This Privacy Policy describes how Crisanteme Ltd ("we", "us", or "our") collects, uses, and protects your personal data when you visit our website at crisanteme.com. We are committed to ensuring that your privacy is protected and we comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Crisanteme Ltd is a company registered in England and Wales with company number 13874562. Our registered office is at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. For any privacy-related enquiries, please contact us at [email protected].

2. Information We Collect

We may collect the following types of information:

• Usage Data: Information about how you use our website, including your IP address, browser type, pages visited, time spent on pages, and referring URLs. This is collected automatically through cookies and analytics tools.
• Contact Information: If you contact us via email or our contact form, we collect your name, email address, and any other information you voluntarily provide.
• Affiliate Tracking: When you click on affiliate links, third-party merchants may place cookies or use tracking parameters to attribute sales to our referral. We do not receive your personal purchase details from these merchants.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To operate and maintain our website and improve user experience
• To respond to your enquiries and provide customer support
• To analyse website traffic and understand how visitors interact with our content
• To comply with our legal obligations and protect our rights

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

4. Legal Basis for Processing

Under UK GDPR, we process your personal data on the following legal bases:

• Legitimate Interests: For website analytics, security monitoring, and understanding how our content is used
• Consent: Where you have explicitly agreed to our use of non-essential cookies
• Contractual Necessity: When processing is necessary to respond to your enquiries
• Legal Obligation: Where we are required to process data to comply with applicable law

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience. For detailed information about the cookies we use, how to manage them, and your choices, please see our Cookies Policy.

6. Data Sharing and Third Parties

We may share your data with the following categories of third parties:

• Analytics Providers: We use analytics services to understand website traffic patterns. These providers process data on our behalf under data processing agreements.
• Hosting Providers: Our website is hosted by third-party infrastructure providers who may have access to server logs.
• Affiliate Partners: When you click affiliate links, you are directed to third-party merchant websites. Those sites operate under their own privacy policies and we encourage you to review them.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Server logs and analytics data are typically retained for up to twenty-six months, after which they are automatically deleted or anonymised.

9. Your Rights

Under UK data protection law, you have the following rights:

• The right to access the personal data we hold about you
• The right to request correction of inaccurate personal data
• The right to request erasure of your personal data (the "right to be forgotten")
• The right to object to processing based on legitimate interests
• The right to restrict processing of your personal data
• The right to data portability
• The right to withdraw consent at any time

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month.

10. International Data Transfers

Some of our third-party service providers may process your data outside the United Kingdom. When this occurs, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK Information Commissioner's Office, to protect your data.

11. Children's Privacy

Our website is not intended for children under the age of sixteen, and we do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated policy will be posted on this page with a revised effective date. We encourage you to review this page periodically.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

• Email: [email protected]
• Address: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
• Phone: +44 20 7946 0958