Privacy Policy

1. Data Controller

Cristex Ltd (“we” or “us”) is the data controller for all personal data collected through our website and services.

2. Personal Data Collected

We collect personal data only when voluntarily provided, such as:

Name, email address, and account credentials

Interaction data (e.g., forms submitted, event registrations)

Technical data via cookies, including IP address, browser type, and referring page

3. Lawful Basis for Processing

Personal data is processed under the lawful bases of:

Consent (e.g., newsletter subscriptions, event registration)

Contractual necessity (e.g., account management, service delivery)

Legitimate interests (e.g., website analytics and service improvement), provided this does not override your rights

4. Purpose of Processing

Personal data is used only for:

Providing and improving our Services

Communicating with you regarding your account, services, or subscriptions

Marketing communications where consent has been given

Legal compliance

5. Data Sharing

We do not sell, rent, or lease personal data. We may share data with:

Service providers acting on our behalf (e.g., email services, analytics providers)

Legal authorities when required by law

Third-party tools (Google Analytics, YouTube, Facebook, Twitter) may collect anonymized usage data for analytics and user experience purposes.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, or resolve disputes. Account deletion requests are actioned within 5 working days. Billing and accounting records may be retained for legal compliance.

7. Cookies

We use cookies to enhance user experience and monitor website performance. You can block cookies via your browser settings, but this may limit functionality. For more information, visit aboutcookies.org

8. Your Rights

Under the UK GDPR, you have the right to:

Access your personal data

Request correction of inaccuracies

Request deletion (“right to be forgotten”)

Object to processing or request restriction

Data portability

Withdraw consent at any time

Requests can be submitted to our Data Protection Officer: emma@cristex.co.uk

9. Security

We implement technical and organisational measures to protect personal data from unauthorized access, disclosure, alteration, or destruction.

10. Updates to Privacy Policy

We may update this policy periodically. Users will be notified of significant changes where required by law.