Crystalab

Privacy Policy

Last updated: 2 December 2025

This Privacy Policy explains how Crystalab LLP ("we", "us", "our") collects, uses, and protects your personal information in compliance with UK GDPR and Data Protection Act 2018.

1. Information We Collect

1.1 Contact Form Data

When you submit our contact form, we collect:

  • Name
  • Email address
  • Company name (optional)
  • Message content

1.2 Analytics Data

We use Google Analytics to understand how visitors use our website. This collects:

  • Pages visited
  • Time spent on site
  • Device and browser information
  • Geographic location (city/country level)
  • Referral source

This data is pseudonymised and does not identify individuals.

1.3 Technical Data

Our web server automatically logs:

  • IP address
  • Browser type and version
  • Operating system
  • Referring URL

1.4 Spam Prevention

We use Google reCAPTCHA v3 to prevent spam submissions. This involves Google collecting:

  • Browser information
  • Mouse movements and interactions
  • reCAPTCHA cookies

See Google's Privacy Policy for details.

2. How We Use Your Information

2.1 Contact Form Submissions

We use contact form data to:

  • Respond to your enquiry
  • Discuss potential service engagements
  • Follow up on initial conversations

We do not use this data for marketing unless you explicitly request to be added to our mailing list.

2.2 Analytics

Analytics data helps us:

  • Understand which content is most valuable
  • Improve website performance
  • Identify technical issues

2.3 Legitimate Interests

We process personal data based on legitimate interests for:

  • Website security and spam prevention
  • Fraud detection
  • Improving our services

3. Data Sharing

3.1 Third-Party Services

We share data with the following processors:

3.2 Legal Requirements

We may disclose information if required by law or to:

  • Comply with legal processes
  • Protect our rights or property
  • Prevent fraud or abuse

3.3 No Selling of Data

We never sell your personal information to third parties.

4. Data Retention

  • Contact form data: Retained for up to 2 years or until you request deletion
  • Analytics data: Retained according to Google Analytics settings (14 months)
  • Server logs: Retained for up to 90 days

5. Your Rights

Under UK GDPR, you have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate data
  • Erasure: Request deletion of your data
  • Restriction: Limit how we use your data
  • Portability: Receive your data in a structured format
  • Objection: Object to processing based on legitimate interests
  • Withdraw consent: Where processing is based on consent

To exercise these rights, contact us at hi@crystalab.com.

6. Cookies

6.1 Essential Cookies

We use cookies essential for website functionality and security.

6.2 Analytics Cookies

Google Analytics uses cookies to track usage. You can opt out using the Google Analytics Opt-out Browser Add-on.

6.3 reCAPTCHA Cookies

Google reCAPTCHA sets cookies to verify you're not a bot. These are necessary for form submissions.

7. Data Security

We implement appropriate technical and organisational measures:

  • Encrypted data transmission (HTTPS/TLS)
  • Secure hosting infrastructure
  • Regular security updates
  • Access controls and authentication
  • Regular backups

However, no method of internet transmission is 100% secure. We cannot guarantee absolute security.

8. International Transfers

Our website is hosted on Vercel's global infrastructure. Some data may be transferred outside the UK. We ensure adequate safeguards through:

  • Standard contractual clauses
  • Processors' data protection certifications
  • Equivalent privacy protections

9. Children's Privacy

Our services are not directed at individuals under 16. We do not knowingly collect data from children. If you believe we have collected data from a child, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy periodically. Significant changes will be posted on our website with an updated "Last updated" date.

11. Contact and Complaints

For privacy queries or to exercise your rights:

Crystalab LLP 71-75 Shelton Street London, UK WC2H 9JQ

Email: hi@crystalab.com

If you're not satisfied with our response, you have the right to lodge a complaint with:

Information Commissioner's Office (ICO) Website: https://ico.org.uk Helpline: 0303 123 1113

This Privacy Policy was last updated on 2 December 2025.