Privacy Policy

Who we are

Crovek is a digital product studio. When this policy says "we", "us" or "our", it means Crovek, the controller of the personal data described here. If you have any questions about this policy or how we handle your data, email us at hello@crovek.com.

What we collect

We only collect what we need to talk to you about a project. That means:

• When you fill in our contact form: your first and last name, email address, and, if you choose to give them, your phone number, the type of project, your budget range, when you're looking to start and your message.
• When you email us or reply to us: your name, email address and the content of the messages we exchange, which we keep together so we can follow the conversation.
• When we contact you first: your name and business email address, taken from publicly available sources such as your company's website or professional profiles, and any messages we exchange afterwards.
• When you browse the site: anonymous usage data from Vercel Web Analytics, such as the pages you visit, the site that referred you, your browser, device type, operating system and country. It doesn't use cookies and we can't use it to identify you. Our hosting provider also keeps short-lived server logs, including IP addresses, to keep the site secure and running.

How we use it, and why we are allowed to

Under UK data protection law we need a lawful basis for each use of your data. Ours are:

• Replying to your enquiry and preparing a proposal: taking steps at your request before entering into a contract with you, and our legitimate interest in responding to people who get in touch.
• Delivering a project if you become a client: performing our contract with you.
• Contacting businesses we think we could help: our legitimate interest in finding new clients. Every email we send makes clear who we are, and you can ask us to stop at any time.
• Understanding how the site is used and keeping it secure: our legitimate interest in running a reliable website.
• Keeping business and tax records: complying with our legal obligations.

Who we share it with

We never sell your data or share it with advertisers. We use a small number of service providers who process data on our behalf and only as we instruct them:

• Vercel: website hosting and anonymous analytics.
• Resend: sending our emails and receiving your replies.
• Our database host: storing enquiries and the messages we exchange.
• Clerk: signing in to our private admin area, where we read and reply to enquiries.

International transfers

Some of these providers are based in, or store data in, the United States. Where your data leaves the UK, we rely on safeguards recognised under UK law, such as the UK Extension to the EU-US Data Privacy Framework or the International Data Transfer Addendum to the EU Standard Contractual Clauses.

How long we keep it

We keep personal data only for as long as we need it:

• Enquiries that don’t turn into a project: up to 24 months after we last heard from you.
• People we contacted first who didn’t reply: up to 12 months after our last email.
• Clients: for the length of the project, then for six years afterwards to meet our accounting and tax obligations.
• If you ask us not to contact you again, we keep your email address on a do-not-contact list so that we don’t.

Cookies

We don’t use advertising or tracking cookies, and our analytics work without cookies. The only cookies set are small security and session cookies from Clerk, our sign-in provider, which protect the admin area of the site. They don’t track you across other websites.

Your rights

Under UK data protection law you have the right to:

• ask for a copy of the personal data we hold about you
• ask us to correct anything that’s wrong or incomplete
• ask us to delete your data
• ask us to restrict how we use your data
• object to how we use your data, including an absolute right to object to us contacting you about our services
• ask for your data in a portable format

Keeping your data safe

The site is served over HTTPS, and only the people who handle enquiries can access the admin area, behind a secure sign-in. We work with providers who maintain strong security standards.

Changes to this policy

If we change how we handle personal data, we’ll update this page and the date below. This policy was last updated on 13 October 2026.