Privacy Policy - crisp-node

1. Introduction

crisp-node ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website crisp-node.com or use our services.

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site or use our services.

2. Information We Collect

2.1 Personal Data

We may collect personal information that you voluntarily provide to us when you:

Fill out enquiry forms on our website
Request information about our services
Engage with us for consultancy services
Subscribe to our communications
Contact us directly

This information may include:

Name and contact details (email address, postal address)
Company name and position
Details of your enquiry or service needs
Any other information you choose to provide

2.2 Automatically Collected Information

When you visit our website, we may automatically collect certain information about your device and browsing actions, including:

IP address and browser type
Operating system and device information
Pages visited and time spent on pages
Referring website addresses
Cookie data (see our Cookies Policy for details)

3. How We Use Your Information

We use the information we collect for the following purposes:

To respond to your enquiries and provide requested information
To deliver and manage our consultancy services
To communicate with you about our services
To improve our website and service offerings
To analyse website usage and optimize user experience
To comply with legal obligations
To protect our rights and prevent fraud

4. Legal Basis for Processing (UK GDPR)

Under UK GDPR, we process your personal data based on one or more of the following legal grounds:

Consent: You have given clear consent for us to process your personal data for a specific purpose
Contract: Processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract
Legal obligation: Processing is necessary for us to comply with the law
Legitimate interests: Processing is necessary for our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect your personal data which overrides those legitimate interests

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

Service Providers: With trusted third-party service providers who assist us in operating our website and delivering our services, under strict confidentiality agreements
Legal Requirements: When required by law, regulation, legal process, or governmental request
Business Transfers: In connection with any merger, sale of company assets, or acquisition
Protection of Rights: To protect our rights, property, or safety, or that of our clients or others

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Typically, we retain:

Client data for the duration of our engagement plus 7 years for legal and accounting purposes
Enquiry data for 2 years unless you request earlier deletion
Website analytics data in aggregated form for 26 months

7. Your Rights

Under UK data protection law, you have the following rights:

Right to Access: Request copies of your personal data
Right to Rectification: Request correction of inaccurate or incomplete data
Right to Erasure: Request deletion of your personal data in certain circumstances
Right to Restrict Processing: Request that we limit how we use your data
Right to Data Portability: Request transfer of your data to another organization
Right to Object: Object to processing of your personal data in certain circumstances
Rights Related to Automated Decision-Making: Not be subject to decisions based solely on automated processing

To exercise any of these rights, please contact us at [email protected]

8. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

Encryption of data in transit and at rest
Regular security assessments and updates
Access controls and authentication procedures
Staff training on data protection

However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

9. International Data Transfers

Your information may be transferred to and maintained on servers located outside of your country of residence. We ensure that any international transfers comply with applicable data protection laws and implement appropriate safeguards.

10. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

Email: [email protected]
Address: 42 Threadneedle Street, London EC2R 8AY, United Kingdom

13. Complaints

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Tel: 0303 123 1113
Website: www.ico.org.uk