Legal
Data collection
UK GDPR · transparency notice
This page sets out exactly what personal data Digital Crest Consulting Ltd collects through digitalcrest.co.uk and any engagement that follows, why we collect it, how long we keep it, who has access to it, and the rights you have over it. It supports the more formal text in our privacy notice.
Controller
Digital Crest Consulting Ltd, registered in England and Wales. Contact legal@digitalcrest.co.uk for any data protection matter.
What we collect, why, and for how long
| Category | Data points | Lawful basis | Retention |
|---|---|---|---|
| Enquiry data | Name, work email, company, role, message content | Legitimate interest · responding to your enquiry | Up to 24 months after last contact |
| Engagement data | Contract details, billing contacts, scope notes, agreed deliverables | Contract · performance of services | Up to 7 years after end of engagement (HMRC + audit defence) |
| Site usage | IP address, browser type, pages viewed, referrer (aggregated) | Legitimate interest · site security and analytics | Up to 13 months, then aggregated only |
| Cookie preferences | Your consent choices for analytics and preferences cookies | Consent · your active choice | 12 months |
| Marketing (optional) | Email, name, opt in status | Consent · explicit opt in | Until you unsubscribe, plus 90 days |
Who has access
Access to personal data is limited to Digital Crest staff who need it for the purpose stated. We share data only with the processors below, and only as needed to deliver services. We do not sell personal data and we do not allow third party advertising trackers on this site.
- Vercel · website hosting
- Google Workspace · business email
- Microsoft 365 · documents and storage
- HubSpot or comparable · contact management
- A small set of UK and EU professional advisers (legal, accounting, audit) under written confidentiality
International transfers
Where a processor stores data outside the UK or EEA, we rely on adequacy decisions, the UK International Data Transfer Agreement, or Standard Contractual Clauses with appropriate supplementary measures. A current list of processors and the safeguards in place is available on request.
Your rights
- Access · ask for a copy of the personal data we hold about you
- Rectification · correct anything we hold that is wrong
- Erasure · ask us to delete data, subject to legal retention obligations
- Restriction · limit how we process your data while a query is resolved
- Portability · receive your data in a structured, common format
- Object · object to processing based on legitimate interest
- Withdraw consent · for anything we process on the basis of consent
To exercise any of these rights, email legal@digitalcrest.co.uk. We will respond within one month. You can also lodge a complaint with the UK Information Commissioner's Office at ico.org.uk.
Cookies and tracking
We use a small set of cookies. Essential cookies are set so the site works. Analytics and preferences cookies are optional and only set if you accept them in the consent banner. See the cookie notice for the full table and your options.
Children
digitalcrest.co.uk is aimed at business audiences. We do not knowingly collect personal data from children. If you believe a child has provided personal data to us, contact legal@digitalcrest.co.uk and we will delete it.