Privacy Statement
In this privacy statement, we explain what we do with the data we obtain about you via https://crp.scot
We recommend that you read this statement carefully.
In our processing of personal data, we comply with applicable data protection legislation, including the UK GDPR and the Data Protection Act 2018. This means, among other things, that:
we clearly state the purposes for which we process personal data;
we limit our collection of personal data to only that which is necessary;
we rely on appropriate lawful bases for processing;
we request your consent where required;
we take appropriate security measures;
we respect your rights in relation to your personal data.
1. Who we are
CRP.scot is operated by GoMoSoLo LTD registered in England , which is the data controller of your personal data.
Website: https://crp.scot
Email: privacy@crp.scot
2. Personal data we collect
We may collect and process the following categories of personal data:
Contact data, such as your name and email address; for example, when you contact us
Technical data, such as IP address, browser type and device information
Usage data, including how you use our website
Communication data, including any correspondence you send to us
Some data is collected automatically through cookies and similar technologies. Please refer to our Cookie Policy for full details.
3. Purposes and lawful basis for processing
We process your personal data for the following purposes:
To operate and maintain our website
Lawful basis: legitimate interests
To respond to enquiries and communications
Lawful basis: legitimate interests
To comply with legal obligations
Lawful basis: legal obligation
To improve our website and content
Lawful basis: legitimate interests or consent where required
To manage and respond to data rights requests
Lawful basis: legal obligation
Where we rely on legitimate interests, we ensure that these are not overridden by your rights and freedoms.
Where cookies or similar technologies require consent, our lawful basis is your consent under the Privacy and Electronic Communications Regulations.
Where we rely on consent, you have the right to withdraw it at any time.
4. Sharing with other parties
We only share personal data where necessary and with appropriate safeguards.
We use a limited number of third-party service providers to operate this website, including:
20i Ltd (United Kingdom) – website hosting
Dropbox Inc (United States) – secure storage and backups
These providers may process personal data on our behalf.
5. International data transfers
Some of our service providers are based outside the United Kingdom.
Where personal data is transferred outside the United Kingdom, we ensure that appropriate safeguards are in place, such as International Data Transfer Agreements (IDTAs) or the UK Addendum to Standard Contractual Clauses, and, where required, transfer risk assessments, in accordance with the UK GDPR.
6. Cookies
Our website uses cookies and similar technologies.
We use:
essential cookies required for the operation of the website;
optional cookies, such as privacy-friendly analytics, where applicable.
When you first visit our website, you are presented with a cookie consent banner that allows you to accept, reject, or manage your preferences.
Non-essential cookies are only set after you have given your consent, in accordance with the Privacy and Electronic Communications Regulations.
You can change your preferences at any time via the cookie settings on our website.
For full details, please see our Cookie Policy:
https://crp.scot/cookie-policy
7. Use of third-party services and technologies
We use a limited number of third-party services and technologies to operate and maintain this website, and to ensure it functions as intended.
These include:
website hosting infrastructure
secure data storage and backups
Google Fonts, which may load fonts from Google servers to display website content
These services are used as part of the normal operation of the website and only to the extent necessary to provide its core functionality.
Our website may also include embedded content from third-party platforms, such as YouTube or similar services. Embedded content behaves in the same way as if you had visited the third-party website directly.
These third-party providers may collect data about you, including your IP address, and may use cookies or similar technologies.
Where such technologies rely on cookies or tracking, they will only be activated after you have given your consent, where required, in accordance with the Privacy and Electronic Communications Regulations.
Where applicable, we take reasonable steps to ensure that third-party services do not process personal data unnecessarily or before your consent is obtained.
8. Disclosure practices
We may disclose personal data:
where required by law or legal process;
to protect our legal rights;
in connection with a business sale, merger or acquisition.
9. Data retention
We retain personal data only for as long as necessary for the purposes described in this policy.
Contact enquiries are typically retained for up to 12 months
General website-related data is retained only as long as necessary to operate and maintain the site
Where applicable, data may be retained for up to 6 years to comply with legal and accounting obligations
Retention periods may vary depending on the nature of the data and our legal obligations.
10. Security
We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss or misuse.
This includes the use of secure hosting environments, access controls, and encryption where appropriate.
Access to personal data is restricted to those who require it for legitimate purposes.
11. Third-party websites
This privacy policy does not apply to third-party websites linked from our site. We recommend reviewing their privacy policies separately.
12. Your rights
You have the following rights:
Right of access
Right to rectification
Right to erasure
Right to restriction of processing
Right to data portability
Right to object
Right to withdraw consent
To exercise your rights, please contact us. We may need to verify your identity.
13. Complaints
If you are not satisfied with how we handle your personal data, you may contact the Information Commissioner’s Office:
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
https://ico.org.uk/concerns/
14. Children
Our website is not intended for children, and we do not knowingly collect personal data from children.
15. Amendments
We may update this privacy policy from time to time. Any changes will be published on this page.
16. Contact
GoMoSoLo LTD
Peterborough
United Kingdom
Email: privacy@crp.scot