Privacy Notice

Introduction

Welcome to our Privacy Notice relating to the use of the website www.cressida.im. We respect your privacy and are committed to protecting your Personal Data and processing in compliance with applicable laws including but the Isle of Man Data Protection Act 2018 and the General Data Protection Regulation as applied to the Isle of Man pursuant to the GDPR and LED implementing Regulations 2018 (the “GDPR”), and, where applicable, the UK General Data Protection Regulations (“UK GDPR”) and the EU General Data Protection Regulation (Regulation (EU) 2016/679 (“EU GDPR”).

This Privacy Notice will inform you as to how we look after your Personal Data when you visit our website and tell you about your privacy rights and how the law protects you.

Who we are

The Data Controller of your Personal Data Cressida Limited (“Cressida”, “we”, “us” or “our”) registered in the Isle of Man under incorporation number 022155V. Our registered address is 33-37 Athol Street, Douglas, IM1 1LB, Isle of Man.

For any questions regarding this notice or our data protection practices, please contact us at [email protected] or by post at the address above.

The purpose of this Privacy Notice is to inform you of how the Company collects, processes, uses, stores and protects your Personal Data, as well as your rights with respect to the processing of your Personal Data.

Personal data we collect

We do not intentionally collect Personal Data through this website. Limited technical information may be processed automatically by our hosting provider for security and operational purposes.

We may also process contact details and business information when communicating with clients, suppliers, professional advisors or prospective business partners outside the website.

How we use Personal Data

The Company may process your Personal Data to fulfil its obligations and to comply with its legal obligations and for the following purposes:

• Administration and development of the Website;
• Detection, investigation and prevention of fraudulent activity and other illegal activities and protection of Your rights and rights of the Company;
• Collection, processing and performing statistical and other research and analysis of information for enhancement of the Website and the Services;

The Company may process additional Personal Data only with your lawful consent for the following purposes:

• For the purposes of commercial communication, marketing and advertising of Our Services or third-party Services via SMS, telephone, e-mail, internet, fax, mail, social media and/or any other appropriate communication channels.
• For personified market research and/or analysis purposes to better understand your needs, preferences, interests, experiences and/or habits as a consumer.

You have the right to withdraw your consent to our processing of your Personal Data at any time in writing to our contact details mentioned in this Policy. Withdrawal of your consent does not affect the lawfulness of the treatment of your Personal Data prior to its revocation.

Lawful Bases

We process Personal Data for the following purposes:

• processing is necessary to perform a contract or take steps before entering into a contract;
• processing is necessary for our legitimate business interests including website security, prevention of fraud, responding to enquiries and managing business relationships;
• processing is necessary to comply with legal obligations;
• you have given consent, where consent is required;
• processing is necessary to establish, exercise or defend legal claims.

Sharing Personal Data

We may share Personal Data with:

• IT, hosting, email and website service providers;
• professional advisers, including lawyers, accountants and auditors;
• compliance, due-diligence and business-support providers;
• regulators, courts, law-enforcement bodies or public authorities where required;
• clients, suppliers and business partners where necessary to provide our services;
• potential buyers, investors or successors in the event of a business transaction.

International Transfers

Where Personal Data is transferred outside the Isle of Man, UK or EEA, we will ensure that an appropriate safeguard is in place, such as an adequacy decision, standard contractual clauses or another lawful transfer mechanism.

Retention

In cases where we collect Personal Data, we keep it for as long as necessary for the purposes described in this notice, including legal, regulatory, accounting, reporting and dispute-resolution requirements.

Security

We use appropriate technical and organisational measures to protect Personal Data against unauthorised access, loss, misuse, alteration or disclosure. No website or email system is completely secure, so please avoid sending highly sensitive information unless necessary.

Your Rights

Subject to applicable law, you may have rights to:

• access your Personal Data;
• correct inaccurate Personal Data;
• request deletion;
• restrict processing;
• object to processing;
• receive a copy of your data in a portable format;
• withdraw consent where processing is based on consent;
• complain to the Isle of Man Information Commissioner.

We do not currently use your Personal Data for automated decision-making (including profiling) that produces legal effects concerning you or similarly significantly affects you. If this position changes, we will update this notice and, where required, seek your explicit consent.

The Isle of Man Information Commissioner is the independent supervisory authority for the Data Protection Act 2018 and the Unsolicited Communications Regulations 2005.

Marketing

We will only send electronic marketing where permitted by law. You can opt out of marketing communications at any time by contacting us or using any unsubscribe method provided.

Changes to this Notice

We may update this notice from time to time. The latest version will be published on our website.

Cookies

Cookies are small text files that are stored on your device when you visit a website. They help websites function effectively and, in some cases, provide information to the website operator or enhance the user experience. This website uses only strictly necessary cookies that are essential for its operation. We do not use analytics, advertising, profiling or other non-essential cookies.