Privacy Policy (UK GDPR)

Data controller

CRJ (NE) LTD is the data controller for personal data collected through this website, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Personal data collected

Name, email address, telephone number (if provided), and message content submitted via our contact form.

Lawful basis & purpose

We process your data to respond to enquiries, provide requested services, and manage business communications. Our lawful basis is legitimate interests and, where applicable, consent.

Data sharing

Personal data may be shared with service providers who assist our operations, subject to appropriate safeguards and UK GDPR requirements.

Retention

Data is retained only for as long as necessary to fulfil the stated purposes or as required by law.

Your rights

You have the right to access, rectify, erase, restrict processing, object, and data portability. You may also withdraw consent at any time where processing is consent-based.

Complaints

You may lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been infringed.

Contact

Use the contact details on this website to exercise your rights or ask questions about this policy.