Privacy Policy.

Crosstek IT Ltd (“Crosstek”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal information.

This privacy policy explains how we collect, use and protect personal information when you visit our website, complete one of our online assessments, contact us, enquire about our services or receive a quote or proposal from us.

Who we are

Crosstek IT Ltd is an IT services and technology company providing IT support, cyber security, Microsoft 365, cloud and connectivity, AI and automation, and technology strategy and project services.

Information we collect

We may collect personal information when you contact us, make an enquiry, book a call, complete one of our online assessments or otherwise interact with our website or services.

This may include:

• Your name
• Company or organisation
• Job title
• Email address
• Telephone number
• Information you provide within an enquiry or message
• Your answers and results when you complete one of our online assessments
• Information relating to your interest in our services
• Technical information about how you use our website, such as your IP address, browser, device and pages visited

We only collect information that is relevant to the purpose for which it is required.

Information we obtain from other sources

We may also obtain business contact and company information from:

• Business data suppliers we license lists from. We use this information only for the period of the licence and remove it when the licence ends.
• Companies House and other public registers
• Credit reference agencies, such as Creditsafe, for business credit checks
• Information organisations publish about themselves, such as on their own website

We use this information to identify organisations that may benefit from our services and to contact the relevant people in their work capacity.

How we use your information

We may use your personal information to:

• Respond to enquiries and requests
• Arrange calls, meetings or consultations
• Provide information about our services
• Show you the results of an online assessment and follow up with you about them
• Provide and manage services for our customers
• Communicate with existing and prospective customers
• Carry out business credit checks before entering into agreements
• Research organisations using publicly available information, including with the help of AI tools
• Improve our website, services and customer experience
• Maintain the security and operation of our website and systems
• Comply with our legal and regulatory obligations
• Establish, exercise or defend legal claims where necessary

Our lawful basis for processing

Under UK data protection law, we must have a lawful basis for processing your personal information.

Depending on the circumstances, we may rely on:

Contract

Where processing is necessary to provide services you have requested or to take steps before entering into a contract.

Legitimate interests

Where processing is necessary for our legitimate business interests, including responding to enquiries, following up on online assessments, contacting organisations that may benefit from our services, carrying out business credit checks, managing customer relationships, improving our services and protecting our systems.

Legal obligation

Where we are required to process information to comply with the law.

Consent

Where we have specifically asked for your consent, for example for certain marketing activities or non-essential cookies. Where we rely on consent, you may withdraw it at any time.

Online assessments

When you complete one of our online assessments (for example the Growth-Ready IT Score), we collect your answers, your score, your name, work email address, company and, if you choose to give it, your telephone number.

We use this to show you your results and to follow up with you about your IT, on the basis of our legitimate interests. We will only send you marketing emails if you tick the box to agree and then confirm by email.

The link to your results expires after 90 days. If we have not followed up with you, we anonymise your response after 12 months.

Quotes, proposals and agreements

When you view or accept a quote, proposal or agreement we send you, we record when it was opened, the details you enter when accepting, your IP address and browser, and the exact version you accepted, as evidence of the agreement.

We keep accepted and signed documents for seven years.

Automated tools and AI

We use AI tools to help research publicly available information about organisations and to help draft content. A person always reviews the results. We do not make decisions about you based solely on automated processing.

Marketing communications

We may occasionally send relevant information about Crosstek's services where permitted by law.

Our emails may record whether they were opened and whether links were clicked, so that we can improve them.

You can ask us to stop sending marketing communications at any time by using the unsubscribe option provided in the communication or by contacting us. If you ask us not to contact you, we keep a minimal record of your email address so that we can make sure you are not contacted again.

Cookies and website analytics

Our website may use cookies and similar technologies to operate correctly, remember preferences and understand how visitors use the website.

Where consent is required for non-essential cookies, these technologies will only be used after you have given the appropriate consent.

Further information is available in our Cookie Policy.

Sharing your information

We do not sell your personal information.

We may share information with trusted organisations that help us operate our business and provide our services. These may include:

• Website and hosting providers
• IT and cloud service providers
• Communications and email providers
• Analytics providers
• AI service providers
• Credit reference agencies
• Professional advisers
• Suppliers and subcontractors involved in delivering our services
• Government, regulatory or law-enforcement bodies where required by law

Where another organisation processes personal information on our behalf, we require it to handle that information appropriately and securely.

International transfers

Some of the technology providers we use, such as AI and email delivery services, may process information outside the United Kingdom, including in the United States.

Where personal information is transferred internationally, we make sure suitable safeguards are in place as required by UK data protection law, such as the UK International Data Transfer Agreement or Addendum, or the UK Extension to the EU-US Data Privacy Framework.

How long we keep your information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including satisfying legal, accounting and contractual requirements.

Retention periods vary depending on the type of information and our relationship with you. For example:

• Online assessment responses we have not followed up: anonymised after 12 months
• Accepted and signed quotes, proposals and agreements: seven years
• Information from licensed business data lists: removed when the licence ends
• A record that you asked not to be contacted: kept so that we can continue to respect your request

Keeping your information secure

We use appropriate technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

However, no internet-based service can be guaranteed to be completely secure.

Your rights

Depending on the circumstances, UK data protection law gives you rights relating to your personal information.

These may include the right to:

• Request access to the information we hold about you
• Ask us to correct inaccurate information
• Ask us to delete your information
• Ask us to restrict how we use your information
• Object to certain uses of your information, including direct marketing
• Request transfer of certain information
• Withdraw consent where we rely upon consent

To exercise any of these rights, contact us at [email protected].

Complaints

If you have concerns about how we use your personal information, please contact us first so that we can investigate.

You also have the right to complain to the UK Information Commissioner's Office.

Visit the Information Commissioner's Office website

Changes to this policy

We may update this privacy policy periodically to reflect changes to our website, services or legal requirements.

The latest version will always be published on this page.