal requirements are satisfied, including obtaining the contact details directly and offering a clear opportunity to opt out.
We do not sell your contact details to third-party marketing companies.
9. Our Legitimate Interests
Where we rely on legitimate interests, those interests may include:
Operating and developing our business.
Providing effective customer service.
Protecting customers, staff and business systems.
Preventing fraud and misuse.
Maintaining network and information security.
Managing customer accounts.
Improving products and services.
Recovering unpaid amounts.
Maintaining evidence of transactions and communications.
Defending legal rights and claims.
Promoting our own similar products and services where legally permitted.
Maintaining business continuity and backups.
Preventing repeat contact after an unsubscribe or objection request.
Before relying on legitimate interests, we consider the necessity of the processing and balance our interests against the possible effect on the individual.
You may object to processing based on legitimate interests as explained in the section on your rights.
10. When Providing Information Is Required
Some personal information is required so that we can enter into or perform a contract with you.
For example, we may require:
Your name.
Contact information.
Billing information.
Delivery address.
Order details.
Payment confirmation.
You are not legally required to provide this information, but without it we may be unable to:
Accept or deliver an order.
Process payment.
Create a customer account.
Prepare a quotation.
Provide a requested service.
Respond fully to a support request.
Where information is optional, this will normally be clear from the context or form.
11. Who We Share Personal Information With
We do not sell personal information.
We may share information with trusted recipients where reasonably necessary for the purposes described in this policy.
11.1 Payment providers
Payment and transaction information may be shared with:
Stripe.
Banks.
Card issuers.
Card networks.
Other payment-method providers.
Fraud-prevention services.
Payment dispute and chargeback services.
11.2 Couriers and delivery providers
We may give our appointed courier the information needed to:
Deliver an order.
Contact the recipient about delivery.
Provide tracking.
Obtain proof of delivery.
Manage failed delivery attempts.
Return an undelivered parcel.
This will normally include the recipient’s name, address, telephone number, email address, delivery instructions and order or tracking reference.
11.3 Technology and service providers
We may use providers that support our:
Website hosting.
Domain services.
Business email.
File storage.
Backups.
Cybersecurity.
Customer support.
Website maintenance.
Database and server infrastructure.
Accounting and invoicing.
Communications.
Analytics, where enabled with appropriate privacy controls.
These providers may process information on our behalf and are expected to protect it and use it only for authorised purposes.
11.4 Professional advisers
Information may be shared with:
Accountants.
Insurers.
Solicitors.
Tax advisers.
IT and cybersecurity specialists.
Debt-recovery providers.
Other professional advisers.
11.5 Authorities and legal recipients
We may disclose information where reasonably necessary to:
Comply with a legal obligation.
Respond to a court order.
Respond to a lawful request from police, regulators or public authorities.
Report or investigate fraud.
Protect the rights, safety or property of customers, Creatix or others.
Establish, exercise or defend legal claims.
11.6 Business sale or restructuring
If all or part of Creatix is sold, transferred, merged or restructured, relevant information may be disclosed to genuine prospective purchasers, investors and professional advisers.
Any recipient would be required to handle personal information appropriately and consistently with applicable data protection law.
12. International Transfers
Some of our service providers may store or process personal information outside the United Kingdom.
Where this results in a restricted international transfer, we will take reasonable steps to ensure that an appropriate legal mechanism is in place.
This may include:
UK adequacy regulations.
The UK International Data Transfer Agreement.
The UK Addendum to approved standard contractual clauses.
Another legally recognised safeguard.
A permitted legal exception where appropriate.
Where appropriate safeguards are used, any required transfer-risk assessment will also be considered.
UK data protection rules require restricted transfers to be covered by UK adequacy regulations, appropriate safeguards or an applicable legal exception.
You may contact privacy@creatix.uk for further information about the safeguards relevant to your personal information.
13. How Long We Keep Personal Information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet applicable legal, accounting, tax, security and dispute-resolution requirements.
The periods below are our normal guidelines. Information may be kept for a shorter or longer period depending on the circumstances.
Orders, invoices and accounting records
Order, payment, invoice, refund and accounting information will normally be retained for at least six years from the transaction or relevant accounting period.
Some information may be retained for longer where required by tax law, an ongoing investigation, a legal claim or another regulatory requirement.
HMRC generally requires VAT records to be retained for at least six years.
Customer accounts
Customer account information will normally be retained while the account remains active.
If an account is closed, we may retain a limited record for up to six years where required for:
Order records.
Accounting.
Fraud prevention.
Complaints.
Warranty support.
Legal claims.
Information that is no longer required will be deleted or anonymised.
Enquiries and quotations
General enquiries and unsuccessful quotation records will normally be retained for up to 24 months after the most recent meaningful communication.
They may be retained longer where:
The enquiry leads to a contract.
There is an ongoing dispute.
The information is needed to protect legal rights.
You have agreed to continued contact.
Website, software and technical projects
Project contracts, instructions, communications and records will normally be retained for the duration of the project and for up to six years after completion or termination.
Working files, development copies and customer data will be removed when no longer needed, subject to:
Contractual support obligations.
Agreed hosting or maintenance arrangements.
Backup rotation.
Legal record-keeping.
Ongoing disputes.
The customer’s documented instructions where Creatix acts as a processor.
Support requests
Support records will normally be retained for up to three years after the request is closed.
Records linked to a contract, payment, dispute, warranty or legal claim may be retained for up to six years or longer where legally necessary.
Website and security logs
Routine technical and security logs will normally be retained for a limited period, usually no longer than 12 months.
Relevant logs may be retained longer where required to investigate:
Fraud.
A cybersecurity incident.
Unauthorised access.
Misuse of the website.
A payment dispute.
A legal claim.
Marketing information
Marketing information will be retained until you:
Unsubscribe.
Withdraw consent.
Object to direct marketing.
Become inactive under our applicable retention process.
After an opt-out, we may retain a minimal suppression record containing information such as your email address and the date of your request. This is used only to ensure that we respect your choice and do not accidentally add you back to a marketing list.
Complaints and legal disputes
Information relating to a complaint, legal claim, chargeback or dispute may be retained until the issue has been fully resolved and any applicable claim or appeal period has expired.
Backups
Information may remain temporarily within protected backup systems after it has been removed from active systems.
Backup information will not normally be restored or used except where required for disaster recovery, security, legal compliance or system restoration. It will be overwritten or deleted through the normal backup-rotation process.
Anonymised information
We may retain information indefinitely where it has been securely anonymised so that it can no longer identify an individual.
14. How We Protect Personal Information
We use reasonable and proportionate technical and organisational measures designed to protect personal information against:
Unauthorised access.
Accidental loss.
Misuse.
Alteration.
Unauthorised disclosure.
Destruction.
Cyberattack.
These measures may include:
Access controls.
Authentication measures.
Restricted administrator permissions.
Secure hosting.
Software and security updates.
Firewalls and monitoring.
Encrypted transmission where appropriate.
Protected backups.
Staff confidentiality requirements.
Supplier and processor agreements.
Security logging.
Incident-response procedures.
Minimising the information collected and retained.
Access to personal information is limited to people and service providers who reasonably require it for an authorised purpose.
The ICO advises that security measures should be appropriate to the circumstances and risks and should protect the confidentiality, integrity and availability of systems and personal information.
No website, email service or internet transmission can be guaranteed to be completely secure. You should use a strong, unique password and contact us promptly if you believe your account or information has been compromised.
15. Personal Data Breaches
We maintain procedures for identifying, investigating and responding to suspected personal data breaches.
Where legally required, we will notify the Information Commissioner’s Office and affected individuals within the applicable legal timescales.
We may contact you where reasonably necessary to:
Explain a security incident.
Help protect your account.
Recommend changing a password.
Confirm suspicious activity.
Reduce a risk arising from a breach.
16. Cookies and Similar Technologies
Our website uses cookies and similar technologies.
Cookies are small files or identifiers stored on or accessed from a computer, mobile phone or other device.
16.1 Strictly necessary cookies
Strictly necessary cookies may be used to:
Keep the website functioning.
Maintain a shopping basket.
Remember login sessions.
Process checkout.
Protect customer accounts.
Prevent fraud.
Maintain website security.
Remember language, delivery or display preferences where necessary.
Store cookie choices.
Distribute website traffic safely.
These technologies may be used without consent where an applicable legal exception permits them, but we will still provide appropriate information about their use.
16.2 Optional cookies
Subject to the tools actually enabled on our website, optional cookies may be used for:
Website analytics.
Measuring performance.
Remembering optional preferences.
Understanding customer journeys.
Measuring marketing effectiveness.
Personalised advertising.
Optional cookies or similar technologies that require consent will not be activated until you have made an appropriate choice.
The ICO states that website visitors must be told about cookie use and that non-essential cookies generally require an appropriate consent mechanism.
16.3 Managing cookie choices
You can manage optional cookies using the cookie settings provided on our website.
You may also be able to block or delete cookies through your browser. Blocking strictly necessary cookies may prevent parts of the shop from functioning correctly.
Your choice to reject optional cookies will not prevent you from purchasing products, although some optional website features may be unavailable.
Details of the specific cookies currently used, including their provider, purpose and duration, should be available through our cookie settings or separate Cookie Policy.
17. Direct Marketing and Your Absolute Right to Object
We may send marketing about Creatix products or services where we have a lawful basis and the communication is permitted by applicable electronic-marketing rules.
Every electronic marketing message will provide a straightforward way to unsubscribe.
You may stop marketing at any time by:
Selecting the unsubscribe option in a marketing message.
Emailing privacy@creatix.uk.
Calling 01482 298859.
Updating your preferences through your account where this feature is available.
You have an absolute right to object to the use of your personal information for direct marketing. If you object, we will stop using your personal information for that purpose.
We may retain a minimal suppression record so that your objection continues to be respected.
18. Your UK Data Protection Rights
Depending on the purpose and lawful basis for processing, you may have the following rights.
These rights are not all absolute and exceptions may apply.
18.1 Right to be informed
You have the right to receive clear information about how your personal information is collected and used.
This Privacy Policy is intended to provide that information.
18.2 Right of access
You may ask:
Whether we hold personal information about you.
Why we use it.
Who it has been shared with.
How long it will be retained.
For a copy of the relevant personal information.
This is commonly known as a subject access request.
18.3 Right to rectification
You may ask us to correct inaccurate personal information or complete information that is incomplete.
18.4 Right to erasure
You may ask us to delete personal information in certain circumstances.
This right is not absolute. We may need to retain information where it remains necessary for:
Legal compliance.
Accounting and taxation.
Fraud prevention.
The establishment, exercise or defence of legal claims.
Completion of an existing contract.
Another lawful purpose.
18.5 Right to restrict processing
You may ask us to restrict the use of your personal information in certain circumstances.
When processing is restricted, we may continue to store the information but will not normally use it for other purposes unless legally permitted.
18.6 Right to data portability
In certain circumstances, you may ask to receive personal information you provided to us in a structured, commonly used and machine-readable format.
This right normally applies where processing is automated and based on consent or contract.
18.7 Right to object
You may object to processing based on our legitimate interests.
We will stop the relevant processing unless:
We can demonstrate compelling legitimate grounds that override your rights and interests; or
The processing is required for the establishment, exercise or defence of legal claims.
The right to object to direct marketing is absolute.
18.8 Right to withdraw consent
Where we rely on consent, you may withdraw it at any time.
Withdrawal will not affect processing that was lawful before consent was withdrawn.
18.9 Rights relating to automated decisions
You may have rights relating to decisions made solely through automated processing where those decisions produce legal or similarly significant effects.
Creatix does not currently make decisions about customers solely through automated processing that produce legal or similarly significant effects.
Payment providers and fraud-prevention providers may carry out automated checks under their own procedures and privacy notices.
18.10 Right to complain
You have the right to make a complaint to Creatix and to the Information Commissioner’s Office.
The rights available depend partly on the lawful basis being used, and rights such as erasure and restriction apply only in certain circumstances.
19. How to Exercise Your Rights
To exercise a data protection right, contact us using:
Email: privacy@creatix.uk
Telephone: 01482 298859
Post:
Privacy Enquiries
Creatix UK
Unit 1a Louis Street
Hull
HU3 1LY
Please explain:
Who you are.
Which right you wish to exercise.
The information or activity your request relates to.
Any relevant customer, order or account reference.
You do not need to use legal terminology.
We may request reasonable proof of identity where necessary to protect personal information from unauthorised access or disclosure.
We may also request evidence of authority where somebody is acting on another person’s behalf.
Requests are normally handled without charge. A reasonable fee may be charged, or a request may be refused, where the law allows this because a request is manifestly unfounded or excessive.
We will respond without undue delay and normally within one calendar month once we have received the information reasonably required to process the request. In certain complex cases, or where multiple requests are made, the response period may be extended by up to a further two months.
20. Data Protection Complaints
You may complain if you believe that Creatix has:
Used your personal information unfairly.
Collected unnecessary information.
Failed to keep information accurate.
Disclosed information without an appropriate reason.
Failed to keep information secure.
Retained information for too long.
Failed to deal properly with a data protection request.
Otherwise infringed data protection law.
Complaints may be made using:
Email: privacy@creatix.uk
Telephone: 01482 298859
Post:
Data Protection Complaints
Creatix UK
Unit 1a Louis Street
Hull
HU3 1LY
Please provide enough information for us to understand and investigate the complaint. This may include:
Your name and contact details.
A description of what happened.
Relevant dates.
Order, account or correspondence references.
Copies of relevant communications.
The outcome you are seeking.
We will:
Provide a clear way for you to make a complaint.
Acknowledge your complaint within 30 days.
Take appropriate steps to investigate it without undue delay.
Keep you reasonably informed.
Explain the outcome without undue delay.
These complaint-handling requirements are now in force under the UK’s amended data protection framework.
21. Complaining to the Information Commissioner’s Office
You also have the right to complain to the Information Commissioner’s Office, which is the UK regulator for data protection.
We would appreciate the opportunity to address your concern first, but contacting us does not remove your right to complain to the ICO.
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113
Current ICO contact details are confirmed on its official website.
22. Children’s Information
The Creatix online shop and services are intended primarily for adults and business customers.
We do not knowingly seek to collect unnecessary personal information from children.
If you believe that a child has provided personal information without appropriate permission, please contact privacy@creatix.uk. We will investigate and delete the information where required.
23. Information About Other People
Where you provide information about another individual, such as:
A delivery recipient.
Employee.
Business partner.
Website user.
Customer.
Authorised contact.
You must ensure that:
You have a lawful and appropriate reason for providing it.
The information is accurate.
You are authorised to provide it.
The individual is made aware of this Privacy Policy where appropriate.
You must not provide another person’s confidential or sensitive information without proper authority.
24. Third-Party Websites and Services
Our website may contain links to websites or services operated by:
Manufacturers.
Payment providers.
Couriers.
Software providers.
Social-media platforms.
Other independent organisations.
These third parties may collect and use information under their own privacy policies.
Creatix is not responsible for the privacy practices, content or security of independently operated third-party websites. You should review the relevant privacy information before providing personal information to them.
25. Changes to This Privacy Policy
We may update this Privacy Policy where:
Our website changes.
Our products or services change.
We appoint new service providers.
Our use of personal information changes.
Data protection law or regulatory guidance changes.
We need to improve the clarity of the policy.
The most recent version will be published on our website and will show the date it was last updated.
Where a change is significant, we may also provide an additional notice through the website, customer account or email where appropriate.
26. Contacting Creatix
Questions about this Privacy Policy or the way we use personal information should be sent to:
Creatix UK
Unit 1a Louis Street
Hull
HU3 1LY
Privacy email: privacy@creatix.uk
Telephone: 01482 298859
Creatix UK respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains how we collect, use, store, share and protect personal information when you:
Visit the Creatix website or online shop.
Create or use a customer account.
Purchase CCTV equipment, point-of-sale equipment, software or other products.
Request a quotation.
Contact us with an enquiry.
Request technical support.
Purchase custom website design, software development or another professional service.
Subscribe to marketing communications.
Submit a review, testimonial or other content where these features are available.
This policy also explains your rights under UK data protection law and how you can contact us about your personal information.
This policy is intended to meet the transparency requirements of the UK General Data Protection Regulation, the Data Protection Act 2018 as amended, including amendments introduced by the Data (Use and Access) Act 2025, and the Privacy and Electronic Communications Regulations 2003 where applicable.
UK data protection rules require organisations to explain why personal information is collected, how it is used, who it is shared with, how long it is kept and what rights individuals have.
2. Who We Are
The organisation responsible for the personal information covered by this policy is:
Legal and trading name: Creatix UK
Business address: Unit 1a Louis Street, Hull, HU3 1LY
Privacy email: privacy@creatix.uk
Telephone: 01482 298859
For the purposes of UK data protection law, Creatix UK is normally the data controller for personal information collected through our shop, website, sales, enquiries and customer relationships.
A data controller decides why and how personal information is processed.
References in this policy to “Creatix”, “Creatix UK”, “we”, “us” or “our” mean Creatix UK.
3. When Creatix Acts as a Data Processor
When we provide custom website design, hosting, software development, technical support, CCTV configuration or POS services to another business, we may sometimes process personal information on that business’s behalf.
For example, this may occur if a business customer gives us authorised access to its:
Website customer database.
Booking system.
Point-of-sale system.
Employee or customer records.
CCTV system or recorded footage.
Email account.
Hosting account.
Software database.
Technical logs or backups.
In these circumstances, the business customer will normally be the data controller and Creatix will act as its data processor. We will process the information only as required to provide the agreed service, in accordance with the customer’s documented instructions and the applicable contract or data-processing agreement.
The business customer remains responsible for explaining its own use of personal information to its customers, staff and other individuals.
This Privacy Policy primarily describes the personal information for which Creatix acts as the data controller. Where Creatix acts only as a processor, requests relating to that information may need to be referred to the relevant business customer.
4. What Is Personal Information?
Personal information is information relating to an identified or identifiable individual.
It can include obvious identifiers, such as a person’s name, address and email address, as well as information such as an IP address, customer account number, order history or device information where that information can be linked to an individual.
5. Personal Information We Collect
The information we collect depends on how you use our website, shop and services.
5.1 Identity and contact information
This may include:
Your full name.
Your business or trading name.
Your job title or role.
Your billing address.
Your delivery address.
Your email address.
Your telephone number.
Your preferred method of contact.
The name and contact details of an authorised business representative.
5.2 Customer account information
If customer accounts are available, we may collect:
Your account username or email address.
Authentication and account security information.
Account preferences.
Saved billing or delivery addresses.
Previous orders.
Saved baskets or wish lists where available.
Communication and marketing preferences.
Account creation, login and activity information.
You are responsible for keeping your login information confidential and for notifying us if you believe that your account has been accessed without permission.
5.3 Order and transaction information
When you place an order, we may collect:
Products or services purchased.
Order number.
Order date and value.
Billing and delivery details.
Delivery instructions.
Payment method.
Payment status.
Transaction reference.
Discount or promotional code information.
Refund, cancellation, return or chargeback information.
Courier and tracking information.
Communications relating to the order.
5.4 Payment information
Payments may be processed using Stripe or another payment provider displayed during checkout.
Creatix does not store complete payment card numbers or card security codes in its own shop database. Payment details are entered into or passed securely to the applicable payment provider.
We may receive and retain limited payment information, such as:
The payment status.
Transaction reference.
Amount and currency.
Payment date.
Card type or brand.
The final digits of a card number.
Fraud or security-check results.
Refund or chargeback information.
Stripe may collect transaction information including names, contact details, billing and delivery addresses, payment-method information, purchase amount and payment status. Depending on the activity, Stripe may act as a data processor, data controller or both. Stripe’s own privacy information applies to its independent processing activities.
5.5 Delivery information
To arrange and monitor delivery, we may collect and use:
Recipient name.
Delivery address.
Telephone number.
Email address.
Delivery instructions.
Courier tracking number.
Delivery status.
Details of failed delivery attempts.
Return-to-sender information.
Proof of delivery where provided by the courier.
Where an order is being sent to somebody other than the customer, the customer is responsible for ensuring that they are authorised to provide the recipient’s details and that the recipient is made aware of this Privacy Policy where appropriate.
5.6 Enquiries, quotations and support information
When you contact us, we may collect:
Your name and contact details.
Your business information.
The content of your enquiry.
Products or services you are interested in.
Technical information about your equipment, website or software.
Photographs, screenshots or recordings you send to us.
Support messages and previous communications.
Quote details and project requirements.
Fault, warranty or return information.
Any documents you voluntarily provide.
5.7 Custom website and software project information
When you use our custom web design, hosting or software services, we may receive:
Website content.
Logos, images and branding files.
Product or service information.
Staff or business contact details.
Domain and hosting information.
Website administrator details.
Technical account identifiers.
Database or system configuration information.
Project notes, instructions and correspondence.
Test data.
Data required to migrate, repair or support an existing system.
Customers should not provide live personal information, passwords, special-category information or confidential databases unless it is genuinely necessary and appropriate security arrangements have been agreed.
Where possible, customers should provide anonymised or test data for development and testing.
5.8 Reviews and published content
Where our website allows reviews or testimonials, we may collect:
Your display name.
Rating.
Review or testimonial text.
Photographs or other content you choose to submit.
Information showing whether you purchased the relevant product or service.
Information submitted for publication may be visible to other website visitors. Please do not include unnecessary personal or confidential information in publicly visible content.
5.9 Website and technical information
When you visit our website, our systems may automatically collect:
IP address.
Browser type and version.
Device type.
Operating system.
Screen or device information.
Approximate location derived from an IP address.
Pages visited.
Links or buttons selected.
Time and date of access.
Referring website or search source.
Session information.
Shopping-basket activity.
Login attempts.
Error, diagnostic and security information.
Cookie and privacy preferences.
We use this information to operate the shop, maintain security, diagnose problems and understand how the website is being used.
5.10 Marketing preferences
Where marketing is available, we may record:
Whether you agreed to receive marketing.
The date, time and method of your choice.
The type of communications requested.
Whether messages were delivered or opened, where this feature is used with appropriate permission.
Your unsubscribe or objection request.
6. Special-Category and Criminal-Offence Information
Creatix does not normally need to collect special-category personal information through its online shop.
Special-category information includes information about a person’s:
Health.
Race or ethnic origin.
Religious or philosophical beliefs.
Political opinions.
Trade-union membership.
Genetics.
Biometrics used for identification.
Sex life or sexual orientation.
We also do not normally request information about criminal convictions or offences.
Please do not provide this type of information unless it is genuinely necessary and we have specifically asked you to provide it.
Where special-category or criminal-offence information is genuinely required, we will identify an appropriate lawful basis and any additional legal condition required before processing it.
7. How We Obtain Personal Information
We normally obtain personal information directly from you when you:
Browse our website.
Create an account.
Add products to your basket.
Place an order.
Make a payment.
Request a quotation.
Contact us.
Request support.
Enter into a service agreement with us.
Submit content or a review.
Choose to receive marketing.
We may also receive relevant information from:
Stripe and other payment providers.
Banks, card networks and financial institutions.
Delivery couriers and fulfilment providers.
Website hosting and email providers.
Security and fraud-prevention providers.
A company or organisation you represent.
A person placing an order on your behalf.
A customer giving us authorised access to a system requiring support.
Publicly available business directories, websites or Companies House records.
Professional advisers, insurers or legal representatives.
Law enforcement, courts, regulators or public authorities where legally permitted.
8. Why We Use Personal Information and Our Lawful Bases
UK data protection law requires us to have a lawful basis for each use of personal information.
The lawful bases most relevant to Creatix are:
Performance of a contract.
Taking steps before entering into a contract.
Compliance with a legal obligation.
Legitimate interests.
Consent.
8.1 Processing orders and supplying products
We use your information to:
Accept and process orders.
Confirm product availability.
Take and verify payment.
Send order confirmations.
Package and dispatch products.
Arrange delivery.
Provide tracking.
Process returns, refunds and warranty requests.
Communicate about your purchase.
Our lawful basis is normally that the processing is necessary to enter into or perform a contract with you.
We may also rely on legal obligations for accounting, taxation and consumer-protection records.
8.2 Providing quotations and services
We use your information to:
Understand your requirements.
Prepare quotations.
Discuss possible work.
Enter into service agreements.
Provide website, software, technical or support services.
Manage projects and customer relationships.
Maintain records of completed work.
Our lawful basis is normally taking steps at your request before entering into a contract or performing a contract with you.
8.3 Payment processing and fraud prevention
We use relevant information to:
Process payments.
Confirm that payment has been authorised.
Prevent fraudulent transactions.
Respond to payment disputes.
Process refunds.
Protect our customers and business.
Maintain transaction records.
Our lawful bases are performance of a contract, compliance with legal obligations and our legitimate interests in preventing fraud, protecting our business and securing transactions.
Payment providers, banks and card issuers may carry out their own identity, fraud and security checks under their own legal responsibilities.
8.4 Customer service and technical support
We use relevant information to:
Answer enquiries.
Investigate faults.
Provide technical support.
Resolve complaints.
Manage returns and warranty claims.
Keep an appropriate history of assistance provided.
Our lawful bases are performance of a contract and our legitimate interests in providing customer service, maintaining service quality and resolving problems.
8.5 Website operation and security
We use technical and account information to:
Operate our website and shop.
Maintain shopping baskets and login sessions.
Authenticate users.
Protect customer accounts.
Prevent unauthorised access and malicious activity.
Diagnose faults.
Maintain backups.
Monitor system performance.
Investigate security incidents.
Keep evidence where fraud or misuse is suspected.
Our lawful bases are our legitimate interests in operating a secure and reliable website, performance of a contract where necessary to provide shop functionality, and compliance with legal obligations where applicable.
8.6 Legal and accounting obligations
We may use and retain information to:
Maintain invoices and transaction records.
Comply with tax and accounting requirements.
Respond to lawful regulatory or court requests.
Manage product-safety obligations.
Protect consumer rights.
Establish, exercise or defend legal claims.
Cooperate with lawful fraud or criminal investigations.
Our lawful basis is compliance with a legal obligation and, where appropriate, our legitimate interests in protecting our legal rights.
8.7 Business administration and improvement
We may use information to:
Review business performance.
Understand demand for products and services.
Improve our website and customer service.
Maintain internal records.
Train staff.
Review complaints and service problems.
Develop new products or services.
Manage insurance, professional advice or business restructuring.
Where possible, we use aggregated or anonymised information.
Our lawful basis is our legitimate interests in managing and improving Creatix, provided those interests are not overridden by your rights and interests.
8.8 Marketing
We may send information about Creatix products and services where:
You have specifically agreed to receive it; or
The law permits us to contact an existing customer about our own similar products or services and we have provided an opportunity to opt out.
Where we rely on consent, you may withdraw that consent at any time.
Where the existing-customer or “soft opt-in” rule applies, our UK GDPR lawful basis will normally be legitimate interests. The soft opt-in only applies where the relevant legal requirements are satisfied, including obtaining the contact details directly and offering a clear opportunity to opt out.
We do not sell your contact details to third-party marketing companies.
9. Our Legitimate Interests
Where we rely on legitimate interests, those interests may include:
Operating and developing our business.
Providing effective customer service.
Protecting customers, staff and business systems.
Preventing fraud and misuse.
Maintaining network and information security.
Managing customer accounts.
Improving products and services.
Recovering unpaid amounts.
Maintaining evidence of transactions and communications.
Defending legal rights and claims.
Promoting our own similar products and services where legally permitted.
Maintaining business continuity and backups.
Preventing repeat contact after an unsubscribe or objection request.
Before relying on legitimate interests, we consider the necessity of the processing and balance our interests against the possible effect on the individual.
You may object to processing based on legitimate interests as explained in the section on your rights.
10. When Providing Information Is Required
Some personal information is required so that we can enter into or perform a contract with you.
For example, we may require:
Your name.
Contact information.
Billing information.
Delivery address.
Order details.
Payment confirmation.
You are not legally required to provide this information, but without it we may be unable to:
Accept or deliver an order.
Process payment.
Create a customer account.
Prepare a quotation.
Provide a requested service.
Respond fully to a support request.
Where information is optional, this will normally be clear from the context or form.
11. Who We Share Personal Information With
We do not sell personal information.
We may share information with trusted recipients where reasonably necessary for the purposes described in this policy.
11.1 Payment providers
Payment and transaction information may be shared with:
Stripe.
Banks.
Card issuers.
Card networks.
Other payment-method providers.
Fraud-prevention services.
Payment dispute and chargeback services.
11.2 Couriers and delivery providers
We may give our appointed courier the information needed to:
Deliver an order.
Contact the recipient about delivery.
Provide tracking.
Obtain proof of delivery.
Manage failed delivery attempts.
Return an undelivered parcel.
This will normally include the recipient’s name, address, telephone number, email address, delivery instructions and order or tracking reference.
11.3 Technology and service providers
We may use providers that support our:
Website hosting.
Domain services.
Business email.
File storage.
Backups.
Cybersecurity.
Customer support.
Website maintenance.
Database and server infrastructure.
Accounting and invoicing.
Communications.
Analytics, where enabled with appropriate privacy controls.
These providers may process information on our behalf and are expected to protect it and use it only for authorised purposes.
11.4 Professional advisers
Information may be shared with:
Accountants.
Insurers.
Solicitors.
Tax advisers.
IT and cybersecurity specialists.
Debt-recovery providers.
Other professional advisers.
11.5 Authorities and legal recipients
We may disclose information where reasonably necessary to:
Comply with a legal obligation.
Respond to a court order.
Respond to a lawful request from police, regulators or public authorities.
Report or investigate fraud.
Protect the rights, safety or property of customers, Creatix or others.
Establish, exercise or defend legal claims.
11.6 Business sale or restructuring
If all or part of Creatix is sold, transferred, merged or restructured, relevant information may be disclosed to genuine prospective purchasers, investors and professional advisers.
Any recipient would be required to handle personal information appropriately and consistently with applicable data protection law.
12. International Transfers
Some of our service providers may store or process personal information outside the United Kingdom.
Where this results in a restricted international transfer, we will take reasonable steps to ensure that an appropriate legal mechanism is in place.
This may include:
UK adequacy regulations.
The UK International Data Transfer Agreement.
The UK Addendum to approved standard contractual clauses.
Another legally recognised safeguard.
A permitted legal exception where appropriate.
Where appropriate safeguards are used, any required transfer-risk assessment will also be considered.
UK data protection rules require restricted transfers to be covered by UK adequacy regulations, appropriate safeguards or an applicable legal exception.
You may contact privacy@creatix.uk for further information about the safeguards relevant to your personal information.
13. How Long We Keep Personal Information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet applicable legal, accounting, tax, security and dispute-resolution requirements.
The periods below are our normal guidelines. Information may be kept for a shorter or longer period depending on the circumstances.
Orders, invoices and accounting records
Order, payment, invoice, refund and accounting information will normally be retained for at least six years from the transaction or relevant accounting period.
Some information may be retained for longer where required by tax law, an ongoing investigation, a legal claim or another regulatory requirement.
HMRC generally requires VAT records to be retained for at least six years.
Customer accounts
Customer account information will normally be retained while the account remains active.
If an account is closed, we may retain a limited record for up to six years where required for:
Order records.
Accounting.
Fraud prevention.
Complaints.
Warranty support.
Legal claims.
Information that is no longer required will be deleted or anonymised.
Enquiries and quotations
General enquiries and unsuccessful quotation records will normally be retained for up to 24 months after the most recent meaningful communication.
They may be retained longer where:
The enquiry leads to a contract.
There is an ongoing dispute.
The information is needed to protect legal rights.
You have agreed to continued contact.
Website, software and technical projects
Project contracts, instructions, communications and records will normally be retained for the duration of the project and for up to six years after completion or termination.
Working files, development copies and customer data will be removed when no longer needed, subject to:
Contractual support obligations.
Agreed hosting or maintenance arrangements.
Backup rotation.
Legal record-keeping.
Ongoing disputes.
The customer’s documented instructions where Creatix acts as a processor.
Support requests
Support records will normally be retained for up to three years after the request is closed.
Records linked to a contract, payment, dispute, warranty or legal claim may be retained for up to six years or longer where legally necessary.
Website and security logs
Routine technical and security logs will normally be retained for a limited period, usually no longer than 12 months.
Relevant logs may be retained longer where required to investigate:
Fraud.
A cybersecurity incident.
Unauthorised access.
Misuse of the website.
A payment dispute.
A legal claim.
Marketing information
Marketing information will be retained until you:
Unsubscribe.
Withdraw consent.
Object to direct marketing.
Become inactive under our applicable retention process.
After an opt-out, we may retain a minimal suppression record containing information such as your email address and the date of your request. This is used only to ensure that we respect your choice and do not accidentally add you back to a marketing list.
Complaints and legal disputes
Information relating to a complaint, legal claim, chargeback or dispute may be retained until the issue has been fully resolved and any applicable claim or appeal period has expired.
Backups
Information may remain temporarily within protected backup systems after it has been removed from active systems.
Backup information will not normally be restored or used except where required for disaster recovery, security, legal compliance or system restoration. It will be overwritten or deleted through the normal backup-rotation process.
Anonymised information
We may retain information indefinitely where it has been securely anonymised so that it can no longer identify an individual.
14. How We Protect Personal Information
We use reasonable and proportionate technical and organisational measures designed to protect personal information against:
Unauthorised access.
Accidental loss.
Misuse.
Alteration.
Unauthorised disclosure.
Destruction.
Cyberattack.
These measures may include:
Access controls.
Authentication measures.
Restricted administrator permissions.
Secure hosting.
Software and security updates.
Firewalls and monitoring.
Encrypted transmission where appropriate.
Protected backups.
Staff confidentiality requirements.
Supplier and processor agreements.
Security logging.
Incident-response procedures.
Minimising the information collected and retained.
Access to personal information is limited to people and service providers who reasonably require it for an authorised purpose.
The ICO advises that security measures should be appropriate to the circumstances and risks and should protect the confidentiality, integrity and availability of systems and personal information.
No website, email service or internet transmission can be guaranteed to be completely secure. You should use a strong, unique password and contact us promptly if you believe your account or information has been compromised.
15. Personal Data Breaches
We maintain procedures for identifying, investigating and responding to suspected personal data breaches.
Where legally required, we will notify the Information Commissioner’s Office and affected individuals within the applicable legal timescales.
We may contact you where reasonably necessary to:
Explain a security incident.
Help protect your account.
Recommend changing a password.
Confirm suspicious activity.
Reduce a risk arising from a breach.
16. Cookies and Similar Technologies
Our website uses cookies and similar technologies.
Cookies are small files or identifiers stored on or accessed from a computer, mobile phone or other device.
16.1 Strictly necessary cookies
Strictly necessary cookies may be used to:
Keep the website functioning.
Maintain a shopping basket.
Remember login sessions.
Process checkout.
Protect customer accounts.
Prevent fraud.
Maintain website security.
Remember language, delivery or display preferences where necessary.
Store cookie choices.
Distribute website traffic safely.
These technologies may be used without consent where an applicable legal exception permits them, but we will still provide appropriate information about their use.
16.2 Optional cookies
Subject to the tools actually enabled on our website, optional cookies may be used for:
Website analytics.
Measuring performance.
Remembering optional preferences.
Understanding customer journeys.
Measuring marketing effectiveness.
Personalised advertising.
Optional cookies or similar technologies that require consent will not be activated until you have made an appropriate choice.
The ICO states that website visitors must be told about cookie use and that non-essential cookies generally require an appropriate consent mechanism.
16.3 Managing cookie choices
You can manage optional cookies using the cookie settings provided on our website.
You may also be able to block or delete cookies through your browser. Blocking strictly necessary cookies may prevent parts of the shop from functioning correctly.
Your choice to reject optional cookies will not prevent you from purchasing products, although some optional website features may be unavailable.
Details of the specific cookies currently used, including their provider, purpose and duration, should be available through our cookie settings or separate Cookie Policy.
17. Direct Marketing and Your Absolute Right to Object
We may send marketing about Creatix products or services where we have a lawful basis and the communication is permitted by applicable electronic-marketing rules.
Every electronic marketing message will provide a straightforward way to unsubscribe.
You may stop marketing at any time by:
Selecting the unsubscribe option in a marketing message.
Emailing privacy@creatix.uk.
Calling 01482 298859.
Updating your preferences through your account where this feature is available.
You have an absolute right to object to the use of your personal information for direct marketing. If you object, we will stop using your personal information for that purpose.
We may retain a minimal suppression record so that your objection continues to be respected.
18. Your UK Data Protection Rights
Depending on the purpose and lawful basis for processing, you may have the following rights.
These rights are not all absolute and exceptions may apply.
18.1 Right to be informed
You have the right to receive clear information about how your personal information is collected and used.
This Privacy Policy is intended to provide that information.
18.2 Right of access
You may ask:
Whether we hold personal information about you.
Why we use it.
Who it has been shared with.
How long it will be retained.
For a copy of the relevant personal information.
This is commonly known as a subject access request.
18.3 Right to rectification
You may ask us to correct inaccurate personal information or complete information that is incomplete.
18.4 Right to erasure
You may ask us to delete personal information in certain circumstances.
This right is not absolute. We may need to retain information where it remains necessary for:
Legal compliance.
Accounting and taxation.
Fraud prevention.
The establishment, exercise or defence of legal claims.
Completion of an existing contract.
Another lawful purpose.
18.5 Right to restrict processing
You may ask us to restrict the use of your personal information in certain circumstances.
When processing is restricted, we may continue to store the information but will not normally use it for other purposes unless legally permitted.
18.6 Right to data portability
In certain circumstances, you may ask to receive personal information you provided to us in a structured, commonly used and machine-readable format.
This right normally applies where processing is automated and based on consent or contract.
18.7 Right to object
You may object to processing based on our legitimate interests.
We will stop the relevant processing unless:
We can demonstrate compelling legitimate grounds that override your rights and interests; or
The processing is required for the establishment, exercise or defence of legal claims.
The right to object to direct marketing is absolute.
18.8 Right to withdraw consent
Where we rely on consent, you may withdraw it at any time.
Withdrawal will not affect processing that was lawful before consent was withdrawn.
18.9 Rights relating to automated decisions
You may have rights relating to decisions made solely through automated processing where those decisions produce legal or similarly significant effects.
Creatix does not currently make decisions about customers solely through automated processing that produce legal or similarly significant effects.
Payment providers and fraud-prevention providers may carry out automated checks under their own procedures and privacy notices.
18.10 Right to complain
You have the right to make a complaint to Creatix and to the Information Commissioner’s Office.
The rights available depend partly on the lawful basis being used, and rights such as erasure and restriction apply only in certain circumstances.
19. How to Exercise Your Rights
To exercise a data protection right, contact us using:
Email: privacy@creatix.uk
Telephone: 01482 298859
Post:
Privacy Enquiries
Creatix UK
Unit 1a Louis Street
Hull
HU3 1LY
Please explain:
Who you are.
Which right you wish to exercise.
The information or activity your request relates to.
Any relevant customer, order or account reference.
You do not need to use legal terminology.
We may request reasonable proof of identity where necessary to protect personal information from unauthorised access or disclosure.
We may also request evidence of authority where somebody is acting on another person’s behalf.
Requests are normally handled without charge. A reasonable fee may be charged, or a request may be refused, where the law allows this because a request is manifestly unfounded or excessive.
We will respond without undue delay and normally within one calendar month once we have received the information reasonably required to process the request. In certain complex cases, or where multiple requests are made, the response period may be extended by up to a further two months.
20. Data Protection Complaints
You may complain if you believe that Creatix has:
Used your personal information unfairly.
Collected unnecessary information.
Failed to keep information accurate.
Disclosed information without an appropriate reason.
Failed to keep information secure.
Retained information for too long.
Failed to deal properly with a data protection request.
Otherwise infringed data protection law.
Complaints may be made using:
Email: privacy@creatix.uk
Telephone: 01482 298859
Post:
Data Protection Complaints
Creatix UK
Unit 1a Louis Street
Hull
HU3 1LY
Please provide enough information for us to understand and investigate the complaint. This may include:
Your name and contact details.
A description of what happened.
Relevant dates.
Order, account or correspondence references.
Copies of relevant communications.
The outcome you are seeking.
We will:
Provide a clear way for you to make a complaint.
Acknowledge your complaint within 30 days.
Take appropriate steps to investigate it without undue delay.
Keep you reasonably informed.
Explain the outcome without undue delay.
These complaint-handling requirements are now in force under the UK’s amended data protection framework.
21. Complaining to the Information Commissioner’s Office
You also have the right to complain to the Information Commissioner’s Office, which is the UK regulator for data protection.
We would appreciate the opportunity to address your concern first, but contacting us does not remove your right to complain to the ICO.
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113
Current ICO contact details are confirmed on its official website.
22. Children’s Information
The Creatix online shop and services are intended primarily for adults and business customers.
We do not knowingly seek to collect unnecessary personal information from children.
If you believe that a child has provided personal information without appropriate permission, please contact privacy@creatix.uk. We will investigate and delete the information where required.
23. Information About Other People
Where you provide information about another individual, such as:
A delivery recipient.
Employee.
Business partner.
Website user.
Customer.
Authorised contact.
You must ensure that:
You have a lawful and appropriate reason for providing it.
The information is accurate.
You are authorised to provide it.
The individual is made aware of this Privacy Policy where appropriate.
You must not provide another person’s confidential or sensitive information without proper authority.
24. Third-Party Websites and Services
Our website may contain links to websites or services operated by:
Manufacturers.
Payment providers.
Couriers.
Software providers.
Social-media platforms.
Other independent organisations.
These third parties may collect and use information under their own privacy policies.
Creatix is not responsible for the privacy practices, content or security of independently operated third-party websites. You should review the relevant privacy information before providing personal information to them.
25. Changes to This Privacy Policy
We may update this Privacy Policy where:
Our website changes.
Our products or services change.
We appoint new service providers.
Our use of personal information changes.
Data protection law or regulatory guidance changes.
We need to improve the clarity of the policy.
The most recent version will be published on our website and will show the date it was last updated.
Where a change is significant, we may also provide an additional notice through the website, customer account or email where appropriate.
26. Contacting Creatix
Questions about this Privacy Policy or the way we use personal information should be sent to:
Creatix UK
Unit 1a Louis Street
Hull
HU3 1LY
Privacy email: privacy@creatix.uk
Telephone: 01482 298859