Privacy PolicyCREASEY’S GROUP CUSTOMER PRIVACY POLICYCreasey’s Group (‘Creasey’s’) includes:Creasey & Son ltdCreasey’s LtdCreasey’s (Franchise) ltd – trading as Marks and Spencer GuernseyOverviewMaintaining the security of your data is a priority at Creasey’s and we are committed to respecting your privacy rights. We pledge to handle your data fairly and legally at all times. Creasey’s is also dedicated to being transparent about what data we collect about you and how we use it.This policy, which applies whether you visit our stores or use our web site, provides you with information about:How we use your dataWhat personal data we collectHow we protect your dataYour legal rights relating to your personal dataOur legitimate interestsHOW WE USE YOUR DATAGeneral:Creasey’s (and trusted partners acting on our behalf) uses your data:To provide goods and services to youTo manage any registered accounts you hold with usTo verify your identityTo contact you about promotional offers and products and services which we think may interest youFor market research purposes – to better understand your needsFor crime and fraud prevention, detection and related purposesWhere we have a legal right or duty to use or disclose your information (for example in relation to an investigation by a public authority or in a legal dispute).Marketing:Creasey’s uses your personal data for marketing purposes to update you on our latest offers.Creasey’s aims to update you about products and services which are of interest and relevant to you. You have the right to opt out of receiving promotional communications at any time by:Making use of the “unsubscribe” link in emails.Contacting us through the channels set out in this policy.We may analyse your purchasing activity and your responses to marketing communications. The result of this analysis allows us to ensure that we contact you with information on products and offers that are relevant to you. To do this we may use software and other technology (automated processing).Sharing data with third parties:In order to make certain services available to you, we may need to share your personal data with some of our trusted service providers. These include IT, delivery and marketing service providers.Creasey’s only allows its service providers to handle your personal data when we have confirmed that they apply appropriate data protection and security controls. We also impose contractual obligations on service providers relating to data protection and security, which mean they can only use your data to provide services to us and to you and for no other purposes.Other third parties:Aside from our service providers Creasey’s will not disclose your personal data to any third party, except as set out below. We will never sell or rent our customer data to other organisations for marketing purposes.We may share your data with:Credit reference agencies where necessary for card paymentsStates bodies, regulators, law enforcement agencies, courts, tribunals and insurers where we are required to do so to comply with our legal obligationsTo exercise our legal right (for example in court cases)For the prevention, detection and investigation of crime or the prosecution of offendersFor the protection of our employees and customers. How long we keep data:We will not retain data for longer than necessary for the purposes set out in this Policy. Different retention periods apply for different types of data, however we would not normally keep data for more than 10 years.WHAT PERSONAL DATA WE COLLECTCreasey’s may collect the following information about you:your name, age/date of birth and genderyour contact details, including postal address, telephone and email addresswhen you make a purchase or place an order with us, your payment card detailsitems you have purchased from us if a One Card or Creaseys Account card was used at the time of the purchasecopies of any correspondence between us.HOW WE PROTECT YOUR DATACreasey’s is committed to keeping your personal data safe and secure. We do this by:encrypting data where appropriateestablishing service contracts with third party service providersregularly reviewing security of our IT systemsensuring data is stored securely and is accessible only to those whose job requires itYOUR LEGAL RIGHTS RELATING TO YOUR PERSONAL DATAYou have the following legal rights:the right to ask what personal data we hold about youthe right to ask us to update and correct any out-of-date or incorrect datathe right to opt out of any marketing communication we may send youthe right to ask us to delete your personal data.OUR LEGITIMATE INTERESTSThe normal legal basis for processing customer data is that it is necessary for the legitimate business interests of Creasey’s, including:Selling and supplying goods and services to our customersPromoting, marketing and advertising our products and servicesSending promotional communications which are relevant to individual customers (including administering our One Card loyalty scheme)Understanding our customers behaviour, activities, preferences and needsImproving existing products and services and developing new products and servicesComplying with our legal and regulatory obligationsPreventing, detecting and investigating all forms of crime and prosecuting offendersProtecting customers, employees and other individuals and maintaining their safety, health and welfareHandling customer contacts, queries, complaints or disputesManaging insurance claimsFulfilling our duties to our customers, employees, shareholders and other stakeholdersContact usIf you have any concerns about how Creasey’s uses your personal data, or you wish to exercise any of your rights, then please contact us at:mail@creaseys.comor write to us at:Creasey’s Ltd, High St, St Peter Port, Guernsey, GY1 2JZUpdatesThis policy was last updated in May 2018
