Privacy Policy

1. Who we are

This website is operated by Crown EOR Services Limited ("Crown EOR", "we", "us", "our"), a private limited company registered in England and Wales under company number 17094930, with its registered office at 17 Woodstock Street, London, Mayfair, W1C 2AJ, United Kingdom.

For the purposes of UK data protection law, we are the data controller for the personal data described in this policy.

If you have any questions about this policy or how we handle your personal data, contact us at info@crown-eor.com.

2. What this policy covers

This policy explains how we handle personal data collected through this website, for example when you browse the site, submit the contact form, or request further information.

It does not cover personal data we process in the course of delivering employer of record and related services to clients, workers or partners. That processing is governed by separate agreements and privacy notices provided to the individuals concerned.

3. The personal data we collect

Information you give us. If you contact us through the website, by email, or by phone, we collect your name, email address, telephone number, employer or company name, job title, and anything else you choose to include in your message.

Technical information. Our hosting provider records standard server log information when pages are requested, which may include your IP address, browser type and the pages you viewed. We use an anti-spam service on our forms which processes limited technical information, including your IP address, in order to distinguish genuine visitors from automated traffic.

We do not use analytics, advertising or tracking technologies on this website. We do not build profiles of visitors or track you across other sites.

We do not ask you to provide special category data (such as health, ethnicity or biometric data) through this website, and you should not send it to us via the website.

4. Why we use it, and our lawful basis

Where we rely on legitimate interests, we have considered whether those interests are overridden by your rights, and we have concluded that they are not. You can object at any time, see section 8.

5. Who we share it with

We share personal data only where necessary, and only with:

• Service providers who help us run the website and our business, specifically our website hosting provider, our database and form-storage provider, our anti-spam and security provider, and our email provider. They act on our instructions and are not permitted to use your data for their own purposes.
• Professional advisers such as lawyers, accountants and insurers, where relevant.
• Regulators, law enforcement or other authorities, where we are required to disclose information by law.
• A buyer or successor, if we sell or reorganise our business.

We do not sell your personal data, and we do not share it for third-party advertising.

6. International transfers

Some of our service providers are based outside the United Kingdom, or operate infrastructure outside it. Where personal data is transferred outside the UK, we make sure an appropriate safeguard is in place, normally UK adequacy regulations, or the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

You can ask us for details of the safeguards that apply to a particular transfer using the contact details in section 1.

7. How long we keep it

We keep enquiry correspondence and form submissions for 24 months from our last contact with you, unless it forms part of an ongoing client, introducer or supplier relationship, in which case we keep it for the duration of that relationship and for 6 years afterwards to meet our legal and accounting obligations.

Server logs are retained for the period set by our hosting provider, which is typically no more than 30 days.

8. Your rights

Under UK data protection law you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased in certain circumstances;
• restrict or object to our processing of your data, including objecting to direct marketing at any time;
• receive your data in a portable format where processing is based on consent or a contract; and
• withdraw consent at any time, where we rely on consent.

To exercise any of these rights, contact us at info@crown-eor.com. We will respond within one month. There is normally no charge.

If you are unhappy with how we have handled your personal data, you can complain to the Information Commissioner's Office at ico.org.uk, by calling 0303 123 1113, or by writing to Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. We would appreciate the chance to address your concerns first.

9. Security

We use appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access or disclosure. No transmission over the internet can be guaranteed to be completely secure, so please do not send us sensitive information by unencrypted email.

10. Other websites

Our website may link to third-party sites. We are not responsible for their content or privacy practices, and we encourage you to read their privacy policies.

11. Changes to this policy

We may update this policy from time to time. The current version will always be posted on this page with the date it was last updated.

12. Contact