1. Who we are

Creative Systems (“we”, “us”, “our”) is the data controller responsible for your personal data collected through this website and our services.

We are committed to protecting your privacy and handling your personal data in accordance with the General Data Protection Regulation (GDPR) and the Data Protection Acts 2018 (Ireland).

2. What personal data we collect

We may collect and process the following categories of personal data:

• Identity data — your name and company name
• Contact data — email address, phone number and postal address
• Transaction data — details of products and services you have purchased from us
• Technical data — IP address, browser type and version, time zone, browser plug-in types, operating system and platform
• Usage data — information about how you use our website and services
• Marketing data — your preferences in receiving marketing from us and your communication preferences

We do not collect any special category data (such as health, religious or political information) or data relating to children.

Payment data: We do not store or process credit or debit card details on our systems. All payment transactions are handled by our third-party payment processors (Revolut, PayPal and Stripe). Please refer to their privacy policies for information on how they handle your payment data.

3. How we collect your data

We collect data through the following means:

• Direct interactions — when you create an account, place an order, complete a contact or enquiry form, subscribe to marketing communications, or contact us by phone, email or post
• Automated technologies — as you interact with our website, we automatically collect technical data through cookies and similar technologies (see Section 7 below)
• Third parties — we may receive data from analytics providers (such as Google), advertising networks, and our CRM platform (HubSpot)

4. How we use your data

5. Marketing communications

We will only send you marketing communications if you have given your explicit consent to receive them. You can withdraw your consent and unsubscribe at any time by:

• Clicking the unsubscribe link in any marketing email
• Emailing us at sales@creativesystems.ie

We use HubSpot as our CRM and marketing platform to manage contact information and communications. Your contact data stored in HubSpot is not shared with or sold to any other third party.

6. Who we share your data with

We may share your personal data with the following categories of third parties:

• Service providers — companies that provide services on our behalf, including payment processors, courier and logistics partners, IT and cloud service providers, and our CRM platform (HubSpot)
• Professional advisers — accountants, lawyers and auditors where required
• Regulators and authorities — where required by law or to protect our legal rights

We do not sell, rent or trade your personal data to any third party for their own marketing purposes.

7. Cookies

Our website uses cookies to distinguish you from other users and to improve your experience. Cookies are small files placed on your device that help us provide a better website.

We use the following types of cookies:

• Strictly necessary cookies — required for the website to function (shopping cart, login session). These cannot be disabled.
• Analytics cookies — help us understand how visitors use the website (e.g. Google Analytics)
• Marketing cookies — used to deliver relevant advertising and track the effectiveness of campaigns

You can control and manage cookies through your browser settings. Disabling certain cookies may affect the functionality of our website.

8. Data retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting or reporting requirements. In general:

• Customer order and transaction records are retained for 7 years in line with Irish tax and accounting requirements
• Marketing consent records are retained for as long as you remain subscribed and for a reasonable period thereafter
• Enquiry and contact records are retained for up to 3 years

9. Your rights under GDPR

Under the GDPR you have the following rights in relation to your personal data:

• Right of access — to request a copy of the personal data we hold about you
• Right to rectification — to request correction of inaccurate or incomplete data
• Right to erasure — to request deletion of your data in certain circumstances
• Right to restriction — to request that we restrict processing of your data in certain circumstances
• Right to data portability — to request transfer of your data to another controller in a structured, machine-readable format
• Right to object — to object to processing based on legitimate interests or for direct marketing purposes
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at sales@creativesystems.ie. We will respond within one month of receiving your request.

10. Data security

We use SSL/TLS encryption on our website to protect data transmitted between your browser and our servers. We have implemented appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or destruction.

While we take all reasonable precautions, no data transmission over the internet can be guaranteed to be completely secure. You transmit data to us at your own risk.

11. Third-party links

Our website may contain links to third-party websites. This privacy policy applies only to creativesystems.ie. We are not responsible for the privacy practices of other websites and encourage you to read their privacy policies.

12. Changes to this policy

We may update this privacy policy from time to time. We will notify you of any significant changes by posting the updated policy on this page with a revised “last updated” date. We encourage you to review this policy periodically.

13. How to contact us or make a complaint

If you have any questions about this privacy policy or how we handle your personal data, please contact us:

You also have the right to make a complaint to the Data Protection Commission (DPC), the Irish supervisory authority for data protection matters:

Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28
Web: www.dataprotection.ie