Privacy Policy
Last updated: 23 June 20261. Introduction
Business Deva respects your privacy and is committed to protecting your personal data. This privacy policy will inform you as to how we look after your personal data when you visit our website and tell you about your privacy rights and how the law protects you.
This website is not intended for children, and we do not knowingly collect data relating to children.
2. Important Information & Who We Are
Crownkonsult is the controller and is responsible for your personal data (collectively referred to as "Crownkonsult", "we", "us" or "our").
We have appointed a GDPR owner who is responsible for overseeing questions in relation to this privacy policy. If you have any questions, please contact us using the details below.
Contact Details
Legal entity: Crownkonsult
GDPR owner: Stephen Olatunji
Email: info@crownkonsult.co.uk
Address: 3B Kempston Road, Bedford
Telephone: 07721848767
You have the right to make a complaint at any time to the Information Commissioner's Office (ICO) at www.ico.org.uk.
ICO Contact:
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire, SK9 5AF
Tel: 0303 123 1113
Third-Party Links
This website may include links to third-party websites. We do not control these websites and are not responsible for their privacy statements. We encourage you to read the privacy policy of every website you visit.
3. The Data We Collect About You
We may collect, use, store and transfer different kinds of personal data about you, grouped as follows:
- Identity Data — photographs, first name, last name, username, date of birth, gender.
- Contact Data — billing address, delivery address, email address, telephone numbers.
- Employee/Contractor Specific Data — recruitment information, employment records.
- Financial Data — bank account and payment card details.
- Transaction Data — details about payments to and from you.
- Technical Data — IP address, login data, browser type, time zone, operating system.
- Profile Data — username, password, purchases, interests, preferences, survey responses.
- Usage Data — information about how you use our website and services.
- Marketing and Communications Data — your marketing preferences and communication choices.
4. How Is Your Personal Data Collected?
Direct Interactions
You may give us your data by filling in forms or corresponding with us by post, phone, email or otherwise — including when you:
- Apply for our products or services
- Create an account on our website
- Subscribe to our service or publications
- Request marketing to be sent to you
- Enter a competition, promotion or survey
- Give us feedback
- Apply for or carry out work with us
Automated Technologies
As you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions and patterns using cookies, server logs and similar technologies.
Third Parties & Public Sources
- Analytics providers such as Google
- Advertising networks and search information providers
- Payment and delivery service providers
- Recruitment or employment agencies
- Publicly available sources such as Companies House and the Electoral Register
- Social media platforms such as Facebook
5. How We Use Your Personal Data
We will only use your personal data when the law allows us to — most commonly where we need to perform a contract, for our legitimate interests, or to comply with a legal obligation.
| Purpose / Activity | Type of Data | Lawful Basis |
|---|---|---|
| Employ or engage you for work | Identity, Contact, Employee/Contractor, Financial, Transaction, Special Categories | Performance of contract; Legitimate interests; Legal obligation |
| Register you as a new customer | Identity, Contact | Performance of a contract |
| Process and deliver your order | Identity, Contact, Financial, Transaction, Marketing | Performance of a contract; Legitimate interests (debt recovery) |
| Manage our relationship with you | Identity, Contact, Profile, Marketing | Performance of a contract; Legal obligation; Legitimate interests |
| Prize draws, competitions or surveys | Identity, Contact, Profile, Usage, Marketing | Performance of a contract; Legitimate interests |
| Administer and protect our business and website | Identity, Contact, Technical | Legitimate interests; Legal obligation |
| Deliver relevant content and advertising | Identity, Contact, Profile, Usage, Marketing, Technical | Legitimate interests |
| Data analytics to improve our services | Technical, Usage | Legitimate interests |
| Suggestions and recommendations | Identity, Contact, Technical, Usage, Profile | Legitimate interests |
Marketing
You will receive marketing communications from us only if you have requested information or services from us and have not opted out. You can opt out at any time by contacting us or following the opt-out link in any marketing message.
Cookies
We use cookies to identify which pages are being used and how users interact with them. You can choose to accept or decline cookies via your browser settings, though declining may affect your experience of the website.
6. Disclosures of Your Personal Data
We may share your personal data with:
- Internal teams and group companies
- Sub-contractors performing services on our behalf
- Service providers including Dropbox, Xero, Popcorn CRM and Mailchimp
- Professional advisers (lawyers, bankers, auditors, insurers)
- HM Revenue & Customs and other regulatory authorities
- Third parties in connection with a business sale or merger
We require all third parties to respect the security of your personal data and only permit them to process it for specified purposes in accordance with our instructions.
7. International Transfers
Many of our external third parties are based outside the UK. Whenever we transfer your personal data out of the UK, we ensure a similar degree of protection by:
- Only transferring to countries deemed to provide an adequate level of protection
- Using specific contracts approved for use in the UK
- Requiring all group companies to follow the same rules (binding corporate rules)
8. Data Security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, accessed, altered or disclosed without authorisation. We limit access to those with a business need to know, and they are subject to a duty of confidentiality.
We have procedures to deal with any suspected personal data breach and will notify you and any applicable regulator where we are legally required to do so.
9. Data Retention
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including satisfying any legal, accounting or reporting requirements.
By law, we must keep basic information about our customers for six years after they cease being customers for tax purposes. In some circumstances we may anonymise your personal data for research or statistical purposes, in which case we may use it indefinitely.
10. Your Legal Rights
Under data protection laws, you have the following rights:
Request access
Receive a copy of the personal data we hold about you and verify we are processing it lawfully.
Request correction
Have any incomplete or inaccurate data we hold about you corrected.
Request erasure
Ask us to delete or remove your personal data where there is no good reason for us to continue processing it.
Object to processing
Object where we rely on legitimate interests, or where we process your data for direct marketing.
Request restriction
Ask us to suspend processing of your personal data in certain scenarios.
Request transfer
Receive your personal data in a structured, machine-readable format for transfer to another party.
Withdraw consent
Withdraw consent at any time where we rely on consent to process your personal data.
No fee is usually required to exercise these rights. We try to respond to all legitimate requests within one month. To exercise any of these rights, please contact us at info@crownkonsult.co.uk.
Glossary
Legitimate Interest
The interest of our business in conducting and managing our business to enable us to give you the best service and most secure experience. We consider and balance any potential impact on you before processing your personal data for our legitimate interests.
Performance of Contract
Processing your data where it is necessary for the performance of a contract to which you are a party, or to take steps at your request before entering into a contract.
Complying with a Legal or Regulatory Obligation
Processing your personal data where it is necessary for compliance with a legal or regulatory obligation that we are subject to.