GDPR & data protection

Security certificates

We have a robust system in place and regularly update the security certificates on our website.

Protecting children's names

The children’s names will not appear as one big long list and will never be displayed in full.

We use a search bar facility with partially obscured surnames and this can only be accessed via your secure online parent portal using unique login details that only you have control of.

For most schools / groups and most children, other parents logging in and seeing disguised names of their children’s classmates alongside their own child’s is not an issue. However for children subject to a protection order, keeping their names entirely secret can be important.

This is why for these children, we can display a code number in the portal rather than the child’s name. This way, the parent will recognise their child’s artwork but their name will not be displayed. When the parent places their order online, they will have the opportunity to change the code to read as their child’s name before we print anything. Even though they will have updated their child’s name for their unique order, our website will still only ever display the code within the parent portal - keeping the identity permanently protected.

Managing data

Data held by Crestline Printers Limited and mychildsart.co.uk is held on a secure server and is only kept for as long as is required to fulfil school orders.

Our personnel are trained in the protection of personal information and our buildings and premises are secure and protected by alarm systems linked to Redcare. Crestline Printers Limited and mychildsart.co.uk are registered under the General Data Protection Regulation. Registration number: ZA000186.

Data protection policy

This notice describes the privacy policy of Crestline Printers Limited. By ordering you are accepting and consenting to the practices described in this privacy notice. Any personal information provided or gathered is controlled by Crestline Printers Limited, The Point, Granite Way, Loughborough, LE12 7TZ. Crestline Printers Limited is registered under General Data Protection Regulations. Registration reference: ZA000186. If you would like to contact us directly about our registration, please send an e-mail to enquiries@crestline.co.uk.

What personal information about customers does Crestline gather? 

The information we are supplied from customers is used to handle orders, deliver products and services, process payments, communicate with you about orders, products, services and promotional offers, update our records and generally maintain your accounts with us. We also use this information to improve our website, prevent or detect fraud or abuses of our website and enable third parties to carry out technical, logistical or other functions on our behalf. Personal data will not be held longer than is necessary.

The types of information we gather:

Information you give us: We receive and store any information you enter on our website or give us in any other way. You can choose not to provide certain information but then you might not be able to take advantage of the features of our website. We use the information that you provide for such purposes as responding to your requests, improving our website and communicating with you. Automatic information: We receive and store certain types of information whenever you interact with us. For example, like many websites we use “cookies" and we obtain certain types of information when your web browser accesses Crestline.co.uk or advertisements and other content served by or on behalf of Crestline Printers Limited on other websites.

What About Cookies?

To enable our systems to recognise your device and to provide features to you, we use cookies.

Does Crestline Printers Limited share the information it receives?

Information about our customers is an important part of our business and we do not sell it to others. We share customer information only as described below.  Third party service providers: We employ other companies and individuals to perform functions on our behalf. Examples include delivering packages, sending postal mail and e-mail, removing repetitive information from customer lists, analysing data, providing marketing assistance, providing search results and links, processing credit card payments and providing customer service. They have access to personal information needed to perform their functions, but may not use it for other purposes. Furthermore, they must process the personal information in accordance with this privacy notice and as permitted by applicable data protection laws. Business transfers: As we continue to develop our business, we might sell or buy websites, subsidiaries or business units. In such transactions, customer information generally is one of the transferred business assets but remains subject to the promises made in any pre-existing privacy notice (unless of course, the customer consents otherwise).

Protection of Crestline Printers Limited and others:

We release account and other personal information when we believe release is appropriate to comply with the law, enforce or apply our conditions of use and other agreements, or protect the rights, property or safety of Crestline Printers Limited, our users or others. This includes exchanging information with other companies and organisations for fraud protection and credit risk reduction. Obviously however, this does not include selling, renting, sharing or otherwise disclosing personally identifiable information from customers for commercial purposes in a way that is contrary to the commitments made in this privacy notice. With your consent: Other than as set out above, you will receive notice when information about you might go to third parties and you will have an opportunity to choose not to share the information. Whenever we transfer personal information to countries outside of the European economic area in the course of sharing information as set out above, we will ensure that the information is transferred in accordance with this privacy notice and as permitted by the applicable laws on data protection.

How Secure Is Information About Me?

We work to protect the security of your information during transmission by using Secure Sockets Layer (SSL) software, which encrypts information you input. We maintain physical, electronic and procedural safeguards in connection with the collection, storage and disclosure of personally identifiable customer information. Our security procedures mean that we may occasionally request proof of identity before we disclose personal information to you.

What about third party advertisers and links to other web sites?

Our site does not contain third-party advertising and links to other websites. As discussed above, you can always choose not to provide information. The help feature on most browsers will tell you how to prevent your browser from accepting new cookies, how to have the browser notify you when you receive a new cookie or how to disable cookies altogether. Additionally, you can disable or delete similar data used by browser add-ons, such as flash cookies, by changing the add-on's settings or visiting the website of its creator. However because cookies allow you to access Crestline.co.uk features, we recommend that you leave them turned on. 

Conditions of Use, Notices, and Revisions

If you have any concern about privacy at Crestline Printers Limited, please email us with a thorough description and we will try to resolve the issue for you. Our business changes constantly and our privacy notice and the conditions of use and sale will change also. We may e-mail periodic reminders of our notices and conditions, unless you have instructed us not to, but you should check our website frequently to see recent changes. Unless stated otherwise, our current privacy notice applies to all information that we have about you and your account. We stand behind the promises we make and will never materially change our policies and practices to make them less protective of customer information collected in the past without the consent of affected customers.