PRIVACY NOTICE
At Creative Ways Limited (‘baltanz’), we are committed to protecting and respecting the privacy of your personal data. This privacy notice explains how we collect, use, transfer, and disclose your data. It applies when you use our website, iOS and Android applications, interact with us via social media, email, or phone, or participate in our competitions or events. It also applies when someone nominates you through our “refer a friend” function or purchases an e-gift card on your behalf. This notice covers:
- The personal data we collect
- How we collect your data
- How we use your data
- Marketing preferences, adverts, and cookies
- Links to other websites and third parties
- How we share your data
- Your rights
- Changes to this privacy notice
- How to contact us
Who is baltanz
Baltanz is a leading online fashion retailer that designs, sources, markets, and sells clothing, shoes, accessories, and beauty products, primarily targeting consumers aged 16-24 worldwide.
Creative Ways Limited, located at Dept 4139, 43 Owston Road, Carcroft, Doncaster, England DN6 8DA (referred to as “baltanz”, “we”, “us”, or “our” in this notice), is the controller responsible for your personal data collected through www.baltanz.com (the “website”) and the baltanz app (the “app”).
Our Data Protection Officer, responsible for privacy-related queries, is listed in the “How to Contact Us” section at the end of this notice.
Our Commitment to You
We take data protection seriously and process your personal data fairly, lawfully, and transparently. This privacy notice describes the data we collect and how we use it. We only collect and use personal data for the following purposes:
- To fulfill your order(s)
- To process orders made on your behalf (e.g., e-gift cards)
- To communicate following a “refer a friend” nomination
- To keep you updated with offers and trends
- To improve your shopping experience
- To tailor marketing to your interests
- To enhance our services
- To comply with legal obligations
How We Keep Your Data Secure
We have security measures in place to protect your data from accidental loss, unauthorized access, alteration, or disclosure. Communication between your browser and our website is encrypted where personal data is involved.
Third-party processors contracted by us are required to implement security measures to protect your data and comply with applicable laws. In the event of a data breach, we will notify you and relevant authorities as required by law.
The Personal Data We Collect
Personal data refers to any information that identifies an individual. This does not include anonymized data. While our website is for a general audience, we do not knowingly collect data from children under 13. If you are under 13, you may not use or submit data to our website.
We collect:
- Identity Data: First name, last name, title, date of birth (optional), occupation, personal description, photo, and gender.
- Contact Data: Email, billing and delivery addresses, location, country, phone number, loyalty program number, and social media ID (if logged in via social media).
- Financial Data: Payment card details and bank account information.
- Transaction Data: Purchase history, order fulfillment details, payments, rewards, and customer service interactions.
- Technical Data: Device information, IP address, login data, browser type and version, operating system, and time zone settings.
- Profile Data: Purchase history, style preferences, feedback, and survey responses.
- Usage Data: Website/app usage, browsing behavior, search history, and traffic data.
- Marketing and Communications Data: Preferences for receiving marketing materials and communication preferences.
We also collect aggregated data (e.g., statistical data) that does not directly identify individuals.
How We Collect Your Data
We collect data through:
- Direct interactions – When you create an account, place orders, subscribe to newsletters, enter competitions, complete surveys, or contact us.
- Automated technologies – We collect Technical and Usage Data through cookies, server logs, and other technologies. See our Cookie Policy for details.
- Third parties – We may receive personal data from:
- Someone purchasing an e-gift card for you or using “refer a friend.”
- Analytics providers like Google.
- Social media platforms when you log in via social media.
- Fraud prevention agencies and payment service providers.
How We Use Your Data
We only process personal data when legally permitted. Our lawful bases include:
- Consent – When you provide explicit consent.
- Contractual necessity – To process payments, fulfill orders, or provide customer support.
- Legitimate interests – To improve services, prevent fraud, and tailor marketing (unless overridden by your rights).
- Legal obligations – When required by law.
Marketing Preferences, Adverts, and Cookies
- We may send marketing messages if you have an account with us, purchased products, or signed up for promotions.
- You can opt out of marketing communications anytime via email preferences in “My Account” or the unsubscribe link in emails.
- Our website uses cookies to enhance your experience. You can manage cookie settings in your browser. See our Cookie Policy for details.
- We use targeted advertising tools (e.g., Google Analytics, Facebook Custom Audiences) to personalize marketing and improve services. You can opt out through Ad Settings or WebChoices.
Links to Other Websites and Third Parties
Our website may contain links to third-party sites. We are not responsible for their privacy policies. Please check their policies before submitting personal data.
How We Share Your Data
We may share data with:
- Business partners, payment providers (e.g., PayPal, Klarna), delivery companies, and analytics providers.
- Fraud prevention and detection agencies.
- Law enforcement when required by law.
- Potential business buyers in the event of a merger or acquisition.
International Data Transfers
Your data may be transferred outside the UK under legal safeguards. We ensure adequate protection through:
- Adequacy decisions by UK authorities.
- Standard contractual clauses for data transfers.
Your Rights
You have rights under data protection laws, including:
- Access – Request a copy of your data.
- Correction – Update incorrect or incomplete data.
- Erasure – Request deletion of your data.
- Restriction – Limit how we process your data.
- Data portability – Request a transfer of your data.
- Objection – Object to processing based on legitimate interests.
- Human intervention – Request review of automated decision-making.
To exercise these rights, contact DPO@baltanz.com. We aim to respond within one month.
Complaints
If you have concerns about how we process your data, contact us at DPO@baltanz.com. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).
Changes to This Privacy Notice
We may update this notice periodically. Significant changes will be communicated via our website or email.
How to Contact Us
For questions about this notice or your data, contact our Data Protection Officer at DPO@baltanz.com.
Last updated: December 10, 2024 (Version v1.07)
Creative Ways Limited
Registered Company Number: 16133395