Legal · privacy
Privacy policy.
Draft for legal review. Last updated 27 September 2026.
What personal data we collect when you use this website, why we collect it, who helps us process it and what you can ask us to do with it.
Who we are
This website, freshandcrispy.co.uk, is operated by Fresh & Crispy, a joint venture of Flowconverts Ltd (company number 14335379) and Freshly Brewed Ltd (company number 06882240), both registered in England and Wales. In this policy, "we", "us" and "our" mean Fresh & Crispy.
For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the data controller is [To confirm: which entity or entities act as data controller]. Registered office: [To confirm: registered office address]. ICO registration number: [To confirm: ICO registration number].
For any privacy question or request, email hello@freshandcrispy.co.uk.
What we collect
- Enquiries. If you email us, we receive your name, email address, anything you include in the message and any website address you share.
- Call bookings. If you book a 15 minute call through our booking page, HubSpot Meetings collects your name, email address, the time you chose and any answers you give in the booking form. Calls take place on Google Meet.
- Analytics. Google Analytics 4 and the HubSpot tracking script record how the site is used: pages viewed, time on page, approximate location (country or city level), device and browser type, referring site and events such as starting an audit. This uses cookies and similar identifiers. See our cookie policy.
- Audit URLs. When you use the free audit form, the website address you enter is sent to our CRISP audit application at app.getcrisp.design, which scores the site. A website address is usually business information, but it can identify a sole trader or individual.
We do not ask for special category data (such as health or political opinions) and we ask you not to send it.
Why we use it and our lawful basis
UK GDPR requires a lawful basis for each use of personal data. Ours are:
- Replying to enquiries and running calls: legitimate interests (responding to people who contact us about our services), or steps taken at your request before entering into a contract.
- Running the audit you request: legitimate interests in providing the tool you asked to use.
- Analytics: understanding how the site is used so we can improve it. Analytics cookies are only set if you choose "Accept analytics" in the cookie banner, as the Privacy and Electronic Communications Regulations (PECR) require. The lawful basis for this processing is your consent, which you can withdraw at any time through "Cookie settings" in the footer.
- Keeping records and meeting legal obligations: legal obligation, for example tax and accounting records if you become a client.
We do not sell your personal data. We do not add you to a marketing mailing list because you ran an audit or booked a call. [To confirm: whether HubSpot contact records created from bookings are used for any follow-up marketing, and on what basis.]
Who we share it with
We use a small number of service providers who process personal data on our behalf, under contract:
| Provider | What it does for us |
|---|---|
| Google (Google Analytics 4) | Website usage analytics |
| HubSpot (EU data centre) | Website tracking, call booking and contact records |
| Google (Google Meet) | Video calls |
| Google Fonts | Delivers the site typeface; your browser sends your IP address to Google to load it |
| CRISP audit application (app.getcrisp.design) | Scores the website address you submit |
| [To confirm: hosting provider] | Hosts the website and may keep standard server logs |
| [To confirm: email provider] | Receives and stores email sent to hello@freshandcrispy.co.uk |
[To confirm: who operates app.getcrisp.design and whether it is a Fresh & Crispy system or a separate processor.] We may also share data if the law requires it, or with professional advisers under a duty of confidentiality.
International transfers
Some of our providers are based in, or use sub-processors in, countries outside the UK, including the United States. Where personal data leaves the UK, we rely on the safeguards UK law allows, such as UK adequacy regulations, the UK Extension to the EU-US Data Privacy Framework, or the International Data Transfer Agreement or Addendum. You can ask us for more detail about a specific transfer.
How long we keep it
We keep personal data only for as long as we need it for the purpose it was collected. Specific periods: enquiries and email [To confirm]; booking records in HubSpot [To confirm]; Google Analytics data [To confirm: retention setting in the GA4 property]; audit URLs [To confirm]; client records [To confirm].
Your rights
Under UK GDPR you have the right to:
- ask for a copy of the personal data we hold about you;
- ask us to correct data that is wrong or incomplete;
- ask us to delete your data;
- ask us to restrict how we use it;
- object to our use of it where we rely on legitimate interests, including any direct marketing;
- ask for data you gave us in a portable format;
- withdraw consent at any time, where we rely on consent.
Email hello@freshandcrispy.co.uk to use any of these rights. We will reply within one month, as the law requires, and we may need to confirm your identity first. There is normally no fee.
How to complain
If you are unhappy with how we have handled your data, please tell us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator: ico.org.uk/make-a-complaint.
Changes to this policy
We will update this page when our tools or practices change and show the new date at the top. Related pages: cookie policy, website terms of use and contact us.