Privacy Policy
This policy explains how Crestborne collects, uses, and protects personal data in connection with this website and the services it offers. Last updated: .
Our Commitment to Privacy
Crestborne takes data protection seriously. We collect only what we need, hold it only for as long as necessary, and do not sell, rent, or trade personal data to third parties for their own commercial purposes. This policy applies to all personal data collected via this website and through the services we provide to clients.
If you have questions or requests regarding your personal data, you are welcome to reach out via our contact page.
1. What Personal Data We Collect
Depending on how you interact with this website, we may collect the following categories of personal data:
Contact Form Submissions
When you submit a contact form, we collect your name, email address, optional subject line, and any content you include in the message field. This information is used solely to respond to your enquiry.
Analytics and Usage Data
Subject to your cookie preferences, we may collect anonymised usage data including pages visited, session duration, referral source, and general device type. This data does not identify you as an individual and is used to improve the website experience.
Cookie-Related Data
Depending on your consent choices, cookies may be set that store preference or behavioural data in your browser. See our Cookie Policy for a full breakdown of what each category stores and why.
2. Legal Basis for Processing
We process personal data on the following legal bases:
Consent — for optional cookies and marketing communications. You may withdraw consent at any time via your cookie settings or by contacting us.
Legitimate interests — for processing contact form enquiries and maintaining website security, where these interests are not overridden by your rights.
Contractual necessity — for data processed in the course of providing accounting services to clients under a signed engagement agreement.
3. How We Use Your Data
Responding to enquiries submitted through the contact form
Delivering and managing accounting service engagements for clients
Monitoring website performance and user experience (with consent)
Maintaining website security and preventing fraudulent activity
Complying with legal and regulatory obligations where applicable
We do not sell personal data to third parties. We do not use personal data for automated decision-making that produces legal effects on individuals.
4. Data Sharing and Third Parties
We may share data with third-party service providers who assist in operating this website, including web hosting, analytics, and email infrastructure. These providers process data only on our behalf and are bound by appropriate data processing agreements.
Where cookies with advertising or analytics functionality are enabled with your consent, data may be processed by platforms such as Google in accordance with their own privacy policies.
We will disclose personal data to law enforcement or regulatory bodies only where required to do so by law.
5. Data Protection and Retention
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These include access controls, encryption in transit, and regular security reviews.
Personal data collected via contact forms is retained for a reasonable period to allow for follow-up, generally not exceeding 12 months after the last communication unless an ongoing engagement requires otherwise.
In the event of a data breach that may affect your rights, we will notify affected individuals in accordance with applicable law without undue delay.
6. Your Rights
You have the following rights with respect to your personal data held by Crestborne:
Right of Access
Request a copy of the personal data we hold about you.
Right to Rectification
Ask us to correct any inaccurate or incomplete data.
Right to Erasure
Request deletion of personal data where no legitimate purpose requires retention.
Right to Portability
Receive your data in a structured, machine-readable format where technically feasible.
Right to Object
Object to processing based on legitimate interests, including direct marketing.
Withdraw Consent
Withdraw consent for any processing based solely on consent at any time.
To exercise any of these rights, please use our contact page. We will respond within a reasonable timeframe, typically within 30 days.
Your Rights and Opt-Out Instructions
You are not required to provide any personal information when using this website. If you prefer not to share your data, you may:
Avoid filling out contact forms, account registrations, or any data-submitting features.
Disable cookies through your browser settings (see our Cookie Policy for more details).
Contact us directly to request the deletion of any previously shared personal data.
We respect your privacy choices. If you would like us to delete your data, please reach out to us via our Contact page. We will process your request promptly.