Privacy Policy | SAS Creations

1. Who we are

SAS Creations (“SAS Creations”, “we”, “us” or “our”) is committed to respecting and protecting your privacy.

For data protection purposes, the controller of your personal information is:

Business name: SAS Creations
Email: admin@sascreations.co.uk
Website: sascreations.co.uk

This Privacy Policy explains how we collect, use, disclose, retain and protect personal information when you visit our website, contact us, make an enquiry, place an order or otherwise interact with SAS Creations.

2. Information we collect

Depending on how you interact with us, we may collect:

Your name, billing address, delivery address, email address and telephone number.
Order information, including the products or services requested, personalisation instructions and order history.
Payment and transaction information. Payments may be processed by a third-party payment provider; we do not normally receive or store complete payment-card details.
Messages, enquiries, reviews, feedback and other communications you send to us.
Marketing preferences, including whether you have agreed to receive promotional communications.
Technical information, such as your IP address, browser, device, operating system, referring pages and website activity.
Cookie and similar-technology information.
Information available through social-media platforms when you contact or interact with us through those services.
Records necessary for accounting, taxation, fraud prevention and dispute resolution.

Please do not include sensitive personal information in personalisation requests, messages or uploaded materials unless it is genuinely necessary and we have agreed to receive it.

3. How we collect information

We may obtain personal information:

Directly from you when you order, register, contact us, subscribe or interact with us.
Automatically through cookies and similar technologies when you use our website.
From payment processors, delivery providers, online marketplaces, social-media platforms and other service providers involved in your transaction.
From publicly available sources where permitted by law.

4. How and why we use your information

We use personal information only when we have a lawful reason to do so.

Purpose	Typical lawful basis
Responding to enquiries and providing quotations	Taking steps at your request before entering into a contract, or our legitimate interests in managing enquiries
Processing, personalising and delivering orders	Performing our contract with you
Taking and reconciling payments	Performing our contract and complying with legal obligations
Providing customer service and handling returns or complaints	Performing our contract and our legitimate interests in supporting customers and resolving disputes
Maintaining business, tax and accounting records	Compliance with legal obligations
Preventing fraud, misuse and security incidents	Our legitimate interests in protecting our customers and business, and compliance with legal obligations where applicable
Improving our website, products and services	Our legitimate interests in understanding and improving our business
Sending electronic marketing	Your consent, or another basis permitted by applicable electronic-marketing law
Managing cookie preferences and non-essential cookies	Your consent
Establishing or defending legal claims	Our legitimate interests and compliance with legal obligations

Where we rely on legitimate interests, we consider whether our interests are necessary and balanced against your rights and reasonable expectations.

You may withdraw consent at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.

5. Marketing

We may send you news, offers or product updates where you have consented or where applicable law otherwise permits us to do so.

You can stop receiving marketing communications at any time by:

Using the unsubscribe link in a marketing email; or
Contacting us at admin@sascreations.co.uk.

We may still send non-marketing communications concerning an enquiry, order, payment, delivery or legal matter.

6. Cookies and similar technologies

Our website may use cookies and comparable technologies to:

Operate essential website features.
Remember preferences and basket contents.
Understand website traffic and performance.
Support advertising or social-media features.

We will request consent before using non-essential cookies where required. You can manage your choices through our cookie controls and browser settings.

Website owner: Insert a link to your separate Cookie Policy here if analytics, advertising, social-media pixels or other non-essential technologies are used: [INSERT COOKIE POLICY LINK].

7. Who we share information with

Where necessary, we may share personal information with:

Website-hosting and ecommerce providers.
Payment processors and banks.
Postal, courier, delivery and fulfilment providers.
Email, customer-support and marketing service providers.
Accountants, insurers, professional advisers and IT or security suppliers.
Online marketplaces and social-media platforms through which you interact with us.
Regulators, courts, law-enforcement bodies or public authorities where disclosure is required or permitted by law.
A buyer, seller or adviser involved in a proposed sale, restructuring or transfer of the business.

These recipients may act as our processors or as separate controllers. We require service providers acting on our behalf to use personal information only for authorised purposes and protect it appropriately.

We do not sell your personal information.

8. International transfers

Some service providers may store or access personal information outside the United Kingdom.

Where personal information is transferred internationally, we use safeguards required by applicable data protection law. These may include adequacy regulations, approved contractual protections or another lawful transfer mechanism.

You may contact us for more information about safeguards relevant to your information.

9. How long we retain information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, tax, accounting, warranty and dispute-resolution requirements.

Our typical retention periods are:

Enquiries that do not result in an order: 6 Months
Customer and order records: 7 Years
Personalisation files or customer-supplied artwork: 1 Year
Marketing records: until you unsubscribe, plus a minimal suppression record to respect your choice.
Cookie information: for the periods stated in our cookie controls or Cookie Policy.
Complaints and legal claims: for as long as necessary to resolve the matter and meet applicable limitation periods.

We may retain information longer when required by law, where a dispute exists or where legal proceedings are reasonably anticipated. When information is no longer required, we delete or anonymise it securely.

10. Security

We use reasonable organisational and technical measures designed to protect personal information against loss, misuse, unauthorised access, alteration and disclosure.

No internet transmission or storage system is completely secure. You should use appropriate care when sending information online and keep account credentials confidential.

11. Your data-protection rights

Depending on the circumstances, you may have the right to:

Be informed about how your information is used.
Request access to your personal information.
Ask us to correct inaccurate or incomplete information.
Ask us to erase your information.
Ask us to restrict the use of your information.
Object to processing based on legitimate interests or for direct marketing.
Receive certain information in a portable format.
Withdraw consent at any time.
Request safeguards relating to decisions made solely through automated processing.

These rights are not absolute and exemptions may apply. We may ask for information needed to confirm your identity before responding.

To exercise a right, contact [INSERT PRIVACY CONTACT EMAIL]. We will normally respond within the period required by applicable law.

12. Complaints

Please contact us first if you have concerns about our use of your personal information so that we can try to resolve them.

You also have the right to complain to the UK Information Commissioner’s Office:

Website: https://ico.org.uk/make-a-complaint/
Telephone: 0303 123 1113
Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

If you are located outside the UK, you may also have the right to contact your local data-protection authority.

13. Children’s privacy

Our website and services are not intentionally directed to children under 13, and we do not knowingly collect their personal information without appropriate authorisation.

If you believe a child has provided personal information to us improperly, contact us so that we can investigate and take appropriate action.

14. Third-party websites

Our website or social-media pages may contain links to websites operated by other organisations. We do not control their privacy practices. You should read the privacy policy of each third-party service you use.

15. Automated decision-making

We do not currently use personal information to make decisions based solely on automated processing that produce legal or similarly significant effects.

If this changes, we will provide the information and protections required by law.

16. Changes to this policy

We may update this Privacy Policy when our services, suppliers or legal obligations change. The latest version will be published on our website with a revised “last updated” date.

Where a change materially affects how we use personal information, we will take reasonable steps to bring it to your attention.

17. Contact us

For questions about this Privacy Policy or our handling of personal information, contact:

SAS Creations
admin@sascreations.co.uk