Cronos Protection
Current UK Threat Level:SEVERECurrent UK Threat Level:SEVERECurrent UK Threat Level:SEVERECurrent UK Threat Level:SEVERECurrent UK Threat Level:SEVERECurrent UK Threat Level:SEVERECurrent UK Threat Level:SEVERECurrent UK Threat Level:SEVERECurrent UK Threat Level:SEVERECurrent UK Threat Level:SEVERECurrent UK Threat Level:SEVERECurrent UK Threat Level:SEVERE

Your data, your rights

Privacy Policy

Last updated: 22 July 2026

Our commitment to your privacy

Cronos Protection Limited takes the privacy of visitors, customers, applicants and members of the public seriously. This policy explains what personal data we collect through this website, why we collect it, how long we keep it and the rights you have under UK data protection law (UK GDPR and the Data Protection Act 2018).

Who we are

This website (cronosprotection.co.uk) is operated by Cronos Protection Limited, a company registered in England and Wales.

  • Company registration number: 14256170
  • VAT number: 427 1777 75
  • Registered office: 64 South Street, Epsom, Surrey KT18 7PH
  • Registered with the UK Information Commissioner's Office (ICO) as a data controller.
  • Contact: info@cronosprotection.co.uk

What we collect and why

We keep data collection to the minimum needed to run our business and improve this website.

Information you give us

When you complete our contact, quote or careers forms we collect your name, contact details and the information you provide in your message or application. We use this information only to respond to your enquiry, provide a quotation or process your application.

Website analytics

With your consent (via our cookie banner) we record anonymous usage events to help us improve the site. This includes:

  • Page views and interactions with the "View Our Brochure" button
  • QR code scans (via a tracked redirect to our brochure)
  • Referring URL, browser user agent and approximate technical metadata sent by your browser
  • Approximate location (city, region and country) derived from network routing by our hosting provider — we do not store your IP address and cannot identify your precise location or address

We do not use third-party trackers, advertising cookies, cross-site tracking, fingerprinting or session replay. Analytics data is aggregate and is not used to build a profile of you as an individual.

Server and security logs

Our hosting provider automatically records standard request information (including IP address and user agent) for security, abuse prevention and to keep the site running. These logs are retained for a short period and are not used for marketing.

Lawful basis

Under UK GDPR we rely on the following lawful bases:

  • Consent — for optional website analytics cookies. You can accept or reject these via the cookie banner and change your choice at any time by clearing your browser storage for this site.
  • Legitimate interests — for keeping the website secure and available, preventing abuse and understanding aggregate usage where no identifiable profile is built.
  • Contract / steps prior to a contract — for handling quote requests, enquiries and applications you submit to us.
  • Legal obligation — where we must retain records to meet accounting, employment or regulatory requirements (including SIA obligations).

Cookies and similar technologies

We use two categories of cookies / local storage:

  • Strictly necessary — required for the site to work (for example remembering your cookie preference itself). These are always on and do not require consent under PECR.
  • Analytics (optional) — only active if you press "Accept all" on the banner. These record the anonymous events described above.

To withdraw analytics consent, clear this site's storage in your browser settings; the banner will reappear on your next visit.

How long we keep your data

  • Anonymous analytics events — automatically deleted after 90 days.
  • Enquiry, quote and contact form messages — up to 24 months from your last contact, unless you become a customer.
  • Careers applications — up to 12 months, or longer with your consent so we can consider you for future roles.
  • Customer records, invoices and SIA-related documents — retained for the period required by UK law (typically 6 years for accounting records).
  • Server / security logs — retained by our hosting provider for a short operational period, then deleted.

Who we share your data with

We do not sell your personal information. We share it only with trusted providers who help us run our business, including:

  • Our website hosting and database provider
  • Our email and communications providers
  • Google Maps (for the map embedded on our Contact page)
  • Heyzine (which hosts our online brochure)
  • Regulators, law enforcement or professional advisors where we are legally required to do so

Embedded content from other websites

Pages on this site include embedded content (such as Google Maps and our Heyzine brochure). Embedded content behaves as if you had visited that site directly and those providers may set their own cookies and collect data in line with their own privacy policies.

Your rights

Under UK GDPR you have the right to:

  • Request a copy of the personal data we hold about you
  • Ask us to correct inaccurate data
  • Ask us to delete data we no longer need to keep
  • Object to or restrict certain uses of your data
  • Withdraw consent at any time (where consent is the basis for processing)

To exercise any of these rights, email info@cronosprotection.co.uk. If you are not satisfied with our response you have the right to complain to the UK Information Commissioner's Office at ico.org.uk.

Changes to this policy

We may update this policy from time to time. The "last updated" date at the top of the page will reflect the most recent change. Material changes will be highlighted on the website.