Privacy Policy
Who we are
1. This website www.creedfragrance.com is owned and run by Fontaine Limited (“Fontaine”, “the company” or “We”). For the purpose of data protection law, the controller is Fontaine Limited of C/O TMF Group 13th Floor, One Angel Court, London EC2R 7HJ.
2. This Privacy Policy explains the types of personal information we collect, how we use that information, who we share it with, and how we protect that information.
3. This website is not intended for children, and we do not knowingly collect data relating to children.
What information do we collect from you?
Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include anonymised data, which is data that can no longer be associated with you.
1. We may collect, use, store and transfer different types of personal information about you as detailed below:
a. Identity Data includes first name, last name, title, date of birth and gender.
b. Contact Data includes email address, billing address, delivery address and telephone numbers.
c. Financial Data includes bank account and payment card details.
d. Transaction Data includes details about payments to and from you and other details of products you have purchased from us.
e. Technical Data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
f. Service Data includes purchases or orders made by you, your interests, preferences, feedback and survey responses.
g. Usage Data includes information about how you use our website and products.
h. Marketing and Communications Data includes your preferences in receiving marketing from us and our third parties and your communication preferences.
We do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data). Nor do we collect any information about criminal convictions and offences.
Information we collect about you:
We use different methods to collect information from and about you:
1. Direct interactions. You may choose to provide personal information to us, for example by filling in forms on our website or at one of our stores or counters, entering competitions and prize draws, creating an account on our website or via a mobile app, contributing on one of our social platforms, or contacting us by email, phone, live chat, or otherwise.
2. Automated technologies or interactions. When you visit our site, we may use cookies and other technologies to automatically collect the following information:
a. Technical Data, including your IP address, your login information, browser type and version, device identifier, location and time zone setting, browser plug-in types and versions, operating system and platform, page response times, and download errors.
b. Information about your visit, including the websites you visit before and after our site and products you viewed or searched for.
c. Length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page.
d. Details about the types of products we provide to you.
e. Please see our cookie policy for further details.
3. Third parties or publicly available sources. We also work closely with third parties (including, for example, business partners, sub-contractors in technical, payment and delivery services, advertising networks, analytics providers, search information providers, and credit reference agencies) and may receive information about you from them. We may also collect information about you from publicly available sources, including publicly available content on social media. Ometria and Rocket Mill for digital marketing. We also work with third parties (including, for example, business partners, sub-contractors in technical, payment, mailing and delivery services, analytics providers, credit reference agencies) and may receive information about you from them as part of the service we provide you, or for legal reasons.
4. Emails that we send as part of our marketing programmes use clear gifs (web beacons). These tell us whether the email has been opened. Web beacons can be turned off by not “enabling images” in an email.
5. If you are using one of our mobile apps, we may also collect information about the way you use our app.
How and why we use your personal information
Under data protection law, we can only use your personal data if we have a lawful basis for doing so, which includes:
• Contract: where our use of your personal data is necessary to fulfil a contract we have with you, or because you have asked us to take specific steps before entering into a contract.
• Legal obligation: where our use of your personal data is necessary for us to comply with the law (not including contractual obligations).
• Legitimate interests: where our use of your personal data is necessary for our legitimate interests or the legitimate interests of a third party (unless there is a good reason to protect your personal data which overrides our legitimate interests).
• Consent: where you have given us clear consent for us to process your personal data for a specific purpose.
The table below explains what we use your personal data for and why, as well as what our legitimate interests are where we are relying on our legitimate interests as the lawful basis to process your personal data:
Purpose/Activity | Type of data | Lawful basis for processing, including basis of legitimate interest and any additional processing conditions. |
To register you as a new customer. | (a) Identity (b) Contact | (a) Performance of a contract with you |
To process and deliver your order of products, including: (a) Manage payments, fees and charges (b) Collect and recover money owed to us | (a) Identity (b) Contact (c) Financial (d) Transaction (e) Marketing and communications | (a) Performance of a contract with you; OR (b) Necessary for our legitimate interests (to recover debts due to us) |
To manage our relationship with you which will include: (a) Notifying you about changes to our terms or privacy policy (b) Asking you to leave a review or take a survey | (a) Identity (b) Contact (c) Profile (d) Marketing and communications | (a) Performance of a contract with you; (b) Necessary to comply with a legal obligation; OR (c) Necessary for our legitimate interests (to keep our records updated and to study how customers use our products) |
To administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data) | (a) Identity (b) Contact (c) Technical | (a) Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise); OR (b) Necessary to comply with a legal obligation |
To deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you | (a) Identity (b) Contact (c) Profile (d) Usage (e) Marketing and communications (f) Technical | (a) Necessary for our legitimate interests (to study how customers use our products, to develop them, to grow our business and inform our marketing strategy |
To use data analytics to improve our website, services, marketing, customer relationships and experiences | (a) Technical (b) Usage | (a) Necessary for our legitimate interests (to define types of customers for our products, to keep our website updated and relevant, to develop our business and to inform our marketing strategy); OR (b) Consent |
To make suggestions and recommendations to you about products that may be of interest to you | (a) Identity (b) Contact (c) Technical (d) Usage (e) Profile (f) Marketing and communications | (a) Necessary for our legitimate interests (to develop our products and grow our business); OR (b) Consent |
To enable you to partake in a prize draw, competition or complete a survey | a) Identity b) Contact c) Profile d) Usage e) Marketing and Communications | (a) Performance of a contract with you; OR (b) Necessary for our legitimate interests (to study how customers use our products/services, to develop them and grow our business) |
Do we share your personal information?
1. We may share your personal information with the third parties set out below for the purposes listed in the above ‘how and why we use your personal information’ section.
2. We may share your personal information within Fontaine, and with any division within the company, which means our subsidiaries, and our ultimate holding company and its subsidiaries for marketing purposes.
3. We may also share your personal information with:
a. Advertising, marketing, digital and social media agencies to help us to deliver advertising, marketing, and campaigns, to analyse their effectiveness, and to manage your contact and questions. In particular we work with the following agencies Ometria and Rocket Mill Limited.
b. We also use third parties required to deliver a product to you e.g. postal/delivery services. We currently use DPD Group and Royal Mail for our postal and delivery services.
c. Analytics and search engine providers that assist us in the improvement and optimisation of our site. We currently use Google Analytics.
d. Credit reference agencies for the purpose of actively preventing and detecting crime, fraud and corruption as well as assessing your credit score and verifying your details where this is a condition of entering into a contract with you. We currently use Adyen payment gateway to process and check your payment card details.
e. Subcontractors and third parties for the purpose of the performance of a contract that we hold with them or that we hold with you.
4. We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.
5. We may also disclose your personal information to third parties:
a. In the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets.
b. If Fontaine or a part of its assets are acquired by a third party, in which case personal data held by it about its customers relating to those assets will be one of the transferred assets.
c. If we have a duty to disclose your personal information in order to comply with any legal obligation, or if we need to do so in order to enforce or apply our terms of use and other agreements; or to protect the rights, property, or safety of Fontaine, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.
d. In other circumstances if we have your consent or we are permitted to do so by law.
Where we store your personal information?
1. The data that we collect from you will be stored within the UK and European Economic Area (“EEA”).
Links to third party sites and social login.
2. Our site may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
3. We may also offer you the opportunity to use social login. If you choose to use social login, please be aware that the social platform will share your profile information with us. The information that is shared will depend on your social platform settings. You can find out more by reviewing the privacy notice for the social login provider that you use.
Social Media and user generated content.
4. Some of our sites and apps allow users to submit their own content. Please remember that any content submitted to our sites and apps or to one of our social platforms can be viewed by the public, and you should take that into account when sharing any personal information e.g. financial information or address details via these platforms.
Your Choices
If you choose not to give your personal information
1. If you choose not to give your personal information that we request when you wish to make a purchase, it may delay or stop us from being able to provide you with the products or services that you have requested.
How long we keep your personal information
1. We hold your data for as long as it is required for the purposes described above and subject to your personal consent. In particular we will contact you annually to check that you are happy for us to continue holding and using any personal data as set out in this Notice where we are not required to do so by law and/or for legitimate business obligations.
Controlling your personal data
1. It’s important that you are able to control your personal data and you have the following rights, which you can exercise free of charge, as follows:-
a. Access to your information – You have the right to request a copy of the personal information about you that we hold.
b. Correcting your information – We want to make sure that your personal information is accurate, complete and up to date and you may ask us to correct any personal information about you that you believe does not meet these standards.
c. Deletion of your information – You have the right to ask us to delete personal information about you where:
a. You consider that we no longer require the information for the purposes for which it was obtained.
b. We are using that information with your consent and you have withdrawn your consent – see Withdrawing consent to using your information below.
c. You have validly objected to our use of your personal information – see Objecting to how we may use your information below.
d. Our use of your personal information is contrary to law or our other legal obligations.
d. Objecting to how we may use your information – You have the right at any time to require us to stop using your personal information for direct marketing purposes. In addition, where we use your personal information to perform tasks carried out in the public interest or pursuant to the legitimate interests of us or a third party then, if you ask us to, we will stop using that personal information unless there are overriding legitimate grounds to continue.
e. Restricting how we may use your information – in some cases, you may ask us to restrict how we use your personal information. This right might apply, for example, where we are checking the accuracy of personal information about you that we hold or assessing the validity of any objection you have made to our use of your information. The right might also apply where this is no longer a basis for using your personal information, but you don’t want us to delete the data. Where this right to validly exercised, we may only use the relevant personal information with your consent, for legal claims or where there are other public interest grounds to do so.
f. Portability – if we process personal information that you provide to us on the basis of consent or because it is necessary for the performance of a contract to which you are party, and in either case that processing is carried out by automated means, then you have the right to have that personal information transmitted to you in a machine readable format. Where technically feasible, you also have the right to have that personal information transmitted directly to another controller.
g. Automated processing – if we use your personal information on an automated basis to make decisions which significantly affect you, you have the right to ask that the decision be reviewed by an individual to whom you may make representations and contest the decision. This right only applies where we use your information with your consent or as part of a contractual relationship with you.
h. Withdrawing consent using your information – Where we use your personal information with your consent you may withdraw that consent at any time, and we will stop using your personal information for the purpose(s) for which consent was given.
Please contact us in any of the ways set out in the Contact information and further advice section if you wish to exercise any of these rights.
Contact information and further advice
1. If you have any questions or concerns about how we treat your personal information, or would like to request a copy of the personal information we hold about you, please contact us at DataProtection@creedfragrances.co.uk or by writing to us at:
Data Protection Officer
Fontaine Limited
10th Floor
200 Aldersgate Street
London
EC1A 4HD
Complaints
1. We seek to resolve directly all complaints about how we handle personal information but you also have the right to lodge a complaint with the Information Commissioner’s Office:
a. Online: https://ico.org.uk/global/contact-us/email/
b. By phone: 0303 123 1113
c. By post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, SK9 5AF
Your duty to inform us of changes
It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.
Changes To Our Privacy Policy
1. Any changes we may make to our Privacy in the future will be posted on this page and, where appropriate, notified to you by e-mail. Please check back frequently to see any updates or changes to our Privacy.
2. DataProtection@creedfragrances.uk.com.
3. This privacy statement was last updated in September 2024.