Effective Date: 23 January 2026
This Privacy Policy explains how Croftella ("we," "us," or "our") collects, uses, and shares information about you when you use our website, register for our events, or otherwise interact with us. We are committed to protecting your personal data and ensuring transparency about how we use it.
1. Information We Collect
1.1 Information You Provide to Us
We collect information you provide directly to us, including:
- Contact information (such as name, email address, phone number)
- Professional information (such as job title, industry, skills)
- Communications you send to us
- Information provided when registering for events or newsletters
- Survey responses and feedback
1.2 Information We Collect Automatically
When you access our website, we may automatically collect certain information, including:
- Device information (such as IP address, browser type, operating system)
- Usage data (such as pages viewed, time spent on pages, referring website)
- Cookies and similar technologies (see our Cookie Policy for more details)
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our services
- Process registrations and manage our events
- Send you technical notices, updates, and administrative messages
- Respond to your comments, questions, and requests
- Communicate with you about events, offers, promotions, and other news about our services
- Monitor and analyze trends, usage, and activities in connection with our services
- Detect, investigate, and prevent fraudulent transactions and other illegal activities
- Personalize and improve your experience
- Comply with legal obligations
3. Legal Basis for Processing
Under UK data protection law, we need a legal basis to collect and use your personal data. The legal bases we rely on include:
- Consent: Where you have given clear consent for us to process your personal data for a specific purpose.
- Contract: Where processing is necessary for the performance of a contract with you.
- Legitimate Interests: Where processing is necessary for our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect your personal data which overrides these legitimate interests.
- Legal Obligation: Where processing is necessary for compliance with a legal obligation.
4. Sharing Your Information
We may share information about you as follows:
- With service providers who perform services on our behalf
- If we believe disclosure is necessary to comply with any applicable law, regulation, legal process, or governmental request
- To enforce our agreements and policies
- To protect the rights, property, and safety of our users or others
- In connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company
- With your consent or at your direction
We will not sell your personal data to third parties.
5. Data Retention
We will retain your personal data for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data, and applicable legal requirements.
6. Your Rights
Under UK data protection law, you have rights including:
- Right to Access: You can ask us for copies of your personal data.
- Right to Rectification: You can ask us to correct inaccurate personal data or complete incomplete data.
- Right to Erasure: You can ask us to erase your personal data in certain circumstances.
- Right to Restriction of Processing: You can ask us to restrict the processing of your personal data in certain circumstances.
- Right to Data Portability: You can ask us to transfer your personal data to another organization or to you in certain circumstances.
- Right to Object: You can object to the processing of your personal data in certain circumstances.
- Rights Relating to Automated Decision-Making and Profiling: You have rights relating to how we use automated decision-making and profiling.
To exercise any of these rights, please contact us using the details provided below.
7. Data Security
We take reasonable measures to help protect information about you from loss, theft, misuse, and unauthorized access, disclosure, alteration, and destruction. However, no internet or email transmission is ever fully secure or error-free.
8. International Data Transfers
We primarily store and process your data within the United Kingdom. However, we may transfer your data to third-party service providers operating outside the UK. In such cases, we ensure that appropriate safeguards are in place to protect your personal data in accordance with UK data protection law.
9. Children's Privacy
Our services are not intended for individuals under 18 years of age, and we do not knowingly collect personal data from children under 18. If we learn we have collected personal data from a child under 18, we will delete this information.
10. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top. You are advised to review this Privacy Policy periodically for any changes.
11. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at:
Croftella
2 Anderson Pl, Edinburgh EH6 5NP
Email: privacy@croftella.com
Phone: +44 131 516 5160
12. Complaints
If you are concerned about our use of your personal data, you have the right to make a complaint to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues. However, we would appreciate the opportunity to address your concerns before you approach the ICO, so please contact us in the first instance.