1. Introduction

iCRAYO (“we”, “us”, “our”) is committed to protecting your privacy and ensuring that your personal data is handled securely and transparently.
This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit https://icrayo.co.uk or contact us through our website.

By using our website, you agree to the collection and use of information in accordance with this policy.

2. Data Controller

Company name: iCRAYO
Website: https://icrayo.co.uk
Email: hello@icrayo.co.uk
Country: United Kingdom

iCRAYO acts as the data controller for the personal data collected through this website.

3. Personal Data We Collect

We may collect and process the following personal data:

• Full name
• Email address
• Phone number (optional)
• Message content submitted via contact forms
• IP address (automatically collected for security and spam prevention)
• Cookie and tracking data

We only collect personal data that is necessary for communication, service delivery, and website functionality.

4. How We Collect Data

We collect personal data through:

• Contact forms on our website
• Direct email communication
• Cookies and tracking technologies
• Analytics and advertising platforms

5. Purpose of Data Processing

Your personal data is processed for the following purposes:

• Responding to enquiries and contact requests
• Providing information about our services
• Managing client relationships
• Improving website performance and user experience
• Marketing, analytics, and advertising (where consent is given)
• Security, fraud prevention, and spam protection

6. Legal Basis for Processing (UK GDPR)

We process personal data based on one or more of the following legal grounds:

• Your consent
• Performance of a contract or pre-contractual steps
• Legitimate interests (such as improving our services and website security)
• Legal obligations

7. Contact Forms & Data Retention

When you submit a contact form:

• The information is sent only by email to us
• Data is not stored in a public database
• We retain contact enquiry data for up to 12 months, unless a longer retention period is required for ongoing communication or legal reasons

8. Cookies & Tracking Technologies

We use cookies and similar technologies to improve website functionality, performance, and marketing effectiveness. Cookie preferences can be managed at any time via our cookie consent banner.

Tools we use:

• Google Analytics
• Google Search Console
• Facebook Pixel (Meta)
• TikTok Pixel

These tools may collect anonymised usage data such as pages visited, time spent on the site, and device information.

You can control or disable cookies through your browser settings. Where required, cookie consent is obtained before non-essential cookies are activated.

9. Third-Party Services

We may share limited data with trusted third-party service providers, including:

• Google (Analytics, Search Console, Gmail)
• Meta / Facebook (advertising and analytics)
• TikTok (advertising and analytics)
• Hosting provider: Brixly.uk (UK-based servers)
• Email provider: Outlook

These providers process data in accordance with their own privacy policies and applicable data protection laws.

10. Newsletter & Marketing Communications

We only send marketing communications where explicit consent has been given.

If you subscribe to our newsletter:

• We collect your email address and, where provided, your name
• You can unsubscribe at any time using the link provided in emails
• We do not sell or share newsletter data with unauthorised third parties

11. Portfolio & Case Studies

We may display client names, logos, or project details in our portfolio or case studies only with prior permission or contractual agreement.

12. AI & Automation

We may use AI-based tools or automation to assist with handling incoming enquiries and communications.
These tools are used strictly to improve response efficiency and do not make automated decisions with legal or significant effects on users.

13. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or alteration.

14. Your Rights Under UK GDPR

You have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your data
• Restrict or object to data processing
• Withdraw consent at any time
• Request data portability

To exercise any of these rights, please contact us at hello@icrayo.co.uk.

15. Data Transfers

Your data is primarily processed within the UK and EEA.
Where data is transferred outside these regions, appropriate safeguards are applied in compliance with UK GDPR.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.
Any changes will be published on this page with an updated revision date.

17. Contact

If you have any questions about this Privacy Policy or how your data is handled, please contact: hello@icrayo.co.uk