Privacy Policy

Data Protection General Statement

This Privacy Policy sets out the commitment of Snap Creative Limited to protecting the personal data of its clients, enquirers, suppliers and website visitors, and explains how we collect, use, store and share that information.

We are committed to processing personal data lawfully, fairly and transparently, and to upholding the rights of individuals under the Data Protection (Jersey) Law 2018 and, where applicable, the General Data Protection Regulation (EU) 2016/679.

Data Controller, Data Processor

Snap Creative Limited, whose trading names include Snap Design & Digital, has its business offices at 18–20 Dumaresq Street, St Helier, Jersey, JE2 3RL. The Nest is our event and podcast space located on the Second Floor of that address.

Snap Creative Limited is the data controller in respect of the personal data described in this policy. We are registered with the Jersey Office of the Information Commissioner under registration number 67777.

Where we engage third parties to process personal data on our behalf, those parties act as data processors under written contract and may only process personal data in accordance with our instructions.

Scope of Application

This policy applies to our business activities operating within Jersey, Channel Islands, and to the processing of personal data of data subjects within the European Economic Area and the United Kingdom. It covers the website at inthenest.je and any enquiry, booking or correspondence arising from it.

What Data We Collect

We collect the following categories of personal data:

• Identity data — your name

• Contact data — your email address and, where you provide it, your telephone number

• Enquiry data — the date you have in mind, the type of event you are planning, and the content of the message you send us

• Correspondence data — records of communications between us, including by email, telephone and social media

• Technical data — your IP address, browser type and device information, collected by our hosting provider in order to serve and secure the website

• Usage data — anonymised, aggregate information about how visitors use our website

We do not collect payment card data through this website. We do not knowingly collect special category data, and you should not include sensitive personal information in the enquiry form.

What Purposes We Use Your Personal Data

We do not use your personal data for automated decision-making or profiling. We do not send marketing communications; should we introduce a mailing list in future, we will obtain your consent separately and you will be able to withdraw it at any time.

How We Collect Your Data

We collect personal data:

• Directly from you — when you complete the enquiry form on our website, email us, telephone us, or contact us via Instagram or LinkedIn

• Automatically — when you visit our website, through the technical logging and anonymised analytics provided by our hosting platform

• From third parties — occasionally, where a booking is made on your behalf by a colleague or agent who provides your contact details

Information Collected

When you visit our website, our hosting provider automatically collects limited technical information necessary to deliver and secure the site, including your IP address, browser type and the pages you view.

Our platform additionally provides us with anonymised, aggregate visitor statistics. These are calculated without the use of cookies and without any persistent identifier: a temporary value derived from your IP address and browser is used solely to count daily unique visitors, and is deleted each day. This information does not identify you and is not used to track you across other websites.

Software Applications Used

We use the following third-party application in the operation of this website:

• Framer (Framer B.V., Netherlands) — website hosting, enquiry form processing and anonymised website analytics

Enquiries submitted through our website are delivered to us by email at thenest@snap.je.

Cookies

Listed below are some of the main software applications we use to deliver our professional services for our clients’ projects. Each application has a specific function and purpose for processing data todeliver the required services.

‍

Recipients of Data

Personal data collected through this website may be disclosed to:

• our hosting and form-processing provider, Framer B.V.;

• professional advisers, including legal and accounting advisers, where necessary;

• regulatory or law enforcement authorities, where we are legally required to disclose.

Personal data is accessible internally only to those employees and contractors of Snap Creative Limited who require it in order to respond to your enquiry or administer your booking.

Social Media Platform

Our website contains links to our profiles on Instagram and LinkedIn, and to third-party services including Google Maps and Studio Nest. These are ordinary hyperlinks; no content from those platforms is embedded in our website and no cookies are set by them on our site.

If you follow such a link, or contact us through a social media platform, that platform's own privacy policy and cookie practices will apply to your interaction with it. We are not responsible for the content or privacy practices of third-party platforms.

Data Sharing and Disclosure

We do not sell, rent or trade personal data. We do not disclose personal data to third parties for their own marketing purposes.

We share personal data only as set out under "Recipients of Data" above, and only to the extent necessary for the relevant purpose. All processors acting on our behalf are bound by written contract to process personal data solely in accordance with our instructions, to keep it confidential, and to apply appropriate technical and organisational security measures.

Third Country Transfers and Safeguards

Our website is hosted on the Framer platform. Framer B.V. uses Amazon Web Services and may process personal data outside Jersey, including within the European Economic Area and in the United States.

Where personal data is transferred outside Jersey, we rely on the safeguards permitted by the Data Protection (Jersey) Law 2018. Framer relies on the EU–US Data Privacy Framework where the recipient is certified under it, and otherwise on the European Commission's Standard Contractual Clauses (Implementing Decision (EU) 2021/914) or the UK International Data Transfer Addendum, as applicable.

A copy of the relevant safeguards is available on request from dpo@snap.je.

Data Security

We use up-to-date data storage and security techniques to protect personal data from unauthorised access, alteration, disclosure or destruction.

Our hosting provider is certified to ISO/IEC 27001:2022 and SOC 2 Type 2, encrypts data at rest using AES-256 and in transit using TLS 1.2 or above, and is contractually obliged to notify us of any personal data breach within 72 hours of becoming aware of it.

Access to enquiry correspondence is restricted to authorised personnel. Where we become aware of a personal data breach which is likely to result in a risk to your rights and freedoms, we will notify the Jersey Office of the Information Commissioner, and you, as required by law.

How Long We Hold Data

We retain personal data for no longer than is necessary for the purposes for which it was collected:

• Financial and transaction records — 10 years from the date of the transaction, where they form part of the financial records of the business.

• All other personal data, including enquiry correspondence — 1 year after your last interaction with us, unless a longer period is required by law or regulation, or is necessary for the establishment or defence of legal claims.

At the end of the applicable period, personal data is securely deleted or anonymised.

Your Rights

Under the Data Protection (Jersey) Law 2018 you have the following rights in relation to your personal data:

• the right to be informed about how your personal data is used;

• the right of access to a copy of the personal data we hold about you;

• the right to rectification of inaccurate or incomplete personal data;

• the right to erasure of personal data where there is no continuing lawful reason for us to retain it;

• the right to restrict processing while an issue is being resolved;

• the right to object to processing carried out on the basis of our legitimate interests;

• the right to data portability in respect of certain personal data;

• the right to withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact dpo@snap.je, or write to us at the address given above. We will respond within one month of receipt. We may ask you to verify your identity before we act on a request. There is no charge for exercising these rights, and you will not be treated less favourably for doing so.

Making a Complaint

If you are dissatisfied with how we have handled your personal data, please contact us in the first instance at dpo@snap.je so that we may seek to resolve the matter.

The Office of the Information Commissioner in Jersey, Channel Islands, is an independent statutory authority responsible for supervising compliance with the Data Protection (Jersey) Law 2018. You have the right to lodge a complaint with the Commissioner at any time.

Website: jerseyoic.org — Raise a concern: jerseyoic.org/raise-a-concern

Children

Our services are directed at organisations and at adults arranging events. We do not knowingly collect personal data relating to children. If you believe that a child has provided us with personal data, please contact dpo@snap.je and we will delete it.

Change to this Policy

Snap Creative Limited may update this Privacy Policy at any time. The updated policy will appear on our website at inthenest.je/privacy-policy, together with the date on which it was last revised. Where a change materially affects how we use your personal data, we will take reasonable steps to bring it to your attention.

Contact Details

If you have any questions, concerns or complaints in respect of this Privacy Policy or our handling of your personal data, please contact us: