Privacy Policy - atCreativeAvenue Store

We are committed to protecting your privacy and handling your data in a transparent, secure, and lawful manner, in compliance with the European General Data Protection Regulation (GDPR) and applicable local laws.

Data Controller: ATCA GROUP LIMITED
Information Commissioner's Office (ICO) Security Number: CSN4165392
Contact Email: hello@atcreativeavenue.store
Registered Office: Office 13811 182-184 High Street North, East Ham, London, E6 2JA, United Kingdom
Company Registration Number: 16643224
Registered in: England and Wales

We may collect the following categories of personal data:

• Contact Information: Name, email address, phone number, shipping/billing address
• Account Information: Login credentials, purchase history, wishlists
• Payment Data: Payment method, transaction details (handled securely via payment processors; we do not store card details)
• Order Information: Products purchased, delivery information, returns
• Communications: Emails, support requests, reviews, and other correspondence
• Device and Usage Data: IP address, browser type, operating system, referral URLs, pages viewed, clicks, session times
• Cookies and Tracking Data: Information collected via cookies and similar tracking technologies (see Cookies Policy)
• Marketing and Analytics Data: Data from Facebook Pixel, Meta Pixel, Google Analytics, Microsoft Clarity, A/B testing tools, and embedded YouTube/Instagram content

Custom Photo Data (for custom kits):

If you upload a photo or file for a custom paint-by-number kit, we collect that image and store it within your Shopify order files. These images are used only to produce your custom kit. After production, we do not use or access the photo again. We keep the photo with the order record for 6 years as part of our accounting and tax record obligations and as proof of the sale for HMRC. We retain the photo for this period because it is stored within the Shopify order record and cannot be practically separated from that required record. After 6 years, the photo is deleted along with the order record unless we must keep it longer by law. These images are accessible only by our internal team. We do not use uploaded photos for marketing unless you give explicit written permission.

We use your personal data to:

• Process and fulfill your orders
• Provide customer support
• Improve our website, products, and services
• Communicate with you regarding your orders, account, or promotional offers (with your consent where required)
• Manage your account and preferences
• Perform analytics, measure performance, and conduct A/B testing
• Protect our business, prevent fraud, and comply with legal obligations
• Provide targeted advertising and retargeting via Facebook, Meta, Google, Microsoft, and similar platforms (with your consent as required)
• Produce custom kits from customer-submitted photos or files, including preparing the custom design and coordinating production and delivery

We process personal data under these legal bases:

• Performance of a Contract: To fulfill orders and provide requested services
• Legal Obligation: To comply with tax, accounting, and other legal requirements
• Consent: For email marketing, cookies, and analytics (where legally required)
• Legitimate Interests: To operate, analyze, and improve our business (without overriding your rights)
• Production of custom kits: Performance of a contract and legitimate interests (to deliver the product you ordered)

We may share your data with:

• Service Providers: Shipping partners, payment processors, customer service platforms, IT and cloud service providers
• Analytics and Marketing Providers: Facebook/Meta, Google Analytics, Microsoft Clarity, A/B testing tools
  (Sharing with analytics and marketing partners is based on your Consent via our cookie banner where required, and on our Legitimate Interests to analyze, market, and grow our business.)
• Embedded Content Providers: YouTube, Instagram (when you view embedded content, your data may be collected by those platforms)
• Legal Authorities: If required by law, regulation, or legal process
• Successors: In the event of a merger, acquisition, or sale of assets

We do not sell your personal data.

Additional advertising and analytics partners we may use include:

Google Ads remarketing, TikTok Pixel, Microsoft Ads, Reddit Pixel, Pinterest Pixel, and other similar tracking tools configured through Shopify and Google Tag/Ads systems.

As our partners and platforms may be located outside the European Economic Area (EEA), your data may be transferred internationally. We ensure that appropriate safeguards (such as Standard Contractual Clauses) are in place to protect your data.

We keep your data only as long as necessary for the purposes described in this policy, or as required by law. When no longer needed, your data is securely deleted or anonymized.

• Order and transaction records: we retain these for 6 years from the end of the financial year they relate to, to meet UK tax and accounting requirements.
• Marketing data: we keep your marketing preferences and subscriptions until you unsubscribe or ask us to delete them.
• Custom photo uploads: we retain uploaded customer photos in the Shopify order files for 6 years together with the related order record, primarily to satisfy accounting and tax record obligations and to keep proof of the sale for HMRC. We also retain these photos for this period as a legitimate interest to resolve disputes, warranty issues, or legal claims relating to the custom product. After 6 years, the photos are deleted with the order record unless a longer period is required by law.

Depending on your location and applicable laws, you may have the following rights:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure (“Right to be Forgotten”): Request deletion of your data
• Restriction: Request restriction of processing
• Objection: Object to processing (for example, for direct marketing)
• Portability: Request transfer of your data to another provider
• Withdraw Consent: Where we rely on consent, you may withdraw it at any time
• Lodge a Complaint: With your local data protection authority

To exercise your rights, please contact us at hello@atcreativeavenue.store. If you are in the UK, you can also lodge a complaint with the Information Commissioner’s Office (ICO). If you are in the EU, you can lodge a complaint with your local supervisory authority.

We use cookies and similar technologies to:

• Enable website functionality (essential cookies)
• Analyze usage (for example, Google Analytics, Microsoft Clarity)
• Provide personalized ads and retargeting (for example, Facebook Pixel/Meta Pixel)
• Integrate embedded content (for example, YouTube, Instagram)

You can control cookies via your browser settings or via our cookie consent banner (provided by Shopify). For more details, see our Cookies Policy. Our cookie banner allows you to accept or reject non-essential cookies in regions where consent is required.

With your consent (where required), we may send you marketing emails or SMS about our products and offers. You can unsubscribe at any time via the link in our emails or by contacting us.

Marketing platforms we use may include Klaviyo and Shopify Email. Customer support communications may occur via Zoho Email and WhatsApp Business.

Our Website is not intended for children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us for removal.

We use appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction. No method of transmission over the Internet or electronic storage is completely secure, but we work to protect your data and regularly review our safeguards.

If you are a California resident and our business is subject to the California Consumer Privacy Act (CCPA) as amended by the CPRA, you may have additional rights, including the right to know, delete, correct, and opt out of the sale or sharing of your personal information.

We do not sell personal information. We may share certain identifiers and browsing data with advertising partners for cross-context behavioral advertising.

To opt out of such sharing, please contact us at hello@atcreativeavenue.store with your request. We will process opt-out requests where required by law.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. Changes take effect when posted on this page. If we make material changes, we will post a clear notice on the Website.