1. Who we are
This website, crewparadetinkrs.christmas, is operated by Crewparadetinkrs Media Ltd, a company registered in England and Wales under company number 15823047, with its registered address at Suite 12, 71–75 Shelton Street, London WC2H 9JQ, United Kingdom. We are the data controller for personal data processed through this website. You can contact us at [email protected].
2. Data we collect
We aim to collect as little personal data as possible. We may process:
- Contact data — your name, email address, chosen topic and message when you contact us using the form (which opens your email application) or by writing to us directly.
- Technical data — IP address, browser type, device information and pages requested, recorded in standard server logs by our hosting provider.
- Consent data — your cookie preferences, stored locally in your browser.
- Analytics data — aggregated usage information, only if you consent to analytics cookies.
We do not knowingly collect personal data from children. If you are under 16, please ask a parent or guardian to contact us on your behalf.
3. How we use data and our legal bases
- To reply to your enquiries — legitimate interests or steps prior to a contract.
- To keep the website secure and working — legitimate interests.
- To understand how the site is used — consent, where analytics are enabled.
- To meet legal obligations — legal obligation.
4. Cookies
We use essential storage to remember your cookie choice. Analytics and functional cookies are used only with your consent. Full details, including a table of cookies and opt-out instructions, are in our Cookie Policy.
5. Third-party processors
We use carefully selected service providers who process data on our behalf under written agreements:
- Web hosting provider — stores website files and server logs.
- Email service provider — receives and stores correspondence sent to our addresses.
- Image delivery — images on this site are loaded from Picsum Photos (picsum.photos), which receives your IP address and browser information when images are requested.
- Analytics provider — only if you consent to analytics cookies.
Where processors are located outside the UK or European Economic Area, we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses.
6. Your rights under GDPR and UK GDPR
You have the right to access your data, correct it, request erasure, restrict or object to processing, request data portability and withdraw consent at any time. You may also complain to the UK Information Commissioner's Office (ico.org.uk) or your local supervisory authority.
7. California residents (CCPA/CPRA)
California residents have the right to know what personal information we collect, to request deletion or correction, and to opt out of the sale or sharing of personal information. We do not sell personal information and do not share it for cross-context behavioural advertising. We will not discriminate against you for exercising these rights.
8. Data retention
- Enquiry correspondence: up to 24 months after our last exchange.
- Server logs: up to 30 days, unless needed to investigate a security issue.
- Cookie preferences: until you clear your browser storage or change your choice.
- Analytics data: up to 14 months, in aggregated form.
9. Security
We use encrypted connections and restrict access to personal data to people who need it. No method of transmission is completely secure, but we take reasonable steps to protect your information.
10. Data Protection Officer
For privacy questions or to exercise your rights, contact our Data Protection Officer at [email protected] or by post at our registered address, marked "Data Protection Officer". We aim to respond within one month.
11. Changes to this policy
We may update this policy from time to time. The "last updated" date at the top shows when it was last revised.