Privacy policy

Your data,
handled responsibly.

This policy explains how Crown & Code collects, uses, stores, and protects personal data when you use this website or contact us.

Last updated: 6 March 2026

Web Design
Web Development
SEO
Maintenance
Hosting
Google Ads
API Integrations
UK-first studio
1-3 week builds
Reply in 1 day
Web Design
Web Development
SEO
Maintenance
Hosting
Google Ads
API Integrations
UK-first studio
1-3 week builds
Reply in 1 day

1. Who we are

Crown & Code is the data controller for personal data collected through this website.

Contact: help@crowncode.co.uk07762450318

2. Personal data we collect

We collect only data needed to respond to enquiries, provide quotes, schedule calls, and protect the site.

  • Identity and contact data: name, email address, optional phone number, optional company name
  • Enquiry and booking data: project details, notes, quote selections, booking slot details
  • Technical and security data: IP address, user agent, request metadata, and anti-abuse checks

3. How we collect data

  • Directly from you when you submit forms (quote and booking requests)
  • Automatically from your browser and device when you visit the site
  • From security tooling used to detect spam, abuse, and malicious requests

4. Legal bases (UK GDPR)

  • Article 6(1)(b): to take steps at your request before entering into a contract and to provide requested services
  • Article 6(1)(f): legitimate interests in running, securing, and improving this website and service delivery
  • Article 6(1)(c): compliance with legal obligations where applicable
  • Article 6(1)(a): consent where consent is specifically requested

5. How we use your data

  • Respond to enquiries and quote requests
  • Schedule and manage discovery calls
  • Prepare proposals, scope, timelines, and delivery plans
  • Maintain operational and security logs to protect the site and API endpoints
  • Comply with legal, tax, and regulatory obligations where required

6. Sharing your data

We do not sell personal data. We may share data with trusted service providers who process data on our behalf (for example hosting/infrastructure and communication tools), and where required by law or to protect legal rights.

7. International data transfers

Where data is processed outside the UK, we take reasonable steps to ensure appropriate safeguards are in place in line with UK data protection requirements.

8. Data retention

We keep website-form records only for defined operational periods, then delete them from the website logging store.

  • Quote and booking submissions, including the technical metadata stored with them, are retained for up to 180 days
  • Outbound email logs and delivery-failure logs are retained for up to 30 days
  • Rate-limit and anti-abuse files are retained for up to 48 hours

9. Security

  • Form abuse protection, rate limiting, and request validation
  • Server-side input validation and controlled logging
  • Security headers and HTTPS controls where supported

10. Cookies and similar technologies

This site uses essential technical cookies. In particular, we set cc_csrf to protect forms against cross-site request forgery (CSRF).

If you accept measurement cookies, we use the Google tag (Google Analytics 4 + Google Ads) to measure visits and actions such as quote submissions and call bookings. This may set analytics and advertising/measurement cookies on your device. If you reject, we keep analytics and advertising cookies off.

We store your preference in a cookie named cc_consent so we remember your choice.

11. Your rights

Under UK data protection law, you may have rights to:

  • Access a copy of your personal data
  • Correct inaccurate data
  • Request deletion where applicable
  • Object to or restrict certain processing
  • Request data portability in applicable cases
  • Withdraw consent where processing is based on consent

12. Complaints

If you have concerns, contact us first and we will try to resolve them promptly. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).

13. Changes to this policy

We may update this policy from time to time. Material changes will be reflected on this page with an updated revision date.