Our Guiding Principles

  • Data protection is a human right.
  • Your data is our responsibility and as such will be treat with respect.
  • We will never spam, sell or use your data for purposes other than those agreed to.

Who we are

Our website address is: https://crcorporatesolutions.co.uk.

DATA PROTECTION LEGISLATION

We comply with:

  • UK Data Protection Act 1988 (DPA)
  • EU Data Protection Directive 1995 (DPD)
  • EU General Data Protection Regulation 2018 (GDPR)

Comments

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Cookies

If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Who we share your data with

If you request a password reset, your IP address will be included in the reset email.

How long we retain your data

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

What rights you have over your data

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Where we send your data

Visitor comments may be checked through an automated spam detection service.

Data Collection

This website collects and uses personal information for the following reasons:

Tracking site visitors

Our site may use Google Analytics (GA) to track user interaction. We use this data to better understand our users and their usage of our website. Google does not give us any personal information about you or your business.

Google are a third party data processor.

GA makes use of cookies, details of which can be found on Google’s developer guides.

Disabling cookies on your internet browser will stop GA from tracking any part of your visit to pages within this website.

Blog posts

Comments can contain personal information, please ensure that if you don’t want to let us have this information do not post a comment on our blog.

Comments are public and therefore your data will show on the post itself.

Forms and email links

Forms on our site send the content to an internal email address.

All email is sent to us over the (SMTP). Our SMTP servers are protected by TLS (sometimes known as SSL) This means email content is encrypted using SHA-2, 256-bit cryptography before being sent across the internet. The email content is decrypted by our devices.

Email signups

The email address that you submit to us will be added to our email marketing service who provide us with email marketing services. This service is a third party data processor.

Your email address will be stored in in our email marketing service providers database for as long as we continue to use this service for email marketing or until you request removal from the service.

When requesting removal via email, please send your email to us using the email account that is subscribed to the mailing list. Without this we cannot identify you.

If you are under 16 years of age by law you must obtain parental consent before signing up for any of our services.

Website Server

This website is hosted by NetNerd within a UK data centre.

All traffic between our website and your browser is encrypted and delivered over HTTPS.

Third Party Data Processors We May Use

All the 3rd party data processors we use comply with the legislation set out in the GDPR. Where they are based in the USA they are EU-U.S Privacy Shield compliant.

Data Breaches

As required by GDPR we will report any unlawful data breach of this website’s data or any of our third party data processors to the ICO within 72 hours.

Data Controller

The data controller is Craig Alexander Rattray Limited

Whose office is:

Pavilion 2, Finnieston Business Park

Minerva Way

Glasgow G3 8AU

Changes To Our Privacy Policy

This privacy policy may change from time to time inline with legislation. We won’t inform our clients or website users of these changes. Please check back about this policy as required.