Legal
Privacy policy
How CRVTech collects, uses and looks after personal information, written in plain English and in line with UK data protection law.
Who we are
This website is run by Ollie Craven, a sole trader trading as CRVTech. For the purposes of UK data protection law, Ollie Craven is the controller of the personal information described in this policy. In this policy, "CRVTech", "we" and "us" mean Ollie Craven trading as CRVTech.
- Controller
- Ollie Craven trading as CRVTech
- Address
- [email address]
- ICO registration
If you have any questions about this policy or how your information is handled, email us at the address above.
What this policy covers
This policy explains what personal information CRVTech collects when you use this website, send an enquiry or become a client, why it's collected, how it's used and protected, and the rights you have over it. It is written to meet the requirements of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Information we collect
When you email us
Your email address, name and anything you include in your message, such as details of your project. You choose what to include, so please don't send anything sensitive that isn't needed.
If you become a client
Contact details, billing details such as your name, business name and address, records of payments and invoices, and information needed to carry out the work, such as access details for systems you ask us to work on.
When you visit the website
Like most websites, the server that hosts this site automatically records basic technical information when pages are requested, such as your IP address, browser type, the page requested and the time. This is used to keep the site running and secure.
This site's fonts are loaded from Google Fonts. When your browser requests them, Google receives your IP address. Google states it does not use this to build profiles or for advertising. See Google's privacy policy.
This site does not use analytics, advertising or tracking tools, and does not set cookies. See the cookie policy for details.
How and why it's used
UK data protection law requires a lawful basis for each way personal information is used. These are the purposes and bases we rely on.
| Purpose | Information | Lawful basis |
|---|---|---|
| Replying to your enquiry and discussing a possible project | Name, email address and what you tell us | Steps taken at your request before entering into a contract. Where no contract follows, legitimate interests in responding to people who get in touch. |
| Providing services you've agreed to | Contact, billing and project details | Performance of a contract |
| Invoicing, accounts and tax records | Billing and payment records | Legal obligation |
| Keeping the website secure and working | Technical data such as IP address | Legitimate interests in running a secure website |
| Dealing with legal claims, if any arise | Relevant records | Legitimate interests in establishing or defending legal claims |
We won't add you to a mailing list or send you marketing emails unless you've asked for them. We don't sell personal information, and we don't use it for automated decision-making or profiling.
International transfers
Some service providers may store or process information outside the UK. When that happens, we make sure it's protected by one of the safeguards UK law allows, such as the country being covered by UK adequacy regulations, or the provider signing the UK International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses.
How long it's kept
- Enquiries that don't lead to work: deleted within 12 months of our last contact.
- Client and financial records: kept for as long as HMRC requires. For sole traders this is currently at least five years after the 31 January Self Assessment deadline for the tax year concerned.
- Project information: kept for the length of the work and any ongoing support, then deleted or returned unless there's a legal reason to keep it.
- Server logs: kept by the hosting provider for a limited period in line with its own retention settings.
Keeping it secure
We use appropriate technical and organisational measures to protect personal information, including encrypted connections (HTTPS) on this website, strong unique passwords with two-factor authentication on business accounts, and access limited to what is needed. No system is completely secure, but if a breach happens that's likely to put your rights at risk, we'll tell you and report it to the Information Commissioner's Office where required.
Your rights
Under UK data protection law you have the right to:
- Access the personal information held about you and get a copy of it.
- Rectification: have inaccurate or incomplete information corrected.
- Erasure: have your information deleted in certain circumstances.
- Restriction: ask for its use to be limited in certain circumstances.
- Object to its use where we rely on legitimate interests.
- Data portability: receive information you provided in a commonly used format, or have it sent to someone else, where processing is based on a contract.
To use any of these rights, email [email address]. There's normally no charge, and you'll get a response within one month. We may need to confirm your identity first.
Complaints
If you're unhappy with how your information has been handled, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator.
- Website
- ico.org.uk/make-a-complaint
- Helpline
- 0303 123 1113
- Post
- Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Children
This website and CRVTech's services are intended for adults and businesses. We don't knowingly collect personal information from children.
Changes to this policy
This policy may be updated from time to time, for example if new services or tools are introduced. The date at the top shows when it last changed. Significant changes will be made clear on this page.