Privacy Policy

1. Introduction

Current Crest ("we," "our," or "us") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website at current-crest.com or use our services.

We are based in the United Kingdom and comply with UK GDPR (General Data Protection Regulation) and the Data Protection Act 2018.

2. Information We Collect

2.1 Information You Provide Directly

• Contact information (name, email address, phone number)
• Communication preferences
• Messages and inquiries sent through our contact forms
• Product interests and preferences
• Billing and shipping information for purchases

2.2 Information Collected Automatically

• Website usage data (pages visited, time spent, click patterns)
• Device information (browser type, operating system, IP address)
• Cookies and similar tracking technologies
• Referral sources and marketing campaign effectiveness

3. How We Use Your Information

We use your personal information for the following purposes:

• To provide and improve our health gadget products and services
• To respond to your inquiries and provide customer support
• To process orders and manage customer accounts
• To send product updates, health tips, and marketing communications (with consent)
• To analyze website usage and improve user experience
• To comply with legal obligations and protect our rights
• To detect and prevent fraud or security issues

4. Legal Basis for Processing

Under UK GDPR, we process your personal data based on:

• Consent: For marketing communications and non-essential cookies
• Contract: To fulfill our obligations when you purchase products or services
• Legitimate Interest: For website analytics, fraud prevention, and business operations
• Legal Obligation: To comply with applicable laws and regulations

5. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• With service providers who help us operate our business (payment processors, shipping companies, email services)
• When required by law or legal process
• To protect our rights, property, or safety, or that of others
• In connection with a business transfer or merger (with appropriate safeguards)
• With your explicit consent for other purposes

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and employee training
• Secure payment processing systems
• Regular backups and disaster recovery procedures

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy or as required by law. Specifically:

• Customer account information: Until account deletion or 7 years after last activity
• Purchase history: 7 years for accounting and warranty purposes
• Marketing communications: Until you unsubscribe or withdraw consent
• Website analytics: 26 months maximum
• Support inquiries: 3 years after resolution

8. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Right of Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate information
• Right to Erasure: Request deletion of your data (subject to legal requirements)
• Right to Restrict Processing: Request limitation of how we use your data
• Right to Data Portability: Request transfer of your data in a portable format
• Right to Object: Object to certain types of processing
• Right to Withdraw Consent: Withdraw consent for consent-based processing

9. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your browsing experience and analyze website usage. You can manage cookie preferences through our cookie banner or browser settings. For detailed information, please see our Cookie Policy.

10. International Data Transfers

While we primarily operate within the UK, some of our service providers may be located outside the UK. When transferring data internationally, we ensure appropriate safeguards are in place, including:

• Adequacy decisions by the UK government
• Standard contractual clauses approved by UK authorities
• Binding corporate rules or certification schemes

11. Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information promptly.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the new Privacy Policy on our website and updating the "Last updated" date. For significant changes, we may provide additional notice via email or website banner.