CRYSTAL CLEAN SERVICE LTD = EXTERNAL PRIVACY NOTICE
For website visitors, customers, prospective customers, suppliers and business contacts
|
Company number |
06555696 |
|
Effective date |
24 August 2026 |
|
Version |
3.0 |
|
Review date |
August 2027, or sooner following a material change |
1. About this notice
This Privacy Notice explains how Crystal Clean Service Ltd (“Crystal Clean”, “we”, “us” or “our”) collects, uses, stores and shares personal data relating to website visitors, customers, prospective customers, suppliers and other business contacts.
Crystal Clean Service Ltd is normally the data controller for the personal data described in this notice. This means that we decide why and how that personal data is processed.
This notice is intended to provide the privacy information required under UK data protection law, including the UK GDPR and Data Protection Act 2018, and should be read alongside our cookie information where relevant.
2. Contact details
Crystal Clean Service Ltd
Bow Bridge Close
Rotherham
S60 1BY
United Kingdom
Telephone: 0114 4010 550
Email: info@crystalcleanservice.co.uk
Website: crystalcleanservice.co.uk
Data protection enquiries should be directed to us using the details above.
3. Personal data we may collect
Depending on your relationship with us, we may collect identity and contact information; details of your employer or organisation; enquiry, quotation and correspondence information; customer and supplier records; contractual and transaction information; website and technical information such as IP address, browser and device information; cookie and preference information; and marketing preferences.
Please do not provide special category personal data through a general website enquiry unless it is necessary. Where we need to process special category data, we will identify an appropriate lawful basis and additional condition.
4. How we obtain personal data
We may obtain personal data directly from you; automatically when you use our website; from your employer, colleague or organisation; from publicly available business sources; and from service providers or other third parties where lawful.
If we obtain your personal data from another source, we will provide privacy information where required by law.
5. Why we use personal data and lawful bases
We may use personal data to respond to enquiries and prepare quotations; enter into and manage contracts; provide and improve our services; manage customer and supplier relationships; invoice and maintain financial records; operate and secure our website and systems; handle complaints and disputes; comply with legal obligations; and carry out appropriate business development and marketing.
Depending on the purpose, our lawful basis may be contract, steps taken before entering into a contract, legal obligation, legitimate interests, consent where required, or another lawful basis available under UK data protection law.
Where we rely on legitimate interests, those interests may include operating and developing our business, managing customer and supplier relationships, protecting our systems and legal rights, preventing fraud and maintaining service quality. We consider the impact on individuals before relying on this basis.
6. Marketing
We may contact customers and business contacts about services we reasonably believe may be relevant where the law permits. Where consent is required for electronic marketing, we will obtain it.
You can object to direct marketing at any time. You can use an unsubscribe facility where available or contact us. We may keep a minimal suppression record so that we can respect your request.
7. Cookies and website technologies
Our website may use cookies and similar storage or access technologies. Some are necessary for website operation or security. Other technologies, including certain analytics or advertising technologies, may require consent before use.
Where consent is required, non-essential technologies should not be activated until an affirmative choice has been made. Our website should provide accessible cookie information explaining the technologies actually in use, their purposes, providers and duration, together with a way to change preferences.
8. Sharing personal data
Where necessary and lawful, we may share personal data with IT, hosting, cloud, email, CRM and software providers; accountants, insurers, auditors and legal advisers; payment and banking providers; marketing providers; customers, suppliers and subcontractors where required for service delivery; public authorities, regulators, law enforcement or courts; and parties involved in a proposed sale, restructure or transfer of the business.
Where a supplier processes personal data on our behalf, we take reasonable steps to use appropriate providers and put required data protection terms in place.
We do not sell personal data.
9. International transfers
Some service providers may store or access personal data outside the United Kingdom. Where this occurs, we will use a lawful transfer mechanism and appropriate safeguards where required, such as UK adequacy regulations or approved contractual safeguards. You may contact us for further information about safeguards relevant to a particular transfer.
10. Retention
We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, contractual, insurance and regulatory requirements.
Retention periods vary by record type. We consider the purpose, legal requirements, limitation periods, sensitivity, risk and whether information can be securely deleted or anonymised. Specific retention periods should be maintained in our internal retention schedule.
11. Security
We use appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. Measures may include access controls, authentication, device and network security, backups, staff awareness, supplier controls, secure disposal and incident-management procedures.
12. Your rights
Depending on the circumstances, you may have rights to be informed; access your personal data; correct inaccurate data; request erasure or restriction; object to certain processing; receive portable data where applicable; withdraw consent where consent is relied upon; and obtain safeguards concerning qualifying automated decision-making.
These rights are not absolute and exemptions may apply. We may need to verify your identity before acting on a request.
RIGHT TO OBJECT: Where we rely on legitimate interests, you may have the right to object to the processing. You have an absolute right to object to the use of your personal data for direct marketing.
13. Automated decision-making
We do not currently use the personal data covered by this notice to make solely automated decisions that produce legal or similarly significant effects on individuals. If this changes, we will provide the additional information required by law.
14. Complaints
Please contact us first if you have concerns about how we use your personal data. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator. Current complaint and contact information is available at ico.org.uk.
15. Third-party links and content
Our website may contain links to or embedded content from third-party websites or services. Those organisations may process personal data under their own privacy notices. We encourage you to review their privacy information.
16. Changes to this notice
We will review this notice periodically and when our processing activities, website technologies, suppliers or legal obligations materially change. The current version should be published on our website.
Document control
|
Owner |
Crystal Clean Service Ltd |
|
Version |
3.0 |
|
Effective date |
24 August 2026 |
|
Next scheduled review |
August 2027 |
