Privacy policy

PRIVACY NOTICE

This Privacy Notice sets out the details of how Cara Braia, Cara Lorenzini, Cara’s Crystal Coven (“we”, “us”, “our”) as data controller, collects and processes your personal dataobtained directly from you, or through our website located a www.carascrystalcoven.com, or our other online platforms and social media channels which, for the purposes of thisprivacy notice, shall be collectively referred to as ("the Website"). For the purposes of this Privacy Notice, personal data shall mean any informationthat canbe used to identify an individual whether directly or indirectly (“Personal Data”). Please read through the content of this Privacy Notice carefully and ensure that youunderstand it. If you do not understand the content of this Privacy Notice or do not accept or agree with it then you must stop using the Website and/ or accessing our other onlineplatforms, social media groups and any other associated groups or pages immediately. If you have already provided us with any Personal Data, then you must contact usimmediately. By accessing the Website and providing us with your Personal Data you are warrantingthat you are over 18 years of age. This Website is directed to individuals who are at least 18years of age. The Website is not intended to be used by anyone under the age of 18andwe do not collect any Personal Data or information from anyone under 18 years of ageincompliance. If you have any questions about this Privacy Notice or require more information concerningour privacy and data protection practices, please contact usat carascrystalcoven@gmail.com What personal data do we process, why do we process it, and howdowecollect it We may process Personal Data that you provide to us by subscribing to a newsletter or email list, requesting information through a contact form, or by any other communicationvia email, text or through our Website. We may also process your Personal Data through the use of cookies or other trackingsoftware on our Website. Please refer to our separate cookie policy for further information. We may also process Personal Data received from third parties such as Google, Squarespace, Mailchimp, Zoom, Calendly, Tiktok, Facebook, instagram, Youtube, Paypal, Stripe, Twitter, Pinterest, or other information, analytic or advertising providers or other search or payment processing services. When we process your Personal Data we will comply with relevant data protection lawsandprinciples such as the General Data Protection Regulation (EU Regulation 2016/679) PRIVACY NOTICE Page2of 6(“GDPR”), which means that your data will be used lawfully, fairly and in a transparent way, kept securely and only for as long as necessary for the purposes we have told you about. We shall only collect and process your Personal Data for purposes that are clearly outlinedprior to you providing us with your data, or for a legitimate reason. Whenever we process your Personal Data we do so on the basis of a lawful conditionthiswill either be because you have given your consent for us to process your Personal Data, where we are under a contractual or legal obligation, or where it is in our legitimate intereststo do so. We do not carry out automated decision making or any type of automated profiling. The types of Personal Data which we process will vary depending on your ownspecificcircumstances but typically can include:  Personal Information: which may include your name, date of birth, email address, phone number, business contact details, correspondence address, IP address. Weshall process this data for the purposes of communicating with you and keepingour records on the lawful grounds of legitimate interest;  Customer or Client Information: should you purchase goods and/or servicesfromus then we may process information in connection with your purchase, andthesupply of that purchase, as well as keeping appropriate records. Such informationmay include your Personal Information, billing address, delivery address, credit card or other payment details and we shall process it on contractual grounds;  User Information: this may include comments or statements that you may makeor post via our Website, online platforms or social media channels, images, documentsor videos that you share on or through our Website or through any of our pagesor other online platforms, and information concerning your use of our Website or other online platforms such as your browser information, pixel ID, page views, pagesvisited, number of visits and where appropriate log-in details. We shall processthisinformation to analyse and monitor usage and content of our Website andother platforms and channels to ensure the content is relevant to you, to support our administration and record keeping requirements, and to maintain security of our systems on legitimate interest grounds;  Promotional Information: this may include information you provide in connectionwith any promotions, marketing, or advertising from us or our third parties. Weshall use this information to provide relevant offers and advertisements, competitions and promotions and other free resources and to monitor our promotional activity, keep records and compile analytics on legitimate interest grounds. We may also process your Personal Data to deliver or send relevant advertisements toyouthrough our Website and to analyse the success and effectiveness of such adverts for our legitimate interest purposes of promoting and growing our business. PRIVACY NOTICE Page3of 6In accordance with the Privacy and Electronic Communications Regulations (PECR) wemay also send you relevant advertisements or marketing information if you: I. have ever purchased or enquired about our products or services; and II. at the time of your purchase or enquiry you agreed to receive advertisingor marketing information from us, and you have not opted out fromreceivingthat information. Where we contact you through email, we shall ensure that our emails clearly displaythelocation of the sender and include clear options for you to opt-out fromreceivingcontact from us in accordance with the CAN-SPAM Act. Special Category Data We do not collect any special category data about you. This is data relating to your health, race or ethnicity, political opinion, religious or philosophical beliefs, tradeunionmembership, genetics, biometrics, sex life or sexual orientation. We do not processanydata relating to criminal offences and convictions. Disclosure of Personal Data We may use any of the following external service providers to support our businessandmay share your Personal Data with those third parties: III. Squarespace; IV. Facebook; V. Mailchimp; VI. Google; VII. Paypal; VIII. Stripe; IX. Active Campaign; X. Zoom; XI. Dropbox; XII. Tiktok; XIII. Pinterest; XIV. Youtube XV. Twitter; XVI. Calendly PRIVACY NOTICE Page4of 6XVII. We understand that all of these third parties have appropriate technical andsecurityprocesses in place to protect your data. We may also share your Personal Data as follows: I. where it is necessary for external service providers who have been engagedbyustoassist in the provision of services to our clients and customers; II. where it is required by our professional support teams; III. where we are required by a government body or legal obligation or to protect our rights; IV. where it is required in connection with the sale or purchase of any businessor assets; V. with any other member or company of our group. Where we have outsourced a function or activity to an external service provider, we will onlydisclose Personal Data that the service provider needs to undertake that functionor activity, and we require external service providers to agree to keep your Personal Datasecure in accordance with the relevant law. We agree not to share your Personal Data with any third party for that thirdparty’smarketing purposes unless we have obtained your consent to do so. Transfer of Personal Data Our Website is located within the United Kingdom, and your data will be processedintheUnited Kingdom. We comply with the Internet laws applicable to that country. We do not transfer your personal data outside of the EEA. Data Security We take the protection of your Personal Data seriously and have taken suitableandreasonable steps to protect the Personal Data we hold from misuse, loss, unauthorisedaccess, and any modification or disclosure. We limit access to your Personal Data to those employees, agents, contractor or thirdparties who have a business need to know. They will only process your Dataonour instructions and must keep it confidential. If you are submitting Personal Data over the internet that you wish to remain private, pleasenote that while attempts are made to secure information transmitted to this site, thereareinherent risks in transmitting information across the internet. If you prefer, wecan PRIVACY NOTICE Page5of 6arrange for you to submit your Personal Data through alternative means. Please contact usto discuss alternative methods. Data Retention We will not keep your Personal Data for longer than is required with regard to the purposefor which it was collected by us or provided by you including any legal or recordkeepingrequirements and will take reasonable steps to destroy or permanently de-identifyyour Personal Data when it is no longer required. Your Rights in Relation to the Data We Hold You have rights in relation to your Personal Data, these include the right to accessandreceive a copy of your Personal Data, to ask us to correct any errors, to eraseyour Personal Data, to restrict or object to how your information is processed. You canfindout more about your rights by visiting https://ico.org.uk/your-data-matters/ To ensure the information we hold about you remains accurate please contact us usingtheemail address above if at any time your personal details change. Where you have provided your consent for us to process your Personal Data youcanwithdraw that consent at any time. Should you wish to do so please contact us at theabove email address. If you are not happy with how we process your Personal Data you have the right tolodgeacomplaint with The Information Commissioners Office (ICO), the UK supervisory authorityfor data protection issues. Links to Other Sites The Website may contain links to other sites. We are not responsible for the privacypractices of those websites and have no knowledge of whether cookies or other trackingdevices are used on any such linked sites. If you have any concerns regarding theprivacyof your information you should ensure you are aware of the privacy policies of thosesitesbefore disclosing any personal information. Changes to this Privacy Notice We reserve the right to alter or amend this Privacy Notice without any prior noticetoyou. Should our Privacy Notice be altered, the new Privacy Notice will be posted on the Website. PRIVACY NOTICE Page6of 6Your first use of our Website after the date of any amendments or alterations will constituteyour acceptance of such changes therefore, we recommend you review this Privacy Noticeregularly to keep