1. Introduction

1.1 This privacy notice (Privacy Notice) outlines how Creative Tales collects, uses, and manages your personal data in connection with our services and website. It also details your rights regarding the access and modification of your personal data.

1.2 This policy applies regardless of your role or interaction with us – whether you’re a reader, purchaser, author, educator, contributor, or user of our educational materials and services.

1.3 For detailed provisions applicable to specific groups or interactions, please refer to the relevant sections below.

1.4 This policy refers to our website www.creativetales.co from which you have accessed this Privacy Notice.

2. About Us

2.1 Creative Tales is a company registered in Dubai, United Arab Emirates, specializing in children’s literature and educational content. (company address).

2.2 You can contact us regarding data protection matters at: info@creativetales.co

3. How We Collect Your Personal Data

3.1 Depending on your interaction with us, we collect data as follows:

• Website Usage: We collect data on how you use our website, including IP address, geographical location, device information, browser type, and navigation details. This information may be collected via third-party analytics services and cookies. For more details, please read our Cookie Policy.
• Direct Interactions: Any information you provide through direct communication, including queries, comments, and feedback.
• Social Media: If you follow us on social media platforms, we may collect information about you in accordance with their privacy policies.
• Third-Party Sources: Occasionally, we receive data about you from third parties, such as promotional partners or social media platforms.

4. How We Use Your Personal Data

4.1 We process your data on the following legal grounds:

• Contractual Necessities: To fulfill our contractual obligations to you, such as delivering books, educational materials, or services you’ve requested.
• Your Consent: For activities where your explicit consent is needed, such as subscribing to newsletters or marketing communications.
• Our Legitimate Interests: For activities that are fundamental to our business operations but balanced against your rights and freedoms, such as site analytics and business development.
• Compliance with Legal Obligations: To comply with laws and regulations applicable in the UAE, particularly Dubai.

4.2 The usage of your data varies based on your interaction with us and includes:

• Readers and Purchasers: Processing orders, managing accounts, providing customer service, and sending transactional communications.
• Authors and Contributors: Managing manuscript submissions, contracts, royalty payments, and collaborative projects.
• Educators and Schools: Tailoring educational content, providing teaching resources, and coordinating educational events or initiatives.
• Website Users: Enhancing user experience, personalizing content, and ensuring website security.

4.3 General uses of your data include:

• Website Optimization: Improving website functionality, layout, and content based on user interactions and preferences.
• Fraud Prevention and Legal Compliance: Detecting and preventing unauthorized or illegal activities, complying with legal requirements, and assisting in investigations if required.
• Archiving and Research: Storing data for historical, statistical, or scientific purposes, ensuring the integrity of our archives for business analysis and development.
• Marketing and Communications: Sending promotional materials, newsletters, and other marketing communications in line with your preferences, including tailored book recommendations and event invitations.

5. Sharing Your Personal Data

5.1 We may share your data with the following entities:

• Third-Party Service Providers: Including website hosting, cloud storage, marketing and analytics service providers, customer relationship management (CRM) systems, payment processors, and IT support. These providers are contractually bound to protect your data and use it only for the purposes we specify.
• Affiliates or Partners: For promotional purposes, such as co-sponsored events or joint marketing initiatives, based on your consent. Your data will not be shared for these purposes without your explicit permission.
• Legal and Regulatory Authorities: When required by law, such as for tax purposes, legal disputes, or regulatory requests. We may also share data with law enforcement if necessary for fraud investigations or to ensure the safety and security of our users and services.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred as part of the transaction, subject to confidentiality agreements and compliance with applicable privacy laws.

5.2 Additional Sharing Practices:

• International Transfers: If we transfer your data outside the UAE, we ensure adequate protection through data transfer agreements or standard contractual clauses.
• Subsidiaries and Joint Ventures: For operational purposes and to provide you with seamless services and customer support.
• Public Forums and Social Media: If you engage with us on social media or participate in community forums, your interactions may be visible to other users and the public.

6. Cookies

6.1 Overview

• Our website uses cookies to improve user experience, track user activity, and gather analytics data. Cookies are small data files stored on your device.

6.2 Types of Cookies Used

• Essential Cookies: Necessary for the website to function and cannot be switched off. They are usually set in response to your actions, like setting privacy preferences, logging in, or filling forms.
• Performance Cookies: Collect information about how visitors use the website, which pages are visited most often, and if they get error messages from web pages. These cookies don’t collect information that identifies a visitor.
• Functionality Cookies: Allow the website to remember choices you make (such as your user name, language, or the region you are in) and provide enhanced, more personal features.
• Targeting Cookies: Used to track visitors across websites to display advertisements that are relevant and engaging.

6.3 Managing Cookies

• You can manage and control cookie settings through your browser settings. Disabling cookies may impact your experience on our site.

6.4 Third-Party Cookies

• Our site may include third-party advertising and links to other websites. These third parties may also use cookies, over which we have no control.

6.5 Cookie Policy Updates

• Our Cookie Policy may be updated periodically, reflecting changes in our practices or regulatory changes.

7. Data Security

7.1 Security Measures

• We use industry-standard security measures to protect your data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, firewalls, and secure server facilities.
• Our website is regularly scanned for security vulnerabilities and known threats.

7.2 Employee Training and Awareness

• Our employees are trained on data protection best practices and are required to respect the confidentiality of any personal data held by us.

7.3 Data Breach Procedures

• In the unlikely event of a data breach, we have procedures in place to promptly notify you and the appropriate authorities, in accordance with our legal obligations.

8. Data Retention

8.1 Retention Period

• Personal data is retained only as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.
• The retention period for personal data varies depending on the type of data and the purposes for which it is processed.

8.2 Criteria for Determining Retention Period

• We consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process your personal data, and whether we can achieve those purposes through other means.
• Upon expiration of the retention period, personal data is securely deleted or anonymized.

8.3 Review of Retention Periods

• Retention periods are regularly reviewed to ensure compliance with legal and regulatory obligations and to ensure that data is not held longer than necessary.

9. International Data Transfers

9.1 As a Dubai-based company, most data processing occurs within the UAE. However, international transfers may occur if necessary, under strict data protection measures.

10. Your Rights

10.1 Overview of Your Rights

• As a data subject, you have specific rights regarding the personal data we hold about you. Understanding these rights ensures you can effectively manage and protect your personal information.

10.2 Right to Access

• You have the right to request access to the personal data we hold about you. This is known as a “subject access request.” We will provide you with a copy of the personal data we hold, subject to certain exemptions as per the law.

10.3 Right to Rectification

• You have the right to request the correction of your personal data if it is inaccurate or incomplete. We will take reasonable steps to ensure the accuracy of the information we hold.

10.4 Right to Erasure (Right to be Forgotten)

• You can ask us to delete or remove personal data where there is no good reason for us continuing to process it. This right is not absolute and only applies in certain circumstances.

10.5 Right to Restrict Processing

• You have the right to request the suspension of the processing of your personal data, for example, if you want us to establish its accuracy or the reason for processing it.

10.6 Right to Data Portability

• This right allows you to request the transfer of your personal data to another party in certain circumstances, such as when the processing is based on consent and is carried out by automated means.

10.7 Right to Object

• You have the right to object to the processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground.

10.8 Right to Withdraw Consent

• In circumstances where you have provided your consent to the collection, processing, and transfer of your personal data for a specific purpose, you have the right to fully or partially withdraw your consent.

10.9 Automated Decision Making and Profiling

• You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

10.10 How to Exercise Your Rights

• To exercise any of these rights, please contact us using the contact details provided in this policy. We may need to verify your identity before we proceed with your request.

10.11 Responses to Your Requests

• We aim to respond to all legitimate requests within one month. Occasionally, it may take us longer if your request is particularly complex or you have made several requests.

10.12 No Fee Usually Required

• You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive.

10.13 Right to Lodge a Complaint

• You have the right to lodge a complaint at any time to the relevant supervisory authority for data protection issues. We would, however, appreciate the chance to deal with your concerns before you approach the supervisory authority, so please contact us in the first instance.

11. Changes to This Privacy Notice

11.1 We may update this Privacy Notice periodically. We will notify you of significant changes.