Privacy & Cookie Policy
Crate Hire UK privacy and cookie policy
This Privacy and Cookie Policy explains how Crate Hire Group Limited uses personal information we collect and how you can limit our use of that personal data.
We have updated our privacy policy in line with General Data Protection Regulation (GDPR) that comes into effect on 25th May 2018.
GDPR affects the way we collect and use information about visitors to our website, and makes it easier to find out what information we may hold about you. It also makes it easier for you to request that we remove your information from our database.
GDPR also affects the way we track users on our website using cookies.
1. PERSONAL DATA
For the purposes of this Privacy Policy, personal data means any information that relates to an identified or identifiable individual.
This includes information that can directly identify a person, such as a name or contact details, as well as information that can identify someone indirectly, such as an identification number, location data, online identifiers, or other factors relating to a person’s physical, physiological, genetic, mental, economic, cultural or social identity.
This Privacy Policy applies to all personal data that we collect, use, store, or otherwise process in the course of our business, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
We process personal data in accordance with the principles of lawfulness, fairness, transparency, data minimisation, accuracy, storage limitation, and integrity and confidentiality
The Crate Hire Group is the data controller responsible for your personal data.
Contact details:
Crate Hire Group, Beam Reach Business Park, Consul Ave, Rainham, Essex, RM13 8GJ
Email: [email protected]
2. HOW WE USE YOUR INFORMATION
The Crate Hire Group collects and uses personal data to provide our products and services and to manage our relationship with you.
This includes:
- Identity data. (name, company name)
- Contact data. (address, email, telephone number)
- Transaction data. (orders, deliveries, invoices)
- Financial data. (payment details via secure third-party providers)
- Technical data. (IP address, browser and website usage)
We collect this information directly from you, via our website, through communications.
We may also use personal data where it is necessary for our legitimate business interests, such as:
- Improving our services.
- Managing our website.
- Preventing fraud.
- Keeping our records up to date.
- Provided those interests do not override your rights and freedoms.
- We do not use personal data for automated decision‑making or profiling that produces legal or similarly significant effects.
We use cookies and similar technologies on our website.
- Essential cookies are required for functionality.
- Non-essential cookies (including analytics tools such as Google Analytics) are only used with your consent.
- Non-essential cookies are not set unless you have provided consent in accordance with the Privacy and Electronic Communications Regulations (PECR)
You can manage your cookie preferences via our cookie banner at any time.
MARKETING
We may send marketing communications where:
- You have provided consent; or
- You are an existing customer, and we rely on the “soft opt-in” under PECR.
You may opt-out at any time using the unsubscribe link or by contacting us.
3. WHY DOES CRATE HIRE GROUP NEED TO COLLECT AND STORE PERSONAL DATA?
The Crate Hire Group needs to collect and store personal data in order to provide our products and services and to fulfil our contractual obligations to our customers.
This includes processing orders, managing payments, delivering goods or services, and providing ongoing customer support.
We may also be required to retain certain personal data to comply with legal obligations, such as accounting, tax, or regulatory requirements, even after our contractual relationship has ended.
In all cases, we ensure that the personal data we collect is relevant, limited to what is necessary for these purposes, and handled in a way that respects your privacy and complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
We implement appropriate technical and organisational measures, including:
- Access controls
- Secure systems and storage
- Monitoring and auditing
- Physical security controls
These measures ensure the integrity and confidentiality of personal data.
4. WILL THE CRATE HIRE GROUP SHARE MY PERSONAL DATA WITH ANYONE ELSE?
The Crate Hire Group may share your personal data with trusted third parties who provide services on our behalf, such as payment processing, delivery services, IT support, and website hosting.
These third parties only process personal data in accordance with our instructions and are required to keep it secure and confidential.
We only share the minimum amount of personal data necessary for them to provide their services and do not sell or share personal data for marketing purposes without your consent.
Where third parties process personal data on our behalf, appropriate contractual safeguards are in place to ensure compliance with the UK General Data Protection Regulation (UK GDPR).
Personal data is retained by third parties only for as long as necessary to fulfil their contractual obligations or legal requirements.
5. HOW WILL THE CRATE HIRE GROUP USE THE PERSONAL DATA IT COLLECTS ABOUT ME?
The Crate Hire Group will collect, store, and use personal data in a manner that complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
We take reasonable steps to ensure that personal data is accurate, kept up to date, and only retained for as long as necessary for the purposes for which it was collected.
In some cases, we are required to retain personal data for longer periods to comply with legal obligations, such as accounting, tax, or audit requirements.
Retention periods may also be influenced by recognised business practices or regulatory requirements relevant to our sector.
Where personal data is retained, it is held securely and reviewed regularly to ensure it remains necessary and proportionate.
We retain personal data only as long as necessary:
- Financial records: 6 years. (legal requirement)
- Customer records: duration of relationship + limitation period.
- Marketing data: until you opt out.
Retention periods are regularly reviewed.
If we intend to transfer the personal data to a third country or international organisation, information about how we ensure this is done securely will be provided. Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, including UK adequacy regulations or International Data Transfer Agreements (IDTA).
Some service providers may process personal data outside the UK. Where this occurs, appropriate safeguards are applied, including UK adequacy regulations or International Data Transfer Agreements (IDTA).
6. UNDER WHAT CIRCUMSTANCES WILL THE CRATE HIRE GROUP CONTACT ME?
The Crate Hire Group may contact you where it is necessary to provide our products or services, such as to process orders, arrange delivery, respond to enquiries, or provide customer support.
We may also contact you, where required to meet legal or contractual obligations, or to provide important information relating to your account or our services.
We will only contact you for legitimate purposes and will not request information that is irrelevant to those purposes.
Any personal data used to contact you is handled securely and in accordance with our data protection obligations under the UK General Data Protection Regulation (UK GDPR).
Marketing communications, where applicable, will only be sent in accordance with applicable consent or opt‑out requirements.
7. CAN I FIND OUT THE PERSONAL DATA THAT THE CRATE HIRE GROUP HOLDS ABOUT ME?
You have the right to request access to the personal data that the Crate Hire Group holds about you and to receive information about how it is processed.
This includes details of:
- The purposes for which your personal data is used.
- The legal basis for processing.
- The categories of personal data held.
- Who it may be shared with.
- How long it is retained.
- Your rights in relation to that data.
- The right to data portability.
You may also request:
- Corrections to inaccurate data.
- Request erasure or restriction of processing where applicable.
- Object to certain types of processing.
Where processing is based on consent, you have the right to withdraw that consent at any time.
Requests can be made in writing, and we will respond in accordance with the UK General Data Protection Regulation (UK GDPR).
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data protection rights have been infringed.
We encourage you to contact us first to resolve any concerns.
8. WHAT FORMS OF ID WILL I NEED TO PROVIDE IN ORDER TO ACCESS THIS?
To protect your personal data, the Crate Hire Group may need to verify your identity before responding to a data protection request.
Where verification is required, we will only request information that is necessary and proportionate to confirm your identity, such as a copy of one form of official identification or other suitable evidence (for example, a driving licence or recent utility bill).
We do not require more information than is needed for this purpose, and any identification information provided will be used solely to verify your identity and will be handled securely.
If you have any questions about making a request or the identification requirements, please contact us at: