Who we are
Our website address is: https://creativepursuits.co.za.
What personal data we collect and why we collect it
Comments
When visitors leave comments on the site, we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help with spam detection.
An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.
Media
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
Contact forms
When you submit a contact form on our website, we collect your name, email address, and any additional information you provide. This information is used solely to respond to your inquiry. We do not use this information for marketing purposes unless you explicitly opt-in to receive marketing communications. Contact form submissions are retained for customer service purposes for a period of up to six months and are not shared with third parties.
Cookies
If you leave a comment on our site, you may opt-in to saving your name, email address, and website in cookies. These are for your convenience, so you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me,” your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
Embedded content from other websites
Articles on this site may include embedded content (e.g., videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
Analytics
We use third-party analytics tools to collect anonymized data about how users interact with our website. This data helps us improve our site performance and user experience. No personal data is collected through our analytics.
Who we share your data with
We do not sell, trade, or otherwise transfer your personal data to outside parties unless we have your permission, or are required to do so by law. This does not include trusted third parties who assist us in operating our website, conducting our business, or providing services to you, so long as those parties agree to keep this information confidential. These third parties may include payment processors, cloud storage providers, and email service providers.
How long we retain your data
We will retain your personal data only for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements. Different retention periods apply to different types of data:
- Comments: Retained indefinitely unless the user requests removal.
- User accounts: Retained as long as the account remains active or until a deletion request is made.
- Contact form submissions: Retained for six months.
- Analytics records: Retained for one year.
What rights you have over your data
If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
Your data rights under GDPR
If you are a resident of the European Economic Area (EEA), you have the following data protection rights:
- Access: You have the right to request copies of your personal data.
- Rectification: You have the right to request that we correct any information you believe is inaccurate.
- Erasure: You have the right to request that we erase your personal data, under certain conditions.
- Restrict processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
- Object to processing: You have the right to object to our processing of your personal data, under certain conditions.
- Data portability: You have the right to request that we transfer your data to another organization, or directly to you, under certain conditions.
To exercise any of these rights, please contact us using the details provided in the “Contact Information” section.
Data transfers
We may transfer your personal data to third countries (i.e., countries outside the European Economic Area) in connection with our operations. Where we do so, we will ensure that appropriate safeguards are in place, as required under applicable data protection laws, to protect your personal data.
How we protect your data
We are committed to ensuring that your information is secure. In order to prevent unauthorized access or disclosure, we have put in place suitable physical, electronic, and managerial procedures to safeguard and secure the information we collect online. This includes encryption, secure servers, and access controls.
Data breach procedures
In the event of a data breach, we will notify the relevant authorities within 72 hours of becoming aware of the breach if it poses a risk to your rights and freedoms. We will also notify affected individuals without undue delay if the breach is likely to result in a high risk to their rights and freedoms.
Third parties we receive data from
We may receive personal data about you from third parties such as:
- Payment processors: When you make a purchase on our website, we receive payment information from third-party payment processors to complete the transaction.
- Social media platforms: If you interact with us through social media, we may receive information about your profile from the platform, such as your username and public profile information.
Automated decision-making and profiling
We do not engage in any automated decision-making or profiling that has legal or similarly significant effects on individuals.
Industry regulatory disclosure requirements
We comply with applicable industry regulations, including GDPR, POPIA, and other relevant international privacy laws, which require us to disclose personal data in certain legal circumstances.
Contact information
If you have any questions or concerns about this Privacy Policy or how your personal data is handled, please contact us at: Email: admin@creativepursuits.co.za