Privacy Policy

This policy explains how we handle personal information when you visit this website or contact us. It is written for the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We keep it plain and we only collect what we need.

1. Who we are (data controller)

Crenel Ltd is registered in England and Wales (company number 17333560). Registered office: Energlyn, West Lane, Selby, YO8 8LR. We are the data controller for personal information collected through this website and our enquiries. Questions about privacy? Email hello@crenel.co.uk.

2. What data we collect

Enquiries: your name, business email address, phone number (where you provide it), organisation details, and the contents of your enquiry when you contact us through this website or by direct email. Please do not send confidential business information, special-category personal data or details about other people in an initial enquiry.

Website visits: This website is hosted on Base44, which may process IP addresses, technical request information, page-view events and other identifiers needed to serve, secure and measure website traffic. We do not add our own advertising pixels or behavioural trackers to our website code, and we do not sell your data. Base44 documents a 60-day retention period for its app analytics history; we do not control the retention of underlying technical logs.

3. Why we use personal information (lawful bases)

Under UK GDPR Article 6 we rely on:

Legitimate interests: responding to business enquiries, managing commercial relationships, and operating and improving the website.

Contract: preparing proposals, statements of work, or delivering consultancy services you have asked us for.

Legal obligation: maintaining statutory company, tax and accounting records.

Where consent is the right basis for something (for example an optional cookie), we will ask for it before we use it.

4. How we store and share data

We do not sell or rent your data. We process it securely using reputable business infrastructure, including email, cloud productivity and website hosting providers. Where your enquiry leads to work, we share information only with trusted Crenel specialists, and only where strictly necessary to scope or deliver that work, under confidentiality obligations.

The website is hosted on Base44, which documents US hosting by default. Our email and other providers may also process information outside the UK. Where Crenel makes a restricted transfer of personal data, we use an applicable adequacy arrangement or contractual safeguards, such as the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, as appropriate.

5. How long we keep data

Enquiry data is kept only as long as needed to handle your enquiry and any follow-up relationship. Where information is linked to a client contract, we keep it for up to 6 years to meet UK tax and legal record-keeping requirements, then delete it.

6. Your rights and the ICO

Under the UK GDPR and the Data Protection Act 2018 you have the right to access your personal information, have it rectified or erased, restrict or object to its processing, and receive a portable copy where applicable. Where we rely on consent, you can withdraw it at any time.

To exercise a right, email hello@crenel.co.uk. You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority, at ico.org.uk. We would rather sort a problem out with you first, so do contact us before going to the ICO.