Croosr Limited Privacy Policy

Effective Date: 11th February 2025

Introduction

This Privacy Policy explains how Croosr Limited
New World Business Centre, Station Rd, Warmley, Bristol BS30 8XG
(the “Data Controller”, “Croosr”, “we”, “our” or “us”) collects, stores, uses, and protects personal data of visitors to our website www.croosr.com (the “Website”). This Policy is issued in compliance with the UK Data Protection Act 2018, the General Data Protection Regulation (GDPR), and other applicable legislation. Please note that details regarding cookies and similar digital technologies are set out in our separate Cookie Policy.

Our Commitment to Data Protection

At Croosr, we respect your privacy and are committed to protecting your personal data. Personal data is any information relating to an identified or identifiable individual. We will only process your personal data in accordance with this Privacy Policy and the relevant legal bases set out below.

How and Why We Process Your Personal Data

We process your personal data for various purposes, as described below. In each case, the legal basis for processing is set out in accordance with applicable law.

3.1 Log Files

• What We Collect:
  Your web browser automatically transmits information to our server as you use our Website. This includes session data (usage behaviour, duration, pages visited, etc.), your (anonymised) IP address, browser type, operating system, cookie IDs, and similar data.
• Purpose & Legal Basis:
  This information is used to monitor and improve the performance of our Website and to protect against unauthorised access or attacks. The legal basis is our legitimate interest under Article 6(1)(f) GDPR.

3.2 Contact and Quote Requests

• What We Collect:
  When you submit an enquiry, quote request, or booking enquiry via our Website, we may collect your name, email address, telephone number, pickup and drop-off locations, and any additional travel details you provide.
• Purpose & Legal Basis:
  We use these details to respond to your enquiry and process your request. The processing is based on the necessity to perform a contract or communicate with you (Article 6(1)(b) GDPR) and, where applicable, on your consent (Article 6(1)(a) GDPR).

3.3 Registration and Booking

• What We Collect:
  During registration or booking, we may request additional details such as your postal address and other contact information. All data submitted is transmitted securely.
• Purpose & Legal Basis:
  Your data is processed to enable bookings and to fulfil our contractual obligations to you. This processing is based on Article 6(1)(b) GDPR (contractual necessity) and our legitimate interests (Article 6(1)(f) GDPR). Data is retained for as long as your account remains active or as legally required.

3.4 Cookies and Similar Technologies

For details on how we use cookies and manage your cookie preferences, please refer to our separate Cookie Policy.

3.5 Google Maps

• What We Do:
  Our Website integrates Google Maps via an API to enhance user experience.
• Data Processed & Legal Basis:
  To provide the map service, your IP address is transmitted to Google and may be stored on servers in the USA. We rely on your consent (Article 6(1)(a) GDPR) for this processing.

Transfer of Personal Data

We do not sell or rent your personal data. However, we may share your data with third parties where necessary to:

• Fulfil our contractual obligations (e.g. payment processing, customer support),
• Comply with legal obligations or court orders,
• Protect our legitimate interests or those of our users.

When transferring your data to third-party service providers (processors), such as payment processors or web hosting companies, we ensure that appropriate safeguards are in place, including the use of approved standard contractual clauses.

Payment Processors

We work with trusted payment service providers to process payments securely. For example:

• PayPal:
  When you choose to pay via PayPal, your payment details are transferred directly to PayPal (Europe) S.à r.l. et Cie, S.C.A. Their use of your data is based on your consent and the necessity of processing for contract performance.
• Stripe:
  Credit card and SEPA direct debit transactions are processed through Stripe Payments Europe Ltd. The data provided (e.g. email address and payment details) is passed on solely for payment processing, in accordance with Article 6(1)(b) GDPR.

Data Retention and Security

• Retention:
  Your personal data is stored only as long as necessary to fulfil the purposes for which it was collected or as required by law (typically up to 6 years). In some cases, we may retain data for longer periods if necessary for legal defence or enforcement of claims.
• Security:
  We implement appropriate technical and organisational measures to safeguard your personal data against unauthorised access, loss, or misuse.

International Data Transfers

Our main operations are based in the UK and the European Economic Area (EEA). In the event that your data is transferred outside the EEA, we ensure that adequate safeguards are in place—such as standard contractual clauses—to protect your personal data.

Automated Decision-Making

Croosr does not use automated decision-making or profiling that has a significant effect on you.

Direct Marketing

We may use your personal data to contact you regarding our services, offers, or updates. If you have provided consent for direct marketing, you have the right to withdraw that consent at any time.

Your Rights

Under data protection laws, you have the right to:

• Request access to your personal data,
• Request rectification or correction of inaccurate data,
• Request erasure of your data where appropriate,
• Object to or restrict the processing of your data,
• Request data portability,
• Withdraw your consent at any time (without affecting the lawfulness of processing based on consent before its withdrawal).

For further details or to exercise your rights, please contact us using the details provided at the end of this Policy. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.

Links to Other Websites

Our Website may contain links to third-party websites. We do not control the privacy practices or content of these external sites. We encourage you to review their respective privacy policies before providing any personal data.

Changes to This Policy

Croosr may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The current version will always be available on our Website, and the effective date will be updated accordingly.

Contact Us

If you have any questions or concerns regarding this Privacy Policy or our data processing practices, please contact us at:

Croosr Limited
New World Business Centre
Station Rd, Warmley
Bristol, BS30 8XG
United Kingdom

Or via our Contact Form.