Privacy Policy

This Privacy Policy explains how Crestavere Outlet collects, uses, stores and shares personal data when you visit our website, place an order, subscribe to our communications or contact our customer service team.

Crestavere Outlet is responsible for the processing of personal data collected through our online store. We process personal data in accordance with applicable United Kingdom data protection legislation, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR), as amended.

This Privacy Policy applies to customers and website visitors in the United Kingdom.

1. Personal Data We Collect

We may collect the following categories of personal data:

Contact Information

• Full name.

• Email address.

• Telephone number.

• Billing address.

• Delivery address.

• Country of residence or delivery.

Order and Payment Information

• Products you order.

• Order number and purchase history.

• Selected payment method.

• Payment status.

• Transaction information.

• Shipping and delivery information.

Payment card details are normally processed directly by our authorised payment providers. Crestavere Outlet does not normally receive or store complete payment card details.

Technical and Usage Information

When you visit our website, we may collect:

• IP address.

• Browser type and version.

• Device type and operating system.

• Date and time of access.

• Website activity and browsing behaviour.

• Referral source.

• Pages and products viewed.

• Cookie identifiers and similar tracking information.

Customer Communications

We may retain information that you provide when you contact customer service, submit a return or refund request, participate in a survey, leave feedback or otherwise communicate with us.

2. How We Use Personal Data

We may use your personal data to:

• Process payments and orders.

• Confirm, prepare, dispatch and deliver orders.

• Provide tracking and delivery updates.

• Manage cancellations, returns, exchanges, refunds and complaints.

• Respond to customer service enquiries.

• Verify transactions and prevent fraud or misuse.

• Maintain the security and functionality of our website.

• Improve our products, website and customer experience.

• Analyse website performance and customer interactions.

• Comply with accounting, tax and other legal obligations.

• Establish, exercise or defend legal claims.

• Send marketing communications where permitted by law.

We only process personal data for specified, legitimate purposes and in accordance with applicable data protection legislation.

3. Legal Bases for Processing

We only process personal data where we have a valid lawful basis under the UK GDPR.

Depending on the circumstances, this may include:

• Performance of a contract: Where processing is necessary to complete and deliver your order or provide a service you have requested.

• Legal obligation: Where processing is necessary to comply with accounting, tax, consumer protection or other legal requirements.

• Legitimate interests: Where processing is necessary for our legitimate business interests, such as preventing fraud, maintaining website security or improving our services, provided that your rights and interests do not override those interests.

• Consent: Where you have provided valid consent, including for certain marketing communications and non-essential cookies.

• Legal claims: Where processing is necessary to establish, exercise or defend legal rights, relying on the appropriate lawful basis.

Where we rely on consent, you may withdraw it at any time.

Withdrawing consent will not affect the lawfulness of processing carried out before it was withdrawn.

4. Marketing and Newsletters

If you subscribe to our email list, we may send you product updates, promotional messages, exclusive offers and information about new collections.

We send electronic marketing communications in accordance with applicable UK data protection legislation and the Privacy and Electronic Communications Regulations 2003 (PECR).

Where consent is required, we will only send marketing communications after receiving your valid consent.

Where legally permitted, we may send marketing communications about similar products to existing customers under the applicable soft opt-in rules, provided that the required opt-out opportunities have been offered.

You can unsubscribe from marketing communications at any time by:

• Clicking the unsubscribe link included in our marketing emails.

• Contacting us at crestavereoutlet@outlook.com.

We will respect your request to stop receiving direct marketing.

You may still receive essential non-marketing communications relating to active orders, payments, deliveries, returns, security or customer service matters.

5. Sharing Personal Data

We do not sell or rent your personal data.

We may share personal data with trusted service providers where necessary to operate our online store, including:

• E-commerce and website-hosting providers.

• Payment processors and fraud-prevention providers.

• Warehousing, fulfilment, shipping and logistics partners.

• Customer service and communication providers.

• Email and marketing platforms.

• Website analytics and advertising providers.

• IT, cybersecurity and technical support providers.

• Accountants, auditors, insurers and professional advisers.

• Government authorities, regulators, courts or law-enforcement bodies where legally required.

Personal data will only be shared where there is an appropriate lawful basis and in accordance with applicable data protection requirements.

Where third parties process personal data on our behalf, we will ensure that appropriate data protection arrangements are in place.

Some service providers may act as independent data controllers for certain activities, including payment processing, delivery services and fraud prevention.

Their own privacy policies may apply to those activities.

6. International Data Transfers

Although Crestavere Outlet serves customers in the United Kingdom, some of our service providers and business partners may process personal data outside the UK.

This may occur when using payment providers, e-commerce platforms, customer service systems, marketing platforms or fulfilment and logistics partners.

Where personal data is transferred outside the United Kingdom, we will comply with applicable UK data protection legislation.

Where required, appropriate safeguards may include:

• UK adequacy regulations recognising the destination's data protection standards.

• The United Kingdom's International Data Transfer Agreement (IDTA).

• The UK Addendum to the European Commission's Standard Contractual Clauses.

• Applicable binding corporate rules.

• Another legally recognised transfer mechanism.

Where necessary, we will assess the risks associated with international transfers and implement appropriate additional safeguards.

Customers may contact us to request further information about applicable international transfer arrangements.

7. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected.

This may include retaining information to:

• Process and deliver orders.

• Provide customer service.

• Manage cancellations, returns, refunds and disputes.

• Comply with accounting, tax and legal obligations.

• Maintain website security and prevent fraud.

• Establish, exercise or defend legal claims.

Retention periods depend on the type of information, the purpose of processing and applicable UK legal requirements.

Order and transaction records may need to be retained for longer periods where required by accounting, taxation or other legal obligations.

Marketing information will be retained only for as long as there is an appropriate lawful basis for its use.

When personal data is no longer required, it will be securely deleted, anonymised or otherwise handled in accordance with applicable law.

8. Cookies and Similar Technologies

Our website may use cookies and similar technologies, including tracking pixels and other storage or access technologies.

These technologies help us to:

• Ensure that the website, checkout and shopping basket function correctly.

• Remember your preferences and selections.

• Maintain website security.

• Analyse website traffic and performance.

• Measure advertising and marketing effectiveness.

• Personalise content and improve the customer experience.

Strictly necessary cookies may be used without consent where permitted by applicable UK law.

Certain other technologies may qualify for a legal consent exemption, subject to the applicable conditions and user controls.

Where consent is legally required, including for relevant advertising and tracking technologies, we will obtain valid consent before activating them.

Where required, you can accept, reject or manage non-essential cookies through the cookie consent options available on our website.

You may also block or delete cookies through your browser settings, although doing so may affect certain website features.

Further information about individual cookies, their purposes and applicable retention periods may be provided through our cookie settings or separate Cookie Policy.

9. Your Data Protection Rights

Under the UK GDPR and other applicable UK data protection legislation, you may have the following rights, subject to applicable conditions and exceptions:

• Right to be informed: Receive clear information about how your personal data is collected and used.

• Right of access: Request access to the personal data we hold about you.

• Right to rectification: Request correction of inaccurate or incomplete information.

• Right to erasure: Request deletion of your personal data in certain circumstances.

• Right to restrict processing: Request that we limit the use of your personal data in certain circumstances.

• Right to data portability: Request certain personal data in a structured, commonly used and machine-readable format, where applicable.

• Right to object: Object to certain processing activities, including processing based on legitimate interests.

• Right to withdraw consent: Withdraw your consent at any time where processing is based on consent.

• Rights relating to automated decision-making: Exercise applicable rights and safeguards concerning decisions made solely through automated processing that have legal or similarly significant effects.

You have the right to object to the processing of your personal data for direct marketing purposes at any time.

Where you exercise this right, we will stop processing your personal data for direct marketing.

These rights are subject to applicable legal conditions and exceptions.

We may need to retain certain information where required by law or where necessary to establish, exercise or defend legal claims.

10. Exercising Your Rights

To exercise your data protection rights, please contact us at:

crestavereoutlet@outlook.com

Please provide sufficient information for us to identify your account or order and understand your request.

This may include:

• Your full name.

• Your email address.

• Your order number, where relevant.

For security purposes, we may request additional information where reasonably necessary to verify your identity.

Please do not send complete payment card details, passwords or other highly sensitive information by email.

We will respond to your request without undue delay and within the timeframe required by applicable UK data protection legislation.

For most requests involving access to personal data, the standard response period is one month, subject to applicable extensions and other legal provisions.

We will explain any applicable extension or restriction where required by law.

11. Complaints to the Information Commissioner's Office

If you believe that your personal data has been processed unlawfully or that your data protection rights have been infringed, you may raise a complaint with us.

Please contact:

crestavereoutlet@outlook.com

We will acknowledge and investigate data protection complaints in accordance with applicable legal requirements, keep you informed where appropriate and explain the outcome without undue delay.

You also have the right to lodge a complaint with the UK's independent data protection regulator:

Information Commissioner's Office (ICO)

Website: https://ico.org.uk 

You may contact the ICO if you are dissatisfied with how your personal data has been handled or how your complaint has been resolved.

We encourage you to contact us first so that we have an opportunity to address your concerns directly. However, you do not need our permission to contact the ICO.

12. Data Security

We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration, destruction or disclosure.

Depending on the systems and services used, these measures may include:

• Access controls.

• Secure payment processing.

• Encrypted communications.

• Security monitoring.

• Restricted access to personal data.

We aim to ensure that personal data is handled securely and only accessed by authorised parties where necessary.

However, no method of transmitting or storing information online can be guaranteed to be completely secure or risk-free.

13. Children's Privacy

Our website and products are not specifically directed at children.

We do not knowingly collect personal data from children in circumstances where doing so would be unlawful under applicable UK data protection legislation.

Where consent is required for an online service offered directly to a child, we will comply with the applicable age and parental authorisation requirements.

If you believe that a child has provided personal data to us without appropriate authorisation, please contact us so that we can review the situation and take appropriate action, including deleting the information where required.

14. Third-Party Links

Our website may contain links to external websites, applications or services operated by third parties.

Crestavere Outlet does not control the privacy practices, content or security of third-party websites or services.

We recommend reviewing the relevant privacy policy before providing personal data to an external website or service.

15. Automated Decision-Making

We may use automated tools to help identify potentially fraudulent transactions, protect our website and improve our services.

Where automated processing is used, we will ensure that it complies with applicable UK data protection legislation.

If we make a decision based solely on automated processing that produces legal or similarly significant effects, we will provide the information and safeguards required by law.

Where applicable, these safeguards may include the ability to make representations, contest a decision and obtain human intervention.

Customers may contact us for further information about automated decision-making that affects them.

16. Changes to This Privacy Policy

We may update this Privacy Policy when necessary to reflect changes to our website, services, business practices, technology or applicable UK legal requirements.

The latest version will always be available on this page.

Where appropriate, we may provide additional notice of material changes through our website or by email.

We recommend reviewing this Privacy Policy periodically to stay informed about how personal data is handled.

17. Contact Information

If you have any questions about this Privacy Policy, our use of personal data or your data protection rights, please contact us:

Crestavere Outlet

Email: crestavereoutlet@outlook.com

Website: crestavereoutlet.com

Our customer service team will respond to your enquiry as quickly as possible.