Crêpeaffaire is a trading name of Crepe Union Ltd, registered in England and Wales with company number 16134829. Registered office:

71-75, Shelton Street, Covent Garden, London, WC2H 9JQ, UNITED KINGDOM

If you wish to access and manage your personal data held by Crêpeaffaire, please send an email with your request to privacy@crepeaffaire.com.

If you have given your consent for us to hold your personal data and send you updates and newsletters, you may withdraw consent at any time by contacting privacy@crepeaffaire.com.

To unsubscribe from our email newsletter, please email marketing@crepeaffaire.com or hit Unsubscribe on any of our mailing.

Your privacy is important to us. It is Crêpeaffaire’s policy to respect your privacy regarding any information we may collect from you and how it will be processed by us (including our website, http://crepeaffaire.com)

This policy informs you on how we comply with the European General Data Protection Regulation (GDPR) law. If you do not accept the terms of our privacy policy, you must stop using out website/ services.

Information We Collect From You

You may give personal information to us by filling out forms on our website, purchasing from us, emailing us, signing up to our newsletter, phoning us, participating on our social network pages or otherwise. This may include your name, postal address, email address, phone number, date of birth, age, gender and other contact information when you provide this to us.

Below are the circumstances where you may provide us with your personal data (such as name and email address or details mentioned above):

• Using our online services (e.g. website or app) and registering to use them. (This may also include providing us with your account information for these services, such as your username, password and identifiers for our app to acquire our products and services)
• Signing up to receive communications such as marketing newsletters
• Using Wi-Fi in our stores
• Purchasing products at our stores. (We may track transactional information such as payment method, price and products purchased. Our third parties may track further transaction information from the point of purchase)
• Interacting with our social media/network sites and/or entering our competitions/ prize draws
• Sending us feedback or using other interactive features of our website or app
• Using our online delivery services such as postal address and phone number

In addition, the use of our website or app means we may obtain information about your computer system or mobile device, mobile operating system, browser type, IP (Internet Protocol) address, linked sites; and applications or social media where you share Online Services content. This information collected is for administrative purposes.

How We Use Your Information

We will never sell or disclose your personal data to any third party marketeers.

We may use your information to:

• Send you newsletters if you have requested and consented to this (with information on our products, services, offers, website, or information we think may be of interest to you by email)
• Improve our website or app
• Understand what products are being purchases and difference between our stores
• Understand how often you visit us
• Understand how these factors change over time

We will only retain personal information for as long as necessary to provide you with a service.

We have put in place procedures to keep your data secure and safeguarded via our services. Your trust, personal data and privacy are paramount to us.

Log Data

We log general information about your browser whenever you visit our website. This information may include your computer’s Internet Protocol (IP) address, your browser type and version, the pages you visit on our site, the time and date of your visit, and the time spent on each page.

Like most website operators, we collect this data to better understand how our visitors use our services, and how we may improve your experience of our website in future. We do not share data specifics publicly, but may disclose aggregated and anonymised versions of this information, eg. in website usage trend reports.

Personal Information

On our website, we may ask you for personal information, such as your name, email, address, contact details and payment details. We collect only the personal information relevant to providing you with a service, and use your information only to ensure the fulfilment of this service. You are free to refuse our request for your personal information, with the understanding that we may be unable to provide you with some of your desired services without this information.

We will only retain personal information for as long as necessary to provide you with a service.

Cookies

We use “cookies” to collect information about you and your activity across our site. A cookie is a small piece of data that our website stores on your computer, and accesses each time you visit so we can understand how you use our site and serve you content based on preferences you have specified.

If you do not wish to accept cookies from us, you should instruct your browser to refuse cookies from our website, with the understanding that we may be unable to provide you with some of your desired service without them. This policy covers only the use of cookies between your computer and our website; it does not cover the use of cookies by any advertisers.

Third-Party Services

We may employ third-party companies and individuals on our websites – for example, analytics providers and content partners. These third parties have access to your personal information only to perform specific tasks on our behalf, and are obligated not to disclose or use it for any other purpose. For example, we use Stampede as our email newsletter and customer WiFi partner. These companies store personal information on our behalf.

Security

We take security seriously, and do what we can within commercially acceptable means to protect your personal information from loss or theft, as well as unauthorized access, disclosure, copying, use or modification. That said, we advise that no method of electronic transmission or storage is 100% secure, and cannot guarantee the absolute security of your data.

Links to Other Sites

Our website may link to external sites that are not operated by us. Please be aware that we have no control over the content and practices of these sites (including social network sites), and cannot assume responsibility for their treatment of your personal information. This privacy policy only covers our website and privacy practices. You should contact the operators of those websites directly if you wish to enquire about their privacy practices and policy before providing your personal information to any third party.

Changes to our Privacy Policy

At our discretion, we may change our privacy policy from time to time. Please refer to this page to keep updated on any changes. Your continued use of this site after any changes to this policy will be regarded as acceptance of our practices around privacy and personal information.

Business Transfers

If we or our assets are acquired, or in the unlikely event that we go out of business or enter bankruptcy, we would include user information among our assets transferred to or acquired by a third party. You acknowledge that such transfers may occur, and that any parties who acquire us may continue to use your personal information according to this policy.

Automatic Card Payments & Transaction Tracking

When you pay for goods or services using a bank card at any of our Crepeaffaire locations, we process a limited amount of data to ensure the transaction is completed, prevent fraud, and maintain operational efficiency.

Data Collected

We collect the following personal data automatically when you pay by card:

• A unique, securely encrypted card identifier (a token) linked to your payment card. We do not store your full card number (PAN), CVC, or PIN.

• Transaction details (date, time, location/store, amount spent, and general category of goods purchased).

Purpose and Lawful Basis

Important Note: This automatic tracking is operational only. We do not use this card-linked data to send you marketing messages, personalised offers, or award loyalty points unless you have given us separate, explicit consent to enrol in our loyalty programme (see Section below).

Loyalty and Marketing Profile

You are only enrolled in our Loyalty Program and receive personalised offers if you separately to the above, opt-in. Your decision to enroll is entirely voluntary.

Data Collected

If you opt-in to the Loyalty Program, we will use the following data to create and update your dedicated customer profile:

1. Personal Details: Name, email, mobile number (provided at sign-up), Date of Birth optional.

2. Loyalty Activity: Points earned, points redeemed, and rewards claimed.

3. Historical and Future Transaction Data: We will link all your historical and future card transaction data (from the Directory tracking described above) to your loyalty profile.

Purpose and Lawful Basis

Your Consent and Rights (Withdrawal)

By opting into the loyalty scheme, you are giving us explicit consent to use your transaction history for the purpose of profiling and targeted marketing communications (via [Email/SMS/App Push]).

• Right to Withdraw Consent: You can withdraw your consent for receiving marketing and personalised offers at any time, without affecting your ability to continue being part of the scheme for standard point collection and redemption.

• How to Withdraw: You can easily manage your communication preferences via your online account settings or by clicking the ‘unsubscribe’ link in any marketing email.