Personal Data
For the purposes of this Privacy Policy, personal data means any information that relates to an identified or identifiable individual.
This includes information that can directly identify a person, such as a name or contact details, as well as information that can identify someone indirectly — such as an identification number, location data, online identifiers, or other factors relating to a person’s physical, physiological, genetic, mental, economic, cultural, or social identity.
This Privacy Policy applies to all personal data that we collect, use, store, or otherwise process in the course of our business, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
We process personal data in accordance with the principles of lawfulness, fairness, transparency, data minimisation, accuracy, storage limitation, and integrity and confidentiality.
The Crate Hire Group is the data controller responsible for your personal data.
Crate Hire Group
Beam Reach Business Park, Consul Ave, Rainham, Essex, RM13 8GJ
Email: info@cratehiregroup.co.uk
How We Use Your Information
The Crate Hire Group collects and uses personal data to provide our products and services and to manage our relationship with you.
Categories of Data We Collect
This includes the following categories of personal data:
- Identity data — name, company name
- Contact data — address, email address, telephone number
- Transaction data — orders, deliveries, invoices
- Financial data — payment details processed via secure third-party providers
- Technical data — IP address, browser type, and website usage information
We collect this information directly from you, via our website, and through communications with you.
Legitimate Business Interests
We may also use personal data where it is necessary for our legitimate business interests, provided those interests do not override your rights and freedoms. This includes:
- Improving our services
- Managing our website
- Preventing fraud
- Keeping our records up to date
We do not use personal data for automated decision-making or profiling that produces legal or similarly significant effects.
Cookies
We use cookies and similar technologies on our website. These are categorised as follows:
- Essential cookies — required for core website functionality and cannot be disabled.
- Non-essential cookies — including analytics tools such as Google Analytics, which are only used with your consent. These cookies are not set unless you have provided consent in accordance with the Privacy and Electronic Communications Regulations (PECR).
You can manage your cookie preferences via our cookie banner at any time.
Marketing
We may send marketing communications where:
- You have provided your explicit consent; or
- You are an existing customer and we rely on the soft opt-in under PECR.
You may opt out at any time by using the unsubscribe link in any marketing email or by contacting us directly.
Why Does Crate Hire Group Need to Collect and Store Personal Data?
The Crate Hire Group needs to collect and store personal data in order to provide our products and services and to fulfil our contractual obligations to our customers.
This includes processing orders, managing payments, delivering goods or services, and providing ongoing customer support.
We may also be required to retain certain personal data to comply with legal obligations — such as accounting, tax, or regulatory requirements — even after our contractual relationship has ended.
In all cases, we ensure that the personal data we collect is relevant, limited to what is necessary for these purposes, and handled in a way that respects your privacy and complies with the UK GDPR and the Data Protection Act 2018.
Security Measures
We implement appropriate technical and organisational measures to protect your personal data, including:
- Access controls
- Secure systems and storage
- Monitoring and auditing
- Physical security controls
These measures are designed to ensure the integrity and confidentiality of all personal data we hold.
Will Crate Hire Group Share My Personal Data With Anyone Else?
The Crate Hire Group may share your personal data with trusted third parties who provide services on our behalf, such as payment processing, delivery services, IT support, and website hosting.
These third parties only process personal data in accordance with our instructions and are required to keep it secure and confidential.
We only share the minimum amount of personal data necessary for them to provide their services. We do not sell or share personal data for marketing purposes without your consent.
Where third parties process personal data on our behalf, appropriate contractual safeguards are in place to ensure compliance with the UK GDPR. Personal data is retained by third parties only for as long as necessary to fulfil their contractual obligations or legal requirements.
International Transfers
Some service providers may process personal data outside the UK. Where this occurs, appropriate safeguards are applied, including UK adequacy regulations or International Data Transfer Agreements (IDTA).
How Will Crate Hire Group Use the Personal Data It Collects About Me?
The Crate Hire Group will collect, store, and use personal data in a manner that complies with the UK GDPR and the Data Protection Act 2018.
We take reasonable steps to ensure that personal data is accurate, kept up to date, and only retained for as long as necessary for the purposes for which it was collected.
In some cases, we are required to retain personal data for longer periods to comply with legal obligations, such as accounting, tax, or audit requirements. Retention periods may also be influenced by recognised business practices or regulatory requirements relevant to our sector.
Data Retention Periods
We retain personal data only for as long as is necessary. Our standard retention periods are as follows:
- Financial records — 6 years (legal requirement)
- Customer records — duration of the customer relationship, plus the applicable limitation period
- Marketing data — until you opt out
Retention periods are reviewed regularly to ensure they remain necessary and proportionate.
Under What Circumstances Will Crate Hire Group Contact Me?
The Crate Hire Group may contact you where it is necessary to provide our products or services — for example, to process orders, arrange delivery, respond to enquiries, or provide customer support.
We may also contact you where required to meet legal or contractual obligations, or to provide important information relating to your account or our services.
We will only contact you for legitimate purposes and will not request information that is irrelevant to those purposes. Any personal data used to contact you is handled securely and in accordance with our data protection obligations under the UK GDPR.
Marketing communications, where applicable, will only be sent in accordance with applicable consent or opt-out requirements.
Can I Find Out the Personal Data That Crate Hire Group Holds About Me?
You have the right to request access to the personal data that the Crate Hire Group holds about you and to receive information about how it is processed.
Your Right of Access Includes
- The purposes for which your personal data is used
- The legal basis for processing
- The categories of personal data held
- Who your data may be shared with
- How long your data is retained
- Your rights in relation to that data
- The right to data portability
Additional Rights
You may also request:
- Corrections to inaccurate personal data
- Erasure or restriction of processing, where applicable
- To object to certain types of processing
Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
Requests can be made in writing, and we will respond in accordance with the UK GDPR.
Right to Complain
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data protection rights have been infringed.
Visit the ICO website: https://ico.org.uk
We encourage you to contact us first so that we can work with you to resolve any concerns.
What Forms of ID Will I Need to Provide to Access My Data?
To protect your personal data, the Crate Hire Group may need to verify your identity before responding to a data protection request.
Where verification is required, we will only request information that is necessary and proportionate to confirm your identity — for example, a copy of one form of official identification such as a driving licence or a recent utility bill.
We do not require more information than is needed for this purpose. Any identification provided will be used solely to verify your identity and will be handled securely in line with our data protection obligations.
If you have any questions about making a data protection request or the identification requirements, please contact us at: info@cratehiregroup.co.uk