Overview

Creme Global is committed to protecting personal data and respecting the privacy of our customers, partners, suppliers, website users, event participants and other individuals whose personal data we process.

We process personal data in accordance with the EU General Data Protection Regulation (EU) 2016/679 (GDPR), applicable Irish data protection legislation and other relevant privacy laws.

This Privacy Policy explains what personal data we collect, how we use it, the legal basis for processing, how we protect it, and the rights available to individuals.

Who this Policy Applies To

This Policy applies to personal data processed in connection with:

• Customers and prospective customers
• Users of the Creme Global platform and related services
• Business partners and suppliers
• Website visitors
• Conference and event participants
• Job applicants
• Other individuals who communicate with Creme Global

This Policy does not apply to third-party websites or services that operate under their own privacy policies.

Personal Data We Process

Depending on the services provided, we may process:

• Contact information (name, organisation, job title, email address, telephone number and business address)
• User account and authentication information
• Customer support and correspondence records
• Contract, billing and payment information
• Platform usage information, audit logs and security logs
• Device, browser and IP address information
• Conference or event registration information
• Information submitted through customer projects, data collection portals or analytical platforms
• Recruitment and employment application information
• Special category personal data only where required for a specific service and permitted by applicable law.

We collect personal data directly from individuals, from our customers, through our websites and platforms, and from other lawful sources connected with providing our services.

How We Use Personal Data

We process personal data only where there is a lawful basis to do so, including:

• Performing or administering contracts
• Providing, supporting and improving our products and services
• Managing customer accounts and platform access
• Providing customer support
• Operating conferences and events
• Managing suppliers and business relationships
• Recruiting employees
• Complying with legal and regulatory obligations
• Protecting the security, integrity and availability of our systems
• Responding to enquiries
• Sending business communications where permitted by law

Where required, we obtain consent before processing personal data for specific purposes such as marketing communications.

Customer Data

Customer data processed within Creme Global’s platforms remains confidential and is processed solely for the purposes agreed with the customer.

Unless expressly agreed in writing:

• customer data remains under the control of the customer;
• Creme Global does not use customer data for its own commercial purposes;
• customer confidential information is not disclosed except where required to provide the agreed services or where required by law.

AI-Assisted Features

Where AI-assisted functionality is available within the Creme Global platform, personal data continues to be processed in accordance with applicable data protection legislation.

Customer data used with AI-assisted features remains confidential and is not used by Creme Global, or by our enterprise AI service providers, to train public large language models.

Further information regarding AI governance, customer data protection and AI-assisted functionality is available in the Creme Global Platform Security and Service Continuity policy.

International Transfers

Creme Global operates internationally and may process personal data in countries outside the European Economic Area where necessary to provide services.

Where personal data is transferred internationally, appropriate safeguards are implemented in accordance with applicable data protection legislation, including contractual safeguards where required.

Security

Creme Global applies appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

These measures include secure cloud infrastructure, encryption, access controls, authentication, monitoring, backup, incident response and business continuity procedures.

Further information is available in the Creme Global Platform Security and Service Continuity policy.

Data Retention

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, to comply with contractual commitments, legal or regulatory obligations, resolve disputes, or enforce our agreements.

Retention periods may vary depending on the nature of the services provided and applicable legal requirements.

Your Rights

Subject to applicable law, individuals may have the right to:

• access their personal data;
• request correction of inaccurate information;
• request deletion of personal data;
• restrict or object to processing;
• request data portability;
• withdraw consent where processing is based on consent;
• lodge a complaint with the Irish Data Protection Commission or another competent supervisory authority.

Requests may be submitted using the contact details below.

Cookies

Our websites use cookies and similar technologies to support website functionality, security, analytics and user experience.

Further information is available in our Cookies Policy.

Contact

For questions regarding this Privacy Policy or the processing of personal data, please contact:

Creme Software Ltd (Trading as Creme Global)

4th Floor, The Design Tower
Trinity Technology & Enterprise Campus
Grand Canal Quay
Dublin 2
Ireland

Email: info@cremeglobal.com

Changes to this Policy

Creme Global may update this Privacy Policy from time to time to reflect changes in our services, technology or legal obligations. The most recent version will be published on our website.