Privacy Policy

This website is operated by [REGISTERED COMPANY NAME] (“CrestVibe”, “we”, “us”), a company registered in England and Wales under company number [COMPANY NUMBER], with its registered office at [REGISTERED ADDRESS].

We are the data controller for the personal data described in this notice. Our registration with the Information Commissioner’s Office (ICO) is [ICO REGISTRATION NUMBER].

For any question about this notice or about your data, email info@crestvibe.com.

Information you send us through the contact form. When you submit the enquiry form on this site we receive your name, email address, and your message. The form also has optional phone number and department fields; if you fill them in, we receive those too. We do not ask for anything else, and there are no hidden fields.

Your IP address, briefly. To stop the contact form being used to send spam, our server counts recent submissions per IP address. That count is held in the server’s memory for ten minutes and then discarded. It is not written to disk, not logged alongside your message, and not used to identify or profile you.

Nothing from the newsletter box. The newsletter signup in the footer is not connected to any mailing list yet. Submitting it does not send, store, or transmit your email address anywhere — it only shows a message telling you the signup isn’t running. If you want to hear from us, email us directly.

No tracking of any kind. This site sets no cookies. There is no analytics, no tag manager, no advertising pixel, no session recording, and no third-party embed. Our fonts are served from our own domain rather than a font CDN, so simply reading this site does not report your visit to anyone.

We use what you send through the contact form for one purpose: to read your enquiry and reply to it. Our lawful basis is legitimate interests (UK GDPR Article 6(1)(f)) — specifically, responding to someone who has deliberately contacted us about our services. Where your enquiry leads to work together, we rely on performance of a contract (Article 6(1)(b)).

Our lawful basis for the brief IP count is also legitimate interests: keeping our own contact form from being abused as a spam relay.

We do not use your data for marketing, we do not sell it, and we do not use it for automated decision-making or profiling.

SMTP2GOdelivers the contact form as an email to our own inbox, and processes your message in the course of doing so. Your enquiry is not saved into a database on this website — it is sent as an email and lives in our mailbox.

[HOSTING PROVIDER] hosts this website and therefore processes requests to it on our behalf.

[EMAIL PROVIDER] hosts the mailbox your enquiry arrives in.

We do not share your data with anyone else. If a provider above stores data outside the UK, that transfer relies on [TRANSFER MECHANISM — e.g. UK IDTA or adequacy].

Enquiry emails are kept for [RETENTION PERIOD], after which they are deleted, unless we are working together and need them as part of that record, or the law requires us to keep them longer.

The spam-prevention IP count is discarded after ten minutes, as described above.

Under UK data protection law you can ask us to give you a copy of your data, correct it if it is wrong, delete it, restrict what we do with it, or hand it over in a portable format. You can also object to our processing it on the basis of legitimate interests.

To exercise any of these, email info@crestvibe.com. We will respond within one month. There is no charge.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint, or by calling 0303 123 1113. We would appreciate the chance to put things right first.

If we change how we handle personal data — for example, when the newsletter signup becomes a real mailing list — we will update this page and change the date at the top.