Legal

Privacy notice.

How we use personal information, in plain words.

This notice explains how Crew & Engine uses personal information collected through this website, crewandengine.com (“Our Site”), and when you contact us. It is written to be read. If anything is unclear, email us at hello@crewandengine.com.

This notice was last updated in November 2026.

1. Who we are

Our Site is operated by Crew & Engine Limited, a limited company registered in England and Wales under company number 17526268 (“We”, “Us”, “Our”). Our registered address and Our main trading address are both Swan Buildings, 20 Swan Street, Manchester M4 5JW.

We are the controller of the personal information described in this notice. That means We decide how and why it is used.

2. What this notice covers

This notice covers visitors to Our Site and people who contact Us through it or by email. Work We do for clients is covered by the terms agreed for each engagement.

Personal information is any information about you that identifies you, directly or indirectly. That includes obvious details such as your name and email address, and less obvious ones such as your IP address. The law that applies is the UK GDPR and the Data Protection Act 2018, as amended by the Data (Use and Access) Act 2025 and other data protection legislation (together, “UK data protection law”).

3. What we collect, why, and on what basis

Enquiries you send through the contact form

  • What: your name, work email address, company, role (optional), the service you are interested in, and the message you write. Our form provider, Netlify, also records the IP address the message was sent from and stores it with your submission.
  • Why: to reply to you, and to discuss working together if you want to.
  • Legal basis: our legitimate interests in responding to business enquiries, and, where you ask about our services, taking steps at your request before entering into a contract.
  • How long: 12 months after our last contact with you, after which We delete it, unless we begin working together, in which case the terms of that engagement apply.

Emails you send us

  • What: your email address, name and whatever you tell us.
  • Why, basis and how long: as for enquiries above.

Technical information when you visit

  • What: your IP address, browser and device type, the pages you request, the page that referred you, and the date and time. Our hosting provider collects this in its server logs.
  • Why: to deliver Our Site, keep it secure and fix faults.
  • Legal basis: our legitimate interests in running a secure website.
  • How long: our hosting provider keeps these logs for 90 days online and for one year offline, under its data processing agreement. We do not keep our own copies.

The contact form contains a hidden field that catches automated spam. It does not track you.

We do not collect more than this. We do not ask for sensitive information, and please do not include it in your message.

4. Cookies and similar technologies

Our Site does not set cookies. It does not use analytics, advertising or tracking tools, and it does not load third-party content such as embedded video, maps or social media feeds. If that changes, we will update this notice before it does.

Our Site links to other websites, such as LinkedIn. Those sites have their own privacy and cookie policies, which apply once you leave Our Site.

5. Who we share it with

  • Our hosting and form-handling provider, Netlify, Inc., which processes the information on Our behalf.
  • Our email provider, Google (Google Workspace), which processes the emails We receive and send.
  • Our professional advisers (for example accountants and lawyers) where they need it to advise Us.
  • Public authorities, courts and others, where the law requires it, for example in legal proceedings or under a court order.
  • A new owner of Our business, if We sell, transfer or merge any part of it or its assets. The new owner may keep using your information as this notice describes, for example to communicate with you.

We do not enter your enquiry details into AI tools. If that changes, We will update this notice first.

We do not sell your personal information. We do not use it for advertising.

6. Transfers outside the United Kingdom

Some of our providers process information outside the United Kingdom, including in the United States. Where they do, We make sure your information receives the same level of protection it has in the United Kingdom. For each provider We rely on one of two safeguards: UK adequacy regulations (the UK-US data bridge, which covers US providers certified under its UK Extension), or the approved standard contract terms in the data processing agreement We have with the provider. Our email provider, Google, states that it is certified under the UK Extension. For our hosting provider, Netlify, the approved standard contract terms, including the UK addendum, form part of its data processing agreement.

For more detail on adequacy regulations and approved contract terms, see the Information Commissioner’s Office at ico.org.uk. To find out which safeguard applies to a particular provider, contact Us using the details in section 14.

7. How we keep it safe

We keep your information secure and keep it for no longer than We need it for the reasons We collected it. To protect it, We:

  • limit access to those employees, advisers and providers who need it, and make sure they owe Us a duty of confidentiality; and
  • follow a procedure for dealing with data breaches (the accidental or unlawful loss, destruction, alteration or disclosure of, or access to, personal information), including telling you and the Information Commissioner’s Office where the law requires Us to.

8. Your rights

Under UK data protection law you have the right to:

  • be told how We collect and use your information, which this notice does;
  • ask for a copy of the personal information We hold about you (see section 9);
  • ask Us to correct information that is wrong or incomplete;
  • ask Us to delete your information;
  • ask Us to restrict how We use it;
  • object to Us using it on the basis of our legitimate interests;
  • withdraw your consent at any time, where We rely on your consent;
  • ask for the information you gave Us in a portable format, where this applies; and
  • not be subject to decisions made solely by automated means that have legal or similarly significant effects (see section 12).

To use any of these rights, email hello@crewandengine.com or write to the address in section 14. We will reply within one month. It helps if you tell Us when your details change, so that what We hold stays accurate.

9. Seeing your information

You can ask Us for the personal information We hold about you and a copy of it. This is called a subject access request. Please make it in writing, by email or post, using the details in section 14.

We will carry out reasonable and proportionate searches for the information your request covers. There is normally no charge. If a request is manifestly unfounded or excessive, for example because it is repeated, We may charge a fee to cover our administrative costs.

We will respond within one month of receiving your request. If your request is complex, We may need up to three months from the date We receive it, and We will tell you if so and keep you informed.

10. Complaints

If you have a complaint about how We use your information, email hello@crewandengine.com or write to Us at the address in section 14. We will acknowledge your complaint within 30 days and respond without undue delay. We will do our best to put things right.

You also have the right to complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We would welcome the chance to put things right first, but you do not have to come to Us before contacting the ICO.

11. Marketing

We will not add you to a marketing list without your consent. If We later offer a newsletter or similar, We will say so here and you will be able to unsubscribe at any time.

12. Automated decisions

We do not make decisions about you using automated processing that has legal or similarly significant effects. We do not use your personal information for profiling.

13. Children

Our Site is for business use and is not aimed at children. We do not knowingly collect personal information from children under 13.

14. How to contact us

For anything to do with your personal information, including a rights request, a subject access request or a complaint:

15. Changes to this notice

We may update this notice, for example if the law changes or if We change Our business in a way that affects personal information. The date at the top shows when it last changed. Significant changes will be highlighted at the top of this page.