We are dedicated to protecting your privacy. This Privacy Notice explains how we collect, use, and safeguard your personal data. It also outlines our compliance with data protection laws and your rights regarding your personal information.

This Notice applies if we process your personal data and you are not one of our employees. You may be an individual customer, a sole trader, a partner in a business, a user of our website or app (“App”), an employee of a supplier or customer, a participant in one of our marketing campaigns or events, a recruitment candidate, or anyone else impacted by our activities.

References to “we,” “our,” or “us” in this Notice refer to Kreuzfig.

In this Privacy Notice, you’ll find information on:

• The personal data we collect
• Where we obtain your personal data
• How we use your personal data
• Who we share your personal data with
• How we protect your privacy
• How long we retain your personal data
• International transfers of your personal data
• Your rights
• Updates to this Notice
• How to contact us

If you have any questions or concerns, feel free to reach out to us.

What Personal Data Do We Collect?

We may collect the following personal data about you:

• Contact details such as your name, address (including billing and delivery addresses), telephone number (including mobile number) and email address.
• Identification information such as your passport and other official identification details, information from a third-party money laundering check provider, Companies House information and your national insurance number.
• Details of your education and work history, including qualifications, roles, responsibilities and professional qualifications, and other information connected with your business (where you are a sole trader).
• Personal data including your age or date of birth, gender, marital status, family details and dietary requirements.
• Your social media handles, posts and information about your followers and the people that follow you.
• Details of financial and transaction data including purchases, orders, returns and refunds.
• Online browsing activities on our Website including which items you store in your shopping cart.
• Your usage of our App and your username and password.
• Information about the device you use to browse our Website or access our App including the IP address, device type, usernames, account details and passwords.
• Information connected with any purchases made on our Website or via our App including financial and transaction data.
• Communication and marketing preferences.
• Interests, preferences, feedback and competition and survey responses.
• Your real-time location.
• Correspondence and communications with us including relating to complaints, allegations, disputes and claims.
• Other publicly available personal data, including any which you have shared via a public platform (such as LinkedIn, Instagram, YouTube, Twitter or a public Facebook page).
• Business information, such as where you are a sole trader, a partner or a company director.
• Creditworthiness, where we are required to undertake investigations in order to establish whether to enter into or continue a business relationship with you or the organisation you work for.
• Details of your performance when working with or for us or in relation to any project or work we are engaged in.
• Videos, photographs and audio recordings which you or other people take and provide to us or we take ourselves.
• Your usage of our IT systems when you visit our premises such as visitor internet and Wi-Fi facilities.
• Subscription Information such as when you subscribe to one of our blogs or other materials.

This list is not exhaustive and in specific instances, we may need to collect additional personal data for the purposes set out in this Notice.

Special Categories of Personal Data

There are limited situations in which we collect, store and use the following “special categories” of more sensitive personal data including:

• information about your race or ethnicity, religious beliefs and sexual orientation;
• information about your health, including any medical condition, dietary requirements, health and sickness records, medical records and health professional information; and
• biometric data including your height and weight.

Where we do collect any special category personal data, we will do so based on your explicit consent.

We may collect, store and use any criminal records information in relation to you; in which case we will do so based on legal obligation or your explicit consent.

WHERE DO WE COLLECT YOUR PERSONAL DATA FROM?

We may collect the following personal data about you:

• • • Contact Information: Your name, address (including billing and delivery addresses), phone number (including mobile), and email address.
    • Identification Information: Passport details, other official identification, third-party money laundering checks, Companies House information, and your national insurance number.
    • Employment and Education History: Qualifications, job roles, responsibilities, professional credentials, and business-related information if you are a sole trader.
    • Personal Information: Age or date of birth, gender, marital status, family details, and dietary requirements.
    • Social Media Data: Your social media handles, posts, followers, and the people you follow.
    • Financial and Transaction Data: Purchases, orders, returns, refunds, and other transaction details.
    • Online Activities: Your browsing history on our Website, including items stored in your shopping cart.
    • App Usage: Your activity within our App, along with your username and password.
    • Device Information: Data related to the device used to browse our Website or access our App, such as IP address, device type, usernames, and passwords.
    • Purchase Information: Data connected to purchases made on our Website or App, including financial and transaction details.
    • Marketing Preferences: Your communication and marketing preferences.
    • Feedback: Interests, preferences, feedback, and responses to surveys or competitions.
    • Location Data: Your real-time location.
    • Communications: Correspondence with us, including any complaints, disputes, or claims.
    • Publicly Available Data: Personal data shared on public platforms like LinkedIn, Instagram, YouTube, Twitter, or Facebook.
    • Business Information: Data related to your role as a sole trader, partner, or company director.
    • Creditworthiness: Information required to assess whether to enter or continue a business relationship with you or your organization.
    • Performance Data: Information about your performance in work or projects we are engaged in.
    • Multimedia: Videos, photos, and audio recordings provided by you or taken by us.
    • IT System Usage: Data related to your use of IT systems when visiting our premises, including internet and Wi-Fi usage.
    • Subscription Data: Information related to your subscription to our blogs or other materials.

This list is not exhaustive, and in certain cases, we may collect additional personal data for the purposes stated in this Notice.

Special Categories of Personal Data

In limited cases, we may collect, store, and use the following sensitive personal data:

• • • Sensitive Information: Data about your race or ethnicity, religious beliefs, or sexual orientation.
    • Health Information: Medical conditions, dietary needs, health and sickness records, medical history, and health professional details.
    • Biometric Data: Height, weight, and other biometric data.

If we collect special category data, it will be done with your explicit consent.

Additionally, we may collect, store, and use criminal records information in certain circumstances, based on a legal obligation or your explicit consent.

HOW WE USE YOUR DATA

Fre any necessary cookies for functionality and security are marked so that they are not deleted by the tool.

Detailed information about how we use cookies is in our Cookie Policy. This will allow you to make an informed choice as to whether you wish to accept our cookies.

WHO WE SHARE YOUR PERSONAL DATA WITH

We may share your personal data with the following third parties:

• The organisation that you represent.
• Other companies within our group.
• Other organisations within our supply chain so that they can contact you about any issues in the supply chain or where your personal data is relevant to a subcontractor or party above us in the supply chain.
• Other organisation including but not limited to organisations who own the venues at which our events take place, organisations who market and/or facilitate our events and photographers and videographers who attend our events.
• Purchasers, investors, funders and advisers if we sell or negotiate to sell all or part of our business or assets or restructure our business whether by merger, re-organisation or otherwise.
• Third parties who ask for or want referrals for example we may provide your details to a third party who is seeking services/products which are the same or similar to those that you provide.
• Other service providers and advisors to us including companies that support our IT, help us analyse the data we hold, process payments, send communications to our customers, provide us with legal, property or financial advice and generally help us deliver our products and services to you or the organisation that you represent or for us to purchase them from you or the organisation you represent.
• Our professional advisors including lawyers, accountants and other advisors.
• Your professional advisors including lawyers, accountants and other advisors.
• Credit reference agencies and other identification agencies so that we can assess your creditworthiness or verify your identity.
• Organisations who carry out research, analysis and/or data cleansing services.Governmental bodies, regulators, law enforcement agencies, security services, courts/tribunals and insurers including where we are required to do so in order to comply with our legal obligations and the administration of justice.

HOW WE PROTECT YOUR DATA

Our controls

Kreuzfig is committed to keeping your personal data safe and secure and so we have numerous security measures in place to protect the loss, misuse and alteration of information under our control. Our security measures include: –

• encryption of personal data;
• regular cyber security assessments of all service providers who may handle your personal data;
• regular planning to ensure we are ready to respond to cyber security attacks and data security incidents;
• weekly penetration testing of systems;
• security controls which protect our IT systems infrastructure and our premises from external attack and unauthorised access;
• internal policies setting out our data security rules for our personnel; and
• regular training for our employees.

We take data security very seriously and will use all reasonable endeavours to protect the integrity and security of the personal data we collect about you.

WHAT YOU CAN DO TO HELP PROTECT YOUR DATA

Privacy Notice

We are committed to protecting your privacy. This Privacy Notice explains how we collect, use, and safeguard your personal data. It also outlines our compliance with data protection laws and your rights regarding your personal information.

This Notice applies to you if we process your personal data and you are not an employee. You may be an individual customer, a sole trader, a partner in a business, a user of our website or app (“App”), an employee of a supplier or customer, a participant in one of our marketing campaigns or events, a recruitment candidate, or anyone else impacted by our activities.

References to “we,” “our,” or “us” in this Notice refer to Kreuzfig.

In this Privacy Notice, you’ll find information on:

• The personal data we collect
• Where we obtain your personal data
• How we use your personal data
• Who we share your personal data with
• How we protect your privacy
• How long we retain your personal data
• International transfers of your personal data
• Your rights
• Updates to this Notice
• How to contact us

If you have any questions or concerns, feel free to reach out to us.

What Personal Data Do We Collect?

We may collect the following personal data about you:

• Contact Details: Your name, address (including billing and delivery addresses), telephone number (including mobile), and email address.
• Identification Information: Passport details, other official identification, third-party money laundering checks, Companies House information, and your national insurance number.
• Education & Work History: Qualifications, job roles, responsibilities, professional credentials, and business-related information if you are a sole trader.
• Personal Data: Age or date of birth, gender, marital status, family details, and dietary requirements.
• Social Media: Handles, posts, followers, and those you follow.
• Financial & Transaction Data: Purchases, orders, returns, refunds, and transaction details.
• Browsing Activity: Data from our Website, including items stored in your shopping cart.
• App Usage: Your username, password, and activity within our App.
• Device Information: IP address, device type, usernames, and passwords.
• Purchase Information: Connected to purchases made on our Website or App.
• Communication & Marketing Preferences: Your preferences regarding communications and marketing.
• Interests & Feedback: Responses to surveys or competitions, preferences, and feedback.
• Location Data: Your real-time location.
• Correspondence: Communications relating to complaints, disputes, or claims.
• Public Data: Information from platforms like LinkedIn, Instagram, YouTube, Twitter, or Facebook.
• Business Information: If you are a sole trader, partner, or company director.
• Creditworthiness: For business relationships or credit checks.
• Performance Data: Your performance in work or projects.
• Multimedia: Videos, photos, and audio recordings.
• IT System Usage: When visiting our premises, such as Wi-Fi and internet usage.
• Subscription Information: When you subscribe to our blogs or materials.

This list is not exhaustive, and in certain cases, we may collect additional personal data for specific purposes.

Special Categories of Personal Data

We may collect, store, and use the following sensitive personal data in limited situations:

• Sensitive Information: Race, ethnicity, religious beliefs, and sexual orientation.
• Health Information: Medical conditions, dietary needs, health records, and medical professional details.
• Biometric Data: Height, weight, and biometric data.

We collect sensitive data only with your explicit consent.

Additionally, we may collect criminal records information based on legal obligations or explicit consent.

Where Do We Collect Your Personal Data From?

You

We may collect personal data directly or indirectly from you when you:

• Engage with us during our relationship with you or your organization.
• Set up an online account, purchase products, or use our services.
• Download our App or register for services.
• Communicate with us regarding any questions or issues.
• Participate in events or competitions, or apply for a position with us.
• Raise complaints, claims, or legal disputes.

Third Parties

We may also collect personal data from third parties, such as:

• Professional bodies, credit reference agencies, and research organizations.
• Social media platforms (LinkedIn, Instagram, YouTube, Twitter, etc.).
• Your employer or the organization you work for.
• Professional advisors (lawyers, accountants).
• Government, local authorities, or regulators.

How We Use Your Data

We process your personal data for the following purposes:

Failure to provide required personal data may affect our ability to perform contracts or comply with legal obligations.

You have the right to withdraw your consent at any time by contacting us.

Personalisation and Automated Decision Making

We may personalize your experience based on browsing and purchasing activities using automated decision-making processes. This allows us to tailor services and marketing to your preferences.

You can opt out of such automated processing at any time by contacting us.

Cookies

Our Website uses cookies to collect personal data, such as browsing and purchasing behaviors. You can control cookie settings and opt-in or out through our Cookie Policy.

For more details, please refer to our Cookie Policy.

HOW LONG WE KEEP YOUR DATA

We will not retain your personal data for longer than necessary for the purpose for which is has been obtained and then for as long as there is any risk of a potential claim, which will be dependent upon the limitation period for the particular type of claim. Various laws, accounting and regulatory requirements applicable to us also require us to retain certain records for specific amounts of time. In relation to your personal data, we will hold this only for so long as we require that personal data for legal or regulatory reasons or for legitimate organisational purposes. We will not keep your data for longer than is necessary for the purposes for which we collect them.

Our Data Retention Policy sets out the length of time we will usually retain personal data and where these default periods might be changed.

It is important to ensure that the personal data we hold about you is accurate and up-to-date, and you should let us know if anything changes, for example if you move position or work for a different organisation or change your phone number or email address. You can contact us by using the details set out in the “Contact us” section below.

INTERNATIONAL TRANSFERS

The personal data we collect may be transferred to and stored in countries outside the US. This will typically occur when service providers are located outside the US or if you are based outside the US. These transfers are subject to special rules under data protection laws.

Some of these jurisdictions require different levels of protection in respect of personal data and, in certain instances, the laws in those countries may be less protective than the jurisdiction you are typically resident in. We will ensure that your personal data is only used in accordance with this Notice and applicable data protection laws and is respected and kept secure and where a third party processes your personal data on our behalf we will ensure that one of the following safeguards is implemented:

• we will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the SEC;
• where we use certain service providers, we may use specific contracts approved by the SEC which give personal data the same protection it has in the US; and
• where we use providers based in the US, we may transfer data to them if they are part of the Privacy Shield which requires them to provide similar protection to personal data shared between the Europe Union.

Our directors and other individuals working for us may in limited circumstances access personal data outside of the US if they are on holiday abroad outside of the US. If they do so they will be using our security measures and will be subject to their arrangements with us which are subject to English Law and the same legal protections that would apply to accessing personal data within the US.

In limited circumstances the people to whom we may disclose personal data as mentioned in the “Who We Share Your Personal Data With” section above may be located outside of the US. In these cases, we will impose any legally required protections to the personal data as required by law before it is disclosed.

For further details please contact us by using the details set out in the “Contact us” section below.

YOUR RIGHTS

You have the following rights in relation to your personal data:

• The right to be informed about how your personal data is being used.
• The right to request access to personal data we hold about you.
• The right to ask us to update and correct any out-of-date or incorrect personal data that we hold about you.
• The right to object to processing of your personal data and/or to withdraw any consent you have given us and to opt out of any marketing communications that we may send you.
• The right to restrict processing of your personal data.
• The right to object to certain automated decision-making processes using your personal data including profiling.
• The right to request that we erase your personal data in certain circumstances (the right to be forgotten) for example when the data are no longer necessary for the purpose for which we collected them.
• The right to have your personal data provided to you by us in a structured, commonly used and machine-readable format and transmitted to another data controller. This is known as the right to data portability.

You should note that some of these rights, for example the right to require us to transfer your data to another service provider or the right to object to automated decision making, may not apply as they have specific requirements and exemptions which apply to them and they may not apply to personal data recorded and stored by us. However, some have no conditions attached, so your right to withdraw consent or object to processing for direct marketing are absolute rights.

We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal data is not disclosed to any person who has no right to receive it.

Whilst this Notice sets out a general summary of your legal rights in respect of personal data, this is a very complex area of law.

If you wish to exercise any of the above rights, you can always contact us using the details set out in the ‘Contact Us‘ section below.

CHANGES TO THIS NOTICE

We may update this Notice from time to time. When we change this Notice in a material way, we will update the version date at the bottom of this Notice. For significant changes to this Notice we will try to give you reasonable notice unless we are prevented from doing so. Where required by law we will seek your consent to changes in the way we use your personal data.

CONTACTING US

In the event of any query or complaint in connection with the information we hold about you, please email us.