Privacy notice

This privacy notice is provided to demonstrate our transparency by informing you about how and why your personal data is used and to ensure that you are aware of your rights under data protection legislation.

The Company

We are CrystalEyes and we are the Data Controller. Our address is 22 Kingsway, Woking, Surrey, GU21 6NU. We can also be contacted at callumrussell@crconsultancy.org or on 07557 916996.

The purpose for processing your data and our basis for doing so

We process your personal data so we can provide our disability inclusion services to a wide range of organisations and individuals alike. We process personal data specifically to engage with local authority services as well as commercial entities and individual people. We also process personal data to send appropriate marketing material to organisations we work with or to prospective client organisations. We will usually obtain your personal data directly from you, although we may be provided with your contact details by a third party.

As a user, prospective user or family member / guardian of a service user, we will process your name and contact data. We will do this under the lawful basis of Article 6.1.f UK GDPR (Legitimate Interest). Our legitimate interest is to maintain and expand our business services and process our transactions. During our conversations, we may discuss specific disability conditions to provide the context for our support. If we do this, we will process your health data in accordance with Article 6.1.f (legitimate interest) and also Article 9.2.a (explicit consent).

If you are a local authority or other organisational contact, we will process your name, email address, job title, organisation name and address and telephone number. As a supplier to whom we signpost our users, we will process a URL, email and contact name. The lawful basis we use for this is Article 6.1.f UK GDPR (Legitimate Interest). The legitimate interest we pursue is to grow our business and provide our service to more users. As with any legitimate interest processing, you have the right to object to this, and you can do so by contacting us using the information provided above.

If you fail to provide the information required, we will be unable to provide the agreed services to you.

For marketing purposes, we only provide marketing information to organisations and the lawful basis we use for this is Article 6.1.f UK GDPR (Legitimate Interest), as a recipient of this marketing you can object at any time by contacting us.

Recipients of your data

As a general principle, we will not transfer your personal data to other recipients without your permission. There are some exceptions to this:

  • It is possible, that we might be obliged to disclose personal information in response to a court order or other lawful obligation.
  • We will share limited personal data with our external accountants.
  • We may share your data as part of a sale, transfer, or merge part of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them.

Data processed by third parties on our behalf

We use the services of other organisations in the processing of your data. We use cloud-based email and document storage, web hosts and video conference platforms. Our external IT service provider has limited access to data.

Transferring your data outside of the UK

We do not transfer personal data outside of the UK.

Retention periods 

We will retain your data only for the time we require it for the purposes stated and / or where we have a legal obligation or other legitimate purpose. We will normally delete your data upon request.

Your rights 

The UK GDPR provides you with several rights in relation to the data which we process. The rights relevant to our activities are:

  • You have the right to get access to and copies of your personal data.
  • You can ask us to rectify any inaccurate information we may be holding.
  • You can request we restrict our processing of your data.
  • You can ask us to erase your personal data if it is no longer required for the purposes we collected it or have no legal obligation to retain it.
  • You have the right to object to processing we undertake under a legitimate interest basis.

If you want to exercise any of these rights, please contact us using the above contact details.

You also have the right to lodge a complaint about our processing with a supervisory authority — the UK’s Information Commissioner’s Office.

The Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Helpline 0303 123 1113