Privacy Policy

At crispdigital, we are committed to protecting your privacy and ensuring the security of your personal information. This policy explains how we collect, use, and safeguard your data.

Last updated: 20 July 2025

Information We Collect

Personal Information

When you contact us or use our services, we may collect the following personal information:

  • Name and contact details (email address, phone number, postal address)
  • Business information (company name, industry, website)
  • Project requirements and preferences
  • Communication preferences and history

Automatically Collected Information

When you visit our website, we automatically collect certain information:

  • IP address and location data
  • Browser type and version
  • Pages visited and time spent on site
  • Referring websites and search terms

How We Use Your Information

We use the information we collect for the following purposes:

Service Delivery

  • • Provide web design and development services
  • • Communicate about projects and timelines
  • • Process payments and invoicing
  • • Provide customer support

Business Operations

  • • Improve our website and services
  • • Analyse usage patterns and trends
  • • Conduct market research
  • • Comply with legal obligations

Marketing

  • • Send relevant service updates
  • • Share industry insights and tips
  • • Inform about new services
  • • Invite to webinars and events

Security

  • • Protect against fraud and abuse
  • • Ensure website security
  • • Monitor for suspicious activity
  • • Backup and recovery purposes

Information Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

Service Providers

We work with trusted third-party service providers (hosting, analytics, payment processing) who assist us in operating our website and conducting business. These parties are contractually obligated to keep your information confidential.

Legal Requirements

We may disclose your information if required by law, court order, or government regulation, or to protect our rights, property, or safety, or that of others.

Business Transfers

In the event of a merger, acquisition, or sale of our business assets, customer information may be transferred as part of the transaction.

Data Security

We implement appropriate technical and organisational measures to protect your personal information:

Technical Measures

  • • SSL encryption for data transmission
  • • Secure hosting infrastructure
  • • Regular security updates
  • • Access controls and authentication

Organisational Measures

  • • Staff training on data protection
  • • Limited access on need-to-know basis
  • • Regular security assessments
  • • Incident response procedures

Your Rights

Under applicable data protection laws (including GDPR), you have the following rights:

Access

Request a copy of the personal information we hold about you

Rectification

Request correction of inaccurate or incomplete information

Erasure

Request deletion of your personal information (right to be forgotten)

Portability

Request transfer of your data to another service provider

Restriction

Request limitation of processing under certain circumstances

Objection

Object to processing for direct marketing or legitimate interests

To exercise your rights: Contact us at [email protected] or use our contact form. We will respond within 30 days.

Cookies and Tracking

Our website uses cookies and similar technologies to enhance your browsing experience:

Essential Cookies

Required for the website to function properly. These cannot be disabled and include session management, security, and accessibility features.

Analytics Cookies

Help us understand how visitors use our website so we can improve performance and user experience. These are anonymized and aggregated.

Marketing Cookies

Used to deliver relevant advertisements and track campaign effectiveness. You can opt out of these through your browser settings or our cookie preferences.

Data Retention

We retain your personal information only as long as necessary for the purposes outlined in this policy:

Active client data: Duration of business relationship plus 7 years for tax and legal purposes
Marketing communications: Until you unsubscribe or 3 years of inactivity
Website analytics: 26 months (Google Analytics default)
Inquiry data: 2 years if no business relationship develops

International Data Transfers

Some of our service providers may be located outside the UK/EU. When we transfer your data internationally, we ensure appropriate safeguards are in place:

  • EU adequacy decisions for approved countries
  • Standard contractual clauses (SCCs) with service providers
  • Certification schemes and binding corporate rules where applicable

Children's Privacy

Our services are not directed to children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately so we can remove the information.

Policy Updates

We may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make significant changes:

  • We will update the "Last updated" date at the top of this policy
  • We will notify you via email if you are a client or subscriber
  • We will post a notice on our website for 30 days

Your continued use of our services after any changes constitutes acceptance of the updated policy.

Contact Us

If you have any questions about this privacy policy or our data practices, please contact us:

General Inquiries

United Kingdom

Data Protection Officer

Response Time: We aim to respond to all privacy-related inquiries within 30 days. For urgent matters, please mark your email as "Urgent - Privacy Request."

Regulatory Information

This privacy policy complies with applicable data protection laws, including:

UK GDPR

UK General Data Protection Regulation

Data Protection Act 2018

UK Data Protection Legislation

PECR

Privacy and Electronic Communications Regulations

ICO Registration: We are registered with the Information Commissioner's Office (ICO) as required by UK data protection law. You have the right to lodge a complaint with the ICO if you believe we have mishandled your personal data.

ICO Website: ico.org.uk | ICO Helpline: 0303 123 1113

Questions About Our Privacy Policy?

We're committed to transparency about how we handle your data. Contact us if you need clarification or want to exercise your privacy rights.