Privacy Policy
Last updated: January 2024
Introduction
cryptic-burst Ltd ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.
We encourage you to read this policy carefully to understand our practices regarding your personal data. By engaging with our services, you acknowledge that you have read and understood this policy.
Information We Collect
Personal Information You Provide
When you interact with us, you may provide certain personally identifiable information, including but not limited to:
- Name and contact details (email address, postal address)
- Financial information relevant to our services (income details, debt information, pension statements)
- Employment information
- Demographic information
- Any other information you choose to share during consultations
Information Collected Automatically
When you access our website, we may automatically collect certain information, including:
- Device information (browser type, operating system)
- IP address and approximate location
- Pages visited and time spent on pages
- Referring website addresses
- Cookies and similar tracking technologies
How We Use Your Information
We use the information we collect for various purposes, including:
- Providing and improving our financial education services
- Personalising your experience and tailoring our guidance to your situation
- Communicating with you about appointments, workshops, and updates
- Responding to your enquiries and providing customer support
- Analysing website usage to improve our online presence
- Complying with legal obligations
- Protecting against fraudulent or illegal activity
Legal Basis for Processing
We process your personal data under the following legal bases:
- Contractual necessity: Processing necessary to provide services you have requested
- Legitimate interests: Processing necessary for our legitimate business interests, such as improving our services
- Consent: Where you have given explicit consent for specific processing activities
- Legal obligation: Processing necessary to comply with applicable laws
Data Sharing and Disclosure
We do not sell your personal information. We may share your data in limited circumstances:
- Service providers: Third parties who assist in operating our business (payment processors, email service providers), bound by confidentiality agreements
- Legal requirements: When required by law, court order, or governmental authority
- Business transfers: In connection with a merger, acquisition, or sale of assets, with appropriate protections
- With your consent: Where you have explicitly agreed to such sharing
Data Retention
We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, including:
- Client records: Seven years from the end of our business relationship, in line with professional practice requirements
- Marketing preferences: Until you withdraw consent or request deletion
- Website analytics: Aggregated data retained indefinitely; individual data deleted after 26 months
Data Security
We implement appropriate technical and organisational measures to protect your personal data, including:
- Encryption of data in transit and at rest
- Secure access controls and authentication
- Regular security assessments
- Staff training on data protection
- Physical security measures at our premises
While we strive to protect your information, no method of transmission over the internet is completely secure. We cannot guarantee absolute security.
Your Rights
Under applicable data protection laws, you have the right to:
- Access: Request a copy of the personal data we hold about you
- Rectification: Request correction of inaccurate or incomplete data
- Erasure: Request deletion of your data in certain circumstances
- Restriction: Request limitation of processing in certain circumstances
- Portability: Receive your data in a structured, commonly used format
- Objection: Object to processing based on legitimate interests
- Withdraw consent: Where processing is based on consent
To exercise these rights, please contact us using the details provided below.
Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any website you visit through links on our site.
Changes to This Policy
We may update this Privacy Policy periodically. Changes will be posted on this page with an updated revision date. For significant changes, we will provide more prominent notice or obtain consent where required by law.
Contact Us
If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:
cryptic-burst Ltd
47 Grey Street
Newcastle upon Tyne
NE1 6EE
Email: [email protected]
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated.