Privacy Policy

 

Privacy Policy

 

1. PURPOSE AND SCOPE 

This privacy policy (“Policy”) describes the privacy practices for Corston (https://www.corston.ae/) (“Website”) and outlines how Personal Data of users (“Customers”, “you”) is collected, stored, disclosed, and secured against misuse through the Website. It further identifies how Customers can correct any inaccuracies in the Personal Data provided.

By using the Website, Corston services, and/or products (together ”Corston Services”, “Services” or “our Services”), you consent to the collection and processing of your Personal Data as described in this Policy.

For the purpose of this Policy, “Personal Data” shall mean any data relating to an identified natural person or one who can be identified directly or indirectly by linking data using identifiers such as name, email id, phone number, voice, picture, identification number, online identifier, geographic location, or one or more special features that express the physical, psychological, economic, cultural, or social identity of such person or any other data stated under this Policy.

2. HOW WE COLLECT PERSONAL DATA ABOUT YOU

We may collect and process the following Personal Data about you when:

2.1 Information that you provide us by filling in forms on our Website, including information provided at the time of registering to use our Website and other co-registrations (e.g., social media logins), subscribing to our Services, posting material, or requesting further services;

2.2 The Personal Data you provide us to enter a competition or promotion via our Website, provide reviews, testimonials, or feedback on our Website;

2.3 The Personal Data you provide us, or that we may collect from you, to report a problem with our Website;

2.4 A record of correspondence if you contact us;

2.5 General, aggregated, demographic, and non-personal information;

2.6 The details of transactions you carry out through our Website and of the fulfillment of your requests;

2.7 The details about your computer, including but not limited to your IP address, operating system, and browser type, as well as information about your general internet usage (e.g., by using technology that stores Personal Data on or gains access to your device, such as cookies, tracking pixels, web beacons, etc. (“Cookies”));

2.8 Your e-mail address from a third party if you indicate that you have consented to that third party sharing your Personal Data with us; and

2.9 Any other Personal Data we consider necessary to enhance your experience on the Website.

3. HOW WE USE YOUR PERSONAL DATA

The above personal information may be used for the following purposes to:

3.1 Provide you with information about our offerings and/or our periodic newsletters (if the Customer provides its consent);

3.2 Respond to your requests;

3.3 Fulfil any orders placed on our Website;

3.4 Create or develop business intelligence or data analytics in relation to the offerings provided by us (for this purpose we may share the Personal Data with certain software or tools available online if the required active and unambiguous consent is given by your end);

3.5 Manage our relationship with you;

3.6 Have internal record keeping;

3.7 Verify your identity;

3.8 Maintain correct and up-to-date information about you;

3.9 Identify you as a contracting party;

3.10 Improve our Website;

3.11 Be able to provide Corston Services to you; and

3.12 To comply with our legal or statutory obligations.

3.13 : Personal data is all data that can identify you personally, such as your name, address, email address and online user names. The personal data of our users is used as follows: 

1.    performing our services,
2.    ensuring the delivery of products/ services and for customer or technical support.

Unless otherwise described in the following sections, in general no personal data will be collected, processed or used in connection with the use of this website. 

4. WHO HAS ACCESS TO YOUR DATA WITHIN OUR ORGANIZATION

Within our organization, access to your data is limited to those persons who require access in order to provide you with Corston Services, which you purchase from us, to contact you, and to respond to your inquiries, including requests for refunds. Those staff members may be part of the marketing or customer support teams. Staff members only have access to Personal Data that is relevant on a ‘need to know’ basis.

5. WHO DO WE SHARE YOUR DATA WITH OUTSIDE OUR ORGANIZATION AND WHY

5.1 Partners:
We may make available to you further services, products, or applications provided by partners for use on or through our Website. If you choose to use such services, products, or applications, your Personal Data related to those transactions may be shared with the respective partner.

5.2 Service Providers:
We may share your Personal Data with service providers. Examples include storing and analyzing Personal Data, protecting and securing our systems, providing search results and links, customer service, credit analysis, processing your information for profiling, user analysis, payment processing, and delivery services.

5.3 Third Parties:
We may also share your Personal Data with other third parties where you request or authorize us to do so provided that we comply with applicable law or it is required to respond to a valid legal process, or it is required to operate and maintain the security of our Website, including but not limited to the prevention or stopping of an attack on our computer systems or networks.

6. WHY AND FOR HOW LONG DO WE STORE INFORMATION WE COLLECT FROM YOU

We retain certain information collected from you while you are a Customer of Corston and in certain cases where you have deleted your account for the following reasons:

6.1 To use our Websites;

6.2 To ensure that we do not communicate with you if you have asked us not to;

6.3 To provide you with a refund if entitled;

6.4 To better understand the traffic to our Websites so that we can provide all members with the best possible experience;

6.5 To detect and prevent abuse of our Websites, illegal activities, and breaches of our Terms and Conditions of Corston Services; and

6.6 To comply with applicable legal, regulatory, tax, or accounting requirements.

We retain Personal Data as long as necessary for the purposes described above. This means that we retain different categories of Personal Data for different periods of time depending on the type of Personal Data, the category of user to whom the Personal Data relates, and the purposes for which we collected the Personal Data.

7. Data Storage and Transfer

Please be aware that your personal data may be transferred to, stored, and processed in countries outside of the United Arab Emirates. These countries may have different data protection laws than those in the UAE. However, we will take appropriate measures to ensure that your data is protected in accordance with this privacy policy and applicable data protection laws, regardless of where it is processed. By providing us with your personal data, you agree to this transfer, storage, and processing of your data outside the UAE.

8. SECURITY

We implement a variety of administrative, managerial, and technical security measures to help protect your Personal Data. Our Company has various internal control standards which relate specifically to the handling of Personal Data. These include certain controls to help safeguard the Personal Data we collect online. Our employees are trained to understand and comply with these controls, and we communicate our Policy practices and guidelines to our employees. However, while we strive to protect your Personal Data, you must also take steps to protect your Personal Data. We urge you to take every precaution to protect your Personal Data while you are on the internet

9. YOUR RIGHTS

You have certain rights when it comes to your Personal Information under UAE law, including:

9.1 Right to access: This right allows you to obtain a copy of your Personal Data, as well as other supplementary information.

9.2 Right to restrict processing: You have the right to restrict the processing of your Personal Data in certain circumstances.

9.3 Right to rectification: You have the right to have any incomplete or inaccurate Personal Data we hold about you corrected.

9.4 Right to object to processing and automated processing: You have the right to object to decisions issued with respect to automated Processing that have legal consequences or seriously affect you, including profiling.

9.5 Right to object to processing: The right to object allows you to stop or prevent us from processing your Personal Data. This right exists where there are no legitimate reasons for us to continue the processing of your Personal Data. You also have the right to object where we are processing your Personal Data for direct marketing purposes.

9.6 Right to request personal data transfer: You have the right to obtain your Personal Data provided to us for Processing in a structured and machine-readable manner, so long as the Processing is based on your consent or is necessary for the fulfilment of a contractual obligation and is made by automated means. You have the right to request the transfer of your Personal Data to another controller whenever this is technically feasible.

9.7 Right to erasure: You have the right to ask us to delete or remove Personal Data when the Personal Data is no longer necessary for the purpose for which we originally collected or processed.

9.8 Right to withdraw consent: You may withdraw consent at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.

To exercise your rights, you can contact us at hello@corston.ae.

10. OUR POLICY CONCERNING MINORS & THEIR DATA

Our Website is not directed to minors under the age of eighteen, and we do not knowingly collect personally identifiable information from minors or distribute such information to third parties. We screen users who wish to provide personal information in order to prevent minors from providing such information. If we become aware of having inadvertently received personally identifiable information from a minor, we will delete such information from our records. If we change our practices in the future, we will obtain prior, verifiable parental consent before collecting any personally identifiable information from minors.

11. LINKS TO OTHER WEBSITES

Our Website may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party’s site. We strongly advise you to review the privacy policy of every website you visit.

Third parties are under no obligation to comply with our Policy with respect to Personal Data that you provide directly to those third parties or that those third parties collect for themselves. We do not control the third-party websites that may be accessible through our Website. Thus, this Policy does not apply to any information you provide to third-party websites or gathered by the third parties that operate them.

12. CHANGES TO THIS POLICY

We may update our Policy from time to time. We will notify you of any changes by posting the new Policy on the Website. If we make any material changes to the Policy, we will notify you via email, through a notification posted on Corston Services, or as required by applicable law. You can see the latest version of the Policy by checking the date at the bottom of the Website. You are advised to review this Policy periodically for any changes. Changes to this Privacy Policy are effective from when they are posted on the Website.

13. COMPLIANCE WITH LAW

We are committed to complying with all applicable data protection and privacy laws in the United Arab Emirates, including the UAE Personal Data Protection Law (PDPL). We ensure that all personal data collected, stored, and processed by us within the UAE is handled in accordance with these regulations. This includes implementing appropriate technical and organizational measures to safeguard your personal data against unauthorized access, disclosure, or misuse. By using our services, you acknowledge and agree to our processing of your personal data in accordance with UAE law.

14. THIRD PARTY INTEGRATIONS

i. In the course of providing our services, we may integrate with third-party service providers or platforms to enhance our offerings, streamline operations, or improve your experience. These third-party services may include, but are not limited to, payment processors, data analytics providers, customer relationship management systems, marketing platforms, and cloud storage services.

ii. We ensure that any third-party service providers we work with are carefully selected and have appropriate measures in place to protect your personal data. However, we are not responsible for the privacy practices of these third parties, and we encourage you to review their privacy policies before providing them with your personal data.

iii. When integrating with third-party services, we may share certain personal data necessary to fulfill the purposes for which you have engaged us, such as processing transactions, managing customer accounts, or providing customer support.

iiii. All data shared with third parties will be handled in compliance with applicable data protection laws, including the UAE Personal Data Protection Law (PDPL) and other relevant regulations.

If you have any questions or concerns about our use of third-party service providers, please contact us for further information. 

 

Purpose/activity 

Type of data

Lawful basis for processing including basis of legitimate interest 

To register you as a new customer, process your payment, and fulfil your order with us

(a) Identity

(b) Contact

(c) Payment card or payment information (final four digits only)

Performance of a contract with you

To manage our relationship with you which will include:

(a) Notifying you about changes to our terms or privacy policy

(b) Asking you to leave a review or take a survey or comment on our blog posts

(a) Identity

(b) Contact

(c) Marketing and communications

(a) Performance of a contract with you

(b) Necessary to comply with a legal obligation

(c) Necessary for our legitimate interests (to keep our records updated and to study how customers use our products/services)

To administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data)

(a) Identify

(b) Contact

(c) Technical

(a) Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise)

(b) Necessary to comply with a legal obligation

To use data analytics to improve our website, products/services, marketing, customer relationships and experiences

(a) Technical

(b) Usage

Necessary for our legitimate interests (to define types of customers for our products and services, to keep our website updated and relevant, to develop our business and to inform our marketing strategy)

To make suggestions and recommendations to you about goods or services that may be of interest to you. To send you email marketing communications

(a) Identify

(b) Contact

(c) Technical

(d) Usage

(e) Marketing and communications

Necessary for our legitimate interests (to develop our products/services and grow our business) and/or

your consent to receiving direct marketing and communications

15. MARKETING CLAUSE

We are committed to offering you choices regarding how we use your personal data, especially concerning marketing communications. You will receive marketing communications from us if you have requested information from us and have not opted out of receiving such communications.

16. OTHER ONLINE SERVICES AND THIRD-PARTY FEATURES

For your convenience and information, we may provide links to other online services and websites, and include third-party features such as apps, tools, widgets, and plug-ins (e.g., Instagram, Pinterest, Facebook, and LinkedIn buttons). These services and websites are independent of our control. The privacy practices of these third parties, including details on the information they collect about you, are governed by their respective privacy policies. We are not responsible for the privacy practices, information collection, or other activities of these third parties.

17. THIRD-PARTY MARKETING

Corston does not share your personal data with third parties for marketing purposes. Should we wish to do so in the future, we will seek your express opt-in consent before sharing your personal data with any third party for marketing purposes.

18. THIRD-PARTY WEB ANALYTICS SERVICES

We utilize third-party web analytics services, such as Google Analytics and HubSpot. These service providers use cookies and similar technologies to collect, analyze information, report on site activities and trends, and diagnose technical issues related to the website's usage.

To learn more about Google’s practices, please visit Google’s Privacy Policy and opt out of them by downloading the Google Analytics opt-out browser add-on, available at Google Analytics Opt-out.

CONTACT US

If you have any questions about this Policy, you can contact us at hello@corston.ae.