Privacy

We at Cooked Illustrations, trading as Cominata (Cominata.com) collect and process personal data on this website specific to the services this ecommerce website is for. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website cominata.com, (collectively, the “Site”). Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site.

We reserve the right to make changes to this Privacy Policy at any time and for any reason. We will alert you about any changes by updating the “Last Updated” date of this Privacy Policy. Any changes or modifications will be effective immediately upon posting the updated Privacy Policy on the Site, and you waive the right to receive specific notice of each such change or modification.

Who collects your data?

Cooked Illustrations Ltd, trading as Cominata or Cominata.com (“we” or “us” or “our”) is the “controller” of the personal data we collect and process. We are the decision-maker over means and purposes of the personal data we hold.

What data do we collect?

We may collect information about you in a variety of ways. The information we may collect on the Site includes:


Personal Data

Personally identifiable information, such as your name, shipping address, email address, telephone number, and demographic information, such as your age, gender, hometown, and interests, that you voluntarily give to us when you register with the Site or when you choose to participate in various activities related to the Site. You are under no obligation to provide us with personal information of any kind, however your refusal to do so may prevent you from using certain features of the Site or even engaging with the Site at all.


Financial Data

Financial information, such as data related to your payment method (e.g. valid credit card number, card brand, expiration date) that we may collect when you purchase, order, return, exchange, or request information about our services from the Site.

IP Data

We also collect information on how you access and use our services. This usage data may include information such as your computer’s internet protocol address (e.g. IP address), browser type, browser version, the pages of our website you visit, the time and date of your visit, the time spent on those pages, unique device identifiers and other diagnostic data.


Third Party

To provide the services and products through this website, Cominata employs the services of third parties who provide print-on-demand, processing, transaction, or other services relevant to the delivery of our business. These Third Parties will be subject to different rules as they operate in different jurisdictions. 

As such, some of the data you share with us will be shared with our suppliers in order to fulfil orders and will be subject to each individual Third Party’s own Privacy Policy.

A full list of the services we use is here:

LINK


Cookies

We use cookies and similar tracking technologies. Cookies are files with small amounts of data which may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device. Tracking technologies also used are beacons, tags, and scripts to collect and track information and to improve and analyse our services.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our services.


Where we obtain your data from

In most cases, we will obtain your personal data directly from you, using an electronic or physical form, or through specific actions you take in using our Sites.


How your data is kept secure

The security of your personal data is important to us, but remember that no method of transmission over the internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.

We may employ Third Party companies and individuals to facilitate our services, to provide services on our behalf, or to assist us in analysing how our services are used. These Third Parties have access to your personal data only to perform these tasks and are obligated not to disclose or use it for any other purpose. At all times, we remain the Controller of your personal data whereas Third Parties are merely processors. 

Business transactions: If we are involved in a merger, acquisition or asset sale, your personal data may be transferred. We will provide notice before your personal data is transferred and becomes subject to a different privacy policy.

Disclosure for law enforcement: Under certain circumstances, we may be required to disclose your personal data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).


International transfers

In order to process your data for the purposes outlined below, we may need to transfer your data to countries or jurisdictions outside the EEA. In each case, we ensure that our suppliers provide adequate protection for the rights of data individuals in connection to the transfer of their personal data. Currently, we expect all suppliers to use a standard contractual clause approved by the European Union or be subject to Privacy Shield scheme in the United States.


How your data is processed

We use the collected data for various purposes:

  • To provide and maintain our services
  • To notify you about changes to our services
  • To allow you to participate in interactive features of our services when you choose to do so
  • To gather analysis or valuable information so that we can improve our services
  • To monitor the usage of our services and
  • To detect, prevent and address technical issues


The bases on which we process your data

We process your data on the following bases:

  • Consent
  • Contract
  • Legal obligation
  • Legitimate interest

We process most of the data that we hold on the basis of consent. Where we process your data on the basis of your consent, that processing of your data will be restricted to those types of processing for which we have received your consent.


How we will communicate with you

For any direct “marketing” communications, we will only contact you via email.

If you no longer wish to receive correspondence, emails, or other communications from us, you may opt-out by:

  • Noting your preferences at the time you register your account with the Site
  • Logging into your account settings and updating your preferences.
  • Contacting us using the contact information provided below

If you no longer wish to receive correspondence, emails, or other communications from third parties, you are responsible for contacting the Third Party directly.


How you can affect the way Cooked Illustrations Ltd processes your data

You have a number of privacy rights under the GDPR. These are:

  • The right to be informed
  • The right of access
  • The right to rectification
  • The right to erasure
  • The right to restrict processing
  • The right to data portability
  • The right to object
  • Rights in relation to automated decision making and profiling

To exercise any of these rights, please get in touch via email.

We think the rights most relevant to you are as follows: The right of access allows you to request details of all personal data we hold on you. The right of erasure allows you to require us to delete your personal data. The right of rectification requires us to amend your data where appropriate. The right to object allows you to restrict the way we contact you or otherwise process your personal data. 

Whenever you exercise one of your privacy rights, we are required to respond as soon as practically possible and no later than 1 month unless exceptional circumstances apply. 


Retention of your personal data 

Generally, we keep your personal data while your user account is active. Once your regular account is deleted the personal data is either deleted or anonymised to be kept for analysis. Once anonymised it no longer contains any personal data. In some circumstances under UK tax law, our payment processors Stripe, PayPal and GoCardless may be required to keep your basic personal data (name, address, contact details) for a minimum of 6 years.


How to find out more or make a complaint

If you would like to make a complaint to us about how your data is processed, please email us at cominata@cookedillustrations.com with the subject line “Data Complaint”.

If you are not satisfied with our response, or believe we are processing your personal data not in accordance with the law, you can complain to the Information Commissioner’s Office (ICO) of the United Kingdom.