Legal

Privacy Policy

How Carter & Crawley handles personal data submitted through cartercrawley.com.

Applies to: cartercrawley.com

Who is responsible for your data

Carter & Crawley is the data controller for personal data submitted through cartercrawley.com. Queries about this policy or your rights can be sent to Contact us.

What this website collects

Information you send us

When you use the contact form you choose to provide your name, email address, company and a message. This is used for one purpose: to reply to your enquiry. We do not add you to a mailing list because you contacted us, and we do not sell or share it.

Technical data sent automatically

Like any web server, the host serving this site records standard request data — IP address, timestamp, requested page, browser type — in server logs. This is necessary to deliver the page and to protect the site from abuse. It is not combined with any other data and is not used to build a profile of you.

Spam protection

The contact form is protected by Cloudflare Turnstile, which validates that a submission came from a human without asking you to solve a puzzle or complete an image challenge. Turnstile collects no data about you that is not already visible to the site host, and it is covered by its own privacy documentation.

What this website does not collect

  • No analytics or visitor-tracking scripts of any kind.
  • No advertising cookies, pixels or conversion tags.
  • No third-party scripts on content pages, and therefore no data shared with third parties for measurement.
  • No newsletter signup, and no mailing list.
  • No social media embeds, so no data leaks to those platforms when you read a page.
  • No session recording, heatmaps or A/B testing tools.

Cookies used by this site

This site sets no cookies of its own and uses no advertising or analytics cookies. If a cookie is present, it is set by Cloudflare Turnstile as part of protecting the contact form, and it is a strictly necessary cookie that does not track you across other websites.

How long your data is kept

Enquiries are retained for as long as needed to deal with the enquiry and to keep a record of the business conversation, and for no longer than is required for legitimate business and legal obligations. If you ask us to delete your details, we do so, except where a record must be retained by law.

Your rights under the GDPR

If you are in the EU or EEA, you have the following rights, and we will respond to a request within one month at no charge.

GDPR rights and how to exercise each one.
RightWhat it meansHow to exercise it
AccessA copy of the personal data we hold about youEmail [email address pending] from the address you used
RectificationCorrection of data that is wrong or incompleteEmail [email address pending]
ErasureDeletion of your data where there is no overriding reason to keep itEmail [email address pending]
RestrictionLimiting how we use your data while a dispute is resolvedEmail [email address pending]
PortabilityYour data in a structured, machine-readable formatEmail [email address pending]
ObjectionObjecting to processing based on legitimate interestsEmail [email address pending]
Withdraw consentWhere processing relies on consentEmail [email address pending]

If you are not satisfied with our response you may lodge a complaint with your national supervisory authority. A list of authorities is available from the European Data Protection Board.

Third parties who process data on our behalf

We use a small number of providers so the site works. Each processes data only for us and under our instructions.

Sub-processors. Both are subject to their own published data processing terms.
ProviderPurposeData involved
CloudflareHosting, CDN and Turnstile spam protectionIP address, request data
Web3FormsRelaying contact form submissions to our inboxName, email, company, message you submit

Security

Traffic to this site is encrypted with TLS. Contact form submissions are relayed through a server-side function so that no API credentials are exposed in page source, and spam is filtered before the message reaches us. No system is perfectly secure, but nothing here is collected that would be valuable to an attacker.

Changes to this policy

If this policy changes materially, the updated date at the top of this page will change with it. Continued use of the site after a change indicates acceptance of the revised policy.