Privacy & Cookies Policy

Effective Date: 29th July 2025

Crave Creative Limited (“we”, “us”, or “our”) is committed to protecting the privacy and security of your personal data. This Privacy and Cookies Policy explains how we collect, use, store, and share your information when you visit our website, contact us, or engage with our services.

We operate in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

 

1. Who We Are

 

Crave Creative Limited

Email: studio@cravecreative.co.uk

Telephone: +44 (0) 7852 918 520

For the purpose of the UK GDPR, Crave Creative Limited is the data controller.

 

2. What Personal Data We Collect

 

We may collect and process the following types of personal data:

• Contact Information: Name, email address, telephone number, company name, and postal address (if provided).

• Enquiry Information: Details you provide when you contact us through our website forms, email, or phone, including details about your project needs.

• Website Usage Data: Information about how you use our website, including your IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views, and website navigation paths. This data is collected through cookies and analytics tools.

• Marketing Preferences: Your preferences for receiving marketing communications from us.

• Project-Related Information: Any personal data you provide to us as part of a design project, which will be handled under a separate agreement (e.g., client contract or data processing agreement).

 

3. How We Collect Your Data

 

We collect data in the following ways:

• Directly from you: When you fill out forms on our website (e.g., contact forms, quote requests), send us emails, call us, or provide information during direct communications.

• Automatically: As you navigate our website, through the use of cookies and similar technologies (see Section 6: Cookies Policy).

• From third parties: In certain circumstances, we may receive information about you from third-party services, such as analytics providers or professional networking sites, but only where it is legally permissible to do so.

 

4. How We Use Your Data and Our Legal Basis

 

We use your personal data for the following purposes and rely on the following legal bases under UK GDPR:

• To respond to your enquiries and provide quotes:

  • Legal Basis: Performance of a contract (to take steps at your request before entering into a contract) or Legitimate Interests (to provide information you’ve requested about our services).

• To provide and manage our design services:

  • Legal Basis: Performance of a contract (when we are engaged for a project).

• To improve our website and services:

  • Legal Basis: Legitimate Interests (to understand how our website is used and make improvements for a better user experience). This includes analysing usage data to identify popular content and technical issues.

• To send marketing communications (where you have consented):

  • Legal Basis: Consent. You have the right to withdraw your consent at any time.

• To comply with legal obligations:

  • Legal Basis: Legal Obligation (e.g., maintaining records for tax or accounting purposes).

• For internal record keeping and administrative purposes:

  • Legal Basis: Legitimate Interests (for the efficient operation of our business).

• To ensure the security of our website and services:

  • Legal Basis: Legitimate Interests (to protect our systems and data from unauthorised access or cyber threats).

 

5. Sharing Your Data

 

We will not sell, distribute, or lease your personal information to third parties unless we have your permission or are required by law to do so.

We may share your data with:

• Service Providers: Third-party companies who provide services on our behalf, such as website hosting, analytics, email marketing, or CRM systems. These providers are obligated to protect your data and only use it for the purposes we specify.

• Professional Advisors: Our lawyers, accountants, or other professional advisors where necessary for legal, financial, or other professional services.

• Law Enforcement or Regulatory Authorities: If required by law or to respond to valid legal requests.

• Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred to the acquiring entity.

We ensure that all third parties with whom we share data comply with data protection laws and have appropriate safeguards in place.

 

6. Cookies Policy

 

Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site.

What are Cookies?

Cookies are small text files that are placed on your computer or mobile device when you visit a website. They are widely used to make websites work more efficiently and to provide information to the owners of the site.

How We Use Cookies:

• Strictly Necessary Cookies: These cookies are essential for the operation of our website (e.g., enabling secure login to client areas). Our website cannot function properly without these cookies.

• Analytical/Performance Cookies: These cookies allow us to recognise and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for e¹asily. We typically use Google Analytics for this purpose. The information collected by these cookies is aggregated and anonymous.

   

   

• Functionality Cookies: These are used to recognise you when you return to our website. This enables us to personalise our content for you and remember your preferences (e.g., your choice of language or region).

• Targeting/Advertising Cookies (if applicable): These cookies record your visit to our website, the pages you have visited and the links you have followed. We may use this information to make our website and the advertising displayed on it more relevant to your interests. We may ²also share this information with third parties for this purpose.

   

   

Your Consent to Cookies:

When you first visit our website, you will be presented with a cookie consent banner, allowing you to accept or decline non-essential cookies. You can change your cookie preferences at any time by [provide instructions, e.g., clicking on the ‘Cookie Settings’ link in the footer or updating your browser settings].

Managing Cookies in Your Browser:

Most web browsers allow you to manage cookies through their settings. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly.

For more information about cookies, including how to see what cookies have been set and how to manage and delete them, visit www.allaboutcookies.org.

 

7. Data Security

 

We have implemented appropriate technical and organisational security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. We limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know. They will only process your personal data on our instructions and are subject to a duty of confidentiality.

We have procedures in place to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

 

8. Data Retention

 

We will only retain your personal data for as long as necessary to fulfil the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

For example:

• Enquiry data will typically be kept for [e.g., 12 months] after the last communication, unless it leads to a project, in which case it will be retained for the duration of the project plus [e.g., 7 years] for legal and accounting purposes.

• Marketing consent will be retained until you withdraw it.

• Website usage data (anonymous) may be retained for longer periods for analytical purposes.

 

9. Your Data Protection Rights

 

Under UK GDPR, you have the following rights regarding your personal data:

• The right to be informed: About how your personal data is being used (which is what this policy aims to do).

• The right of access: To request copies of the information we hold about you.

• The right to rectification: To request that we correct inaccurate or incomplete data we hold about you.

• The right to erasure (‘right to be forgotten’): To request that we delete or remove your personal data from our systems under certain circumstances.

• The right to restrict processing: To ‘block’ or suppress the processing of your personal data in certain situations.

• The right to data portability: To request that we move, copy, or transfer your personal data in a structured, commonly used, machine-readable format.

• The right to object: To our processing of your personal data in certain circumstances, including for direct marketing.

• Rights in relation to automated decision-making and profiling: To object to decisions being made solely based on automated processing, including profiling, that produces legal effects concerning you or similarly significantly affects you.

If you wish to exercise any of these rights, please contact us using the details provided in Section 1. We will respond to your request within one month.

 

10. How to Complain

 

If you have any concerns about our use of your personal information, you can make a complaint to us directly. Please contact us using the details in Section 1.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues.

ICO Contact Details:

Information Commissioner’s Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

Helpline number: 0303 123 1113

ICO website: www.ico.org.uk

 

11. Changes to This Policy

 

We may update this Privacy and Cookies Policy from time to time. Any changes will be posted on this page with an updated “Effective Date.” We encourage you to review this policy periodically to stay informed about how we are protecting your information.

 

12. Contact Us

 

If you have any questions about this Privacy and Cookies Policy or our data protection practices, please contact us:

Crave Creative Limited

Contact Email: studio@cravecreative.co.uk

Contact Phone: +44 (0) 7852 918 520

Address for Correspondence: Chiltern House, 45 Station Rd, Henley-on-Thames RG9 1AT