Effective Date: 12 March 2026
 

Cross & Co (“we”, “our”, “us”) respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use and protect your information when you visit our website.
 

This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
 

1. Who We Are
 

Cross & Co is a business advisory and consultancy service based in the United Kingdom.

If you have any questions about this policy or how your data is handled, you can contact us at:

Email: info@crossand.co.uk
Website: https://www.crossand.co.uk
 

2. Information We Collect
 

We may collect the following types of personal information:
 

Information You Provide
 

When you contact us through the website or email, we may collect:

• Name

• Email address

• Phone number

• Company name

• Any information you choose to include in your message
   

Automatically Collected Information
 

When you visit our website, certain information may be collected automatically, including:

• IP address

• Browser type

• Device type

• Pages visited

• Time and date of visits
   

This information helps us improve the website and understand how visitors use it.
 

3. How We Use Your Information
 

We use your information to:

• Respond to enquiries or requests

• Provide information about our services

• Improve the functionality and performance of the website

• Maintain website security
   

We will not sell, rent or trade your personal data to third parties.
 

4. Legal Basis for Processing
 

Under UK GDPR, we process personal data based on the following lawful bases:

• Legitimate interests – to respond to enquiries and operate our business

• Consent – where you choose to contact us or submit information via forms

• Legal obligations – where required by law
   

5. How We Store and Protect Your Data
 

We take appropriate technical and organisational measures to protect your data from unauthorised access, loss or misuse.
 

Your data may be stored using secure third-party platforms such as:

• Website hosting providers

• Email providers

• Analytics tools
   

These providers process data in accordance with applicable data protection laws.
 

6. Cookies
 

Our website may use cookies and similar technologies to improve user experience and analyse website traffic.

Cookies are small files stored on your device that help us understand how visitors use the site.
 

You can control or disable cookies through your browser settings.
 

7. How Long We Keep Your Data
 

We retain personal data only for as long as necessary to:

• Respond to enquiries

• Provide services

• Comply with legal obligations
   

If no ongoing relationship exists, enquiry data is typically deleted within a reasonable period.
 

8. Your Data Protection Rights
 

Under UK data protection law, you have the right to:

• Access your personal data

• Request correction of inaccurate data

• Request deletion of your data

• Restrict or object to processing

• Request transfer of your data (data portability)
   

To exercise any of these rights, please contact us using the details above.
 

9. Third-Party Links
 

Our website may contain links to other websites. We are not responsible for the privacy practices of external sites.
 

10. Changes to This Privacy Policy
 

We may update this policy from time to time. Any updates will be posted on this page.
 

If you have any questions about this privacy policy or how your data is handled, please contact us.