Privacy Policy
Last Updated: January 1, 2026
Crewpicnicboxs Ltd ("we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy informs you as to how we look after your personal data when you visit our website (regardless of where you visit it from) and tells you about your privacy rights and how the law protects you.
1. Data Collection
We may collect, use, store, and transfer different kinds of personal data about you which we have grouped together as follows:
- Identity Data: includes first name, last name, username or similar identifier.
- Contact Data: includes billing address, delivery address, email address, and telephone numbers.
- Technical Data: includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
- Usage Data: includes information about how you use our website, products, and services.
2. Third-Party Processors
We do not sell your personal data. However, we may share your data with selected third parties who perform services on our behalf. These include:
- IT and system administration providers.
- Professional advisers including lawyers, bankers, auditors, and insurers.
- Analytics providers (such as Google Analytics) based outside the EU.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.
3. Data Retention
We will only retain your personal data for as long as reasonably necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.
4. GDPR & CCPA Rights
Under certain circumstances, you have rights under data protection laws in relation to your personal data:
- Request access: Commonly known as a "data subject access request."
- Request correction: Enables you to have any incomplete or inaccurate data we hold about you corrected.
- Request erasure: Enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it (Right to be Forgotten).
- Object to processing: Where we are relying on a legitimate interest and there is something about your particular situation which makes you want to object.
- Request restriction of processing: Ask us to suspend the processing of your personal data.
- Request transfer: The right to data portability to you or a third party.
- Right to withdraw consent: Withdraw consent at any time where we are relying on consent to process your personal data.
5. Contact our DPO
We have appointed a Data Protection Officer (DPO) who is responsible for overseeing questions in relation to this privacy policy. If you have any questions about this privacy policy, including any requests to exercise your legal rights, please contact the DPO using the details set out below:
Email address: [email protected]
Postal address: 128 Tech Park Boulevard, Silicon Connect, SC4 9VI, UK