Privacy Policy

Criltech Media is a digital and creative services agency based in Liverpool, England. We provide website design and development, branding, social media management, SEO, and related digital services to small businesses and sole traders across the UK.

For the purposes of UK data protection law, Criltech Media is the data controller of the personal information we collect about you.

We may collect and process the following categories of personal data:

We use your personal data for the following purposes:

We do not use your personal data for automated decision-making or profiling.

Under the UK General Data Protection Regulation (UK GDPR), we rely on the following lawful bases to process your personal data:

• Contract

  Processing is necessary to perform a contract with you or to take steps at your request before entering into a contract.

• Legal obligation

  Processing is necessary to comply with a legal obligation, such as tax and accounting requirements.

• Legitimate interests

  Processing is necessary for our legitimate business interests, such as responding to enquiries, improving our services, and maintaining business records — provided these interests are not overridden by your rights.

• Consent

  Where we rely on consent (for example, for marketing communications), you have the right to withdraw that consent at any time.

We do not sell, rent, or trade your personal data. We may share your information only in the following limited circumstances:

• With trusted third-party service providers who assist us in delivering our services (such as payment processors, hosting providers, and project management tools), under appropriate data processing agreements.
• With professional advisers such as accountants or legal advisers, where necessary.
• Where required by law, regulation, or a court order.
• In the event of a business transfer or merger, where client data forms part of the transferred assets — you would be notified in advance.

Our website uses cookies and similar tracking technologies in accordance with the Privacy and Electronic Communications Regulations (PECR) and UK GDPR.

We may use:

• Essential cookies

  Necessary for the website to function correctly. These cannot be disabled.

• Analytics cookies

  Used to understand how visitors interact with our website (e.g. pages visited, time on site). This data is aggregated and anonymised where possible.

You can manage or disable cookies through your browser settings. Disabling certain cookies may affect the functionality of the website.

We retain personal data only for as long as necessary for the purposes for which it was collected, or as required by law.

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These include:

• Secure, encrypted connections (HTTPS) on our website
• Access controls limiting who can view client data
• Use of reputable third-party platforms with their own security certifications
• Regular review of our data handling practices

No method of transmission over the internet is completely secure. While we take all reasonable steps to protect your data, we cannot guarantee absolute security.

Where we use third-party tools or services that process data outside the UK, we ensure that appropriate safeguards are in place — such as adequacy decisions, standard contractual clauses, or equivalent protections recognised under UK data protection law. We do not routinely transfer personal data outside the UK or European Economic Area.

Under UK GDPR, you have the following rights in relation to your personal data:

To exercise any of these rights, please contact us at [email protected]. We will respond within one calendar month.

If you are unhappy with how we have handled your personal data, please contact us in the first instance and we will do our best to resolve the matter.

You also have the right to lodge a complaint with the UK's supervisory authority, the Information Commissioner's Office (ICO):

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any external sites you visit.

Our services are not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The date at the top of this page will be updated accordingly. We encourage you to review this policy periodically. Continued use of our website or services after any changes constitutes your acceptance of the updated policy.