PRIVACY POLICY

Effective Date: 4 July 2026

Last Updated: 4 July 2026


1. Introduction

Welcome to the website of Crespont Group Limited (“Crespont”, “we”, “our” or “us”).

At Crespont, protecting your privacy and maintaining the confidentiality of your personal information is fundamental to how we conduct our business. Whether you are making an initial enquiry, requesting our services, subscribing to our updates, or simply browsing our website, we are committed to processing your personal information responsibly, transparently and in accordance with applicable data protection legislation.

This Privacy Policy explains how we collect, use, disclose, store and protect your personal information when you visit https://crespont.com, communicate with us, or otherwise interact with our business.

This Privacy Policy has been prepared in accordance with:

  • The UK General Data Protection Regulation (UK GDPR)
  • The Data Protection Act 2018
  • The Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR)
  • Where applicable, the EU General Data Protection Regulation (EU GDPR)

By accessing or using our website, you acknowledge that you have read and understood this Privacy Policy.


2. About Crespont Group Limited

Crespont Group Limited is a United Kingdom company providing consultancy, brokerage, procurement and strategic business support services to private individuals, entrepreneurs, professionals and businesses both within the United Kingdom and internationally.

Our services may include, but are not limited to:

  • Automotive brokerage and vehicle sourcing
  • Procurement and supplier sourcing
  • Strategic consultancy
  • Business introductions
  • International market support
  • Concierge and client support services
  • Project coordination
  • Commercial advisory services
  • Other consultancy services offered from time to time

As our services often require a high degree of trust and discretion, protecting the information entrusted to us forms an essential part of our business.


3. Data Controller

For the purposes of applicable data protection legislation, the Data Controller responsible for your personal information is:

Crespont Group Limited

Berkeley Suite

35 Berkeley Square

Mayfair

London

W1J 5BF

United Kingdom

Email: info@crespont.com

Telephone: +44 (0)20 3432 1931

If you have any questions regarding this Privacy Policy or how we process your personal information, you may contact us using the details above.


4. Scope of this Privacy Policy

This Privacy Policy applies to personal information collected through:

  • our website
  • our contact forms
  • quotation request forms
  • newsletter subscriptions
  • telephone conversations
  • email correspondence
  • WhatsApp Business communications
  • social media enquiries
  • meetings
  • networking events
  • business relationships
  • any other interaction with Crespont Group Limited.

This Privacy Policy does not apply to third party websites that may be linked from our website. We encourage you to review the privacy policies of those websites before submitting any personal information.


5. Definitions

For the purposes of this Privacy Policy:

Personal Information means any information relating to an identified or identifiable individual.

Processing means any operation performed on personal information including collection, recording, organisation, storage, retrieval, consultation, use, disclosure, restriction, deletion or destruction.

Data Controller means the person or organisation responsible for determining the purposes and means of processing personal information.

Data Processor means any organisation processing personal information on behalf of the Data Controller.

Website refers to https://crespont.com together with any associated webpages operated by Crespont Group Limited.

Services means any consultancy, brokerage, procurement, sourcing, advisory or related services offered by Crespont Group Limited.


6. Information We Collect

Depending upon how you interact with us, we may collect and process the following categories of personal information.

Identity Information

Including:

  • full name
  • title
  • company name
  • job title

Contact Information

Including:

  • email address
  • telephone number
  • postal address
  • country of residence

Business Information

Including:

  • business name
  • organisation details
  • project requirements
  • procurement requirements
  • vehicle requirements
  • consultancy requirements
  • commercial interests

Communication Information

Including:

  • emails
  • telephone conversations
  • WhatsApp Business messages
  • contact form submissions
  • quotation requests
  • meeting notes
  • correspondence records

Technical Information

When you visit our website, we may automatically collect certain technical information including:

  • IP address
  • browser type
  • browser version
  • operating system
  • device type
  • language settings
  • referring website
  • pages visited
  • visit duration
  • date and time of access
  • approximate geographical location
  • website interaction data

This information is primarily collected through Google Analytics 4 and similar technologies.


Marketing Information

Where you choose to subscribe to our newsletter or marketing communications, we may collect:

  • your email address
  • your marketing preferences
  • subscription status
  • consent records
  • communication history

Information You Voluntarily Provide

You may voluntarily provide additional information when contacting us, requesting our services or corresponding with us.

Examples include:

  • project details
  • business objectives
  • budgets
  • preferred suppliers
  • vehicle specifications
  • travel requirements
  • documentation
  • attachments
  • supporting information

You should only provide information that is relevant to your enquiry.


7. Information We Do Not Intentionally Collect

Our website is intended for business users and adults.

We do not knowingly collect personal information from children under the age of 16.

We also do not intentionally collect special category personal information unless it is necessary for the provision of our services or required by law.

Where such information is inadvertently received and is not required for the purpose for which it was provided, we will securely delete it as soon as reasonably practicable.


8. How We Collect Your Information

We collect personal information through a variety of methods.

Information You Provide Directly

This includes information submitted when you:

  • complete our contact form
  • request a quotation
  • subscribe to our newsletter
  • email us
  • telephone us
  • contact us via WhatsApp Business
  • communicate with us through LinkedIn
  • communicate with us through Instagram
  • communicate with us through X
  • attend meetings
  • provide documentation
  • engage our services

Information Collected Automatically

When you visit our website, certain technical information is collected automatically through cookies and similar technologies.

This may include:

  • website usage statistics
  • browser information
  • pages viewed
  • session duration
  • device information
  • interactions with website content

Information Received From Third Parties

From time to time, we may receive information from:

  • professional referrals
  • business partners
  • suppliers
  • publicly available sources
  • networking events
  • companies with whom you have authorised us to communicate

We will only use such information where we have a lawful basis to do so.


9. Lawful Basis for Processing

We only process personal information where we have a lawful basis under applicable data protection legislation.

Depending on the circumstances, this may include:

Contract

Where processing is necessary to:

  • provide requested services
  • prepare quotations
  • fulfil contractual obligations
  • manage client relationships
  • deliver consultancy services

Legitimate Interests

We may process information where it is necessary for our legitimate business interests, provided these interests do not override your rights and freedoms.

Examples include:

  • responding to enquiries
  • improving our services
  • maintaining business relationships
  • preventing fraud
  • ensuring website security
  • analysing website performance
  • protecting our legal rights
  • managing our business operations

Consent

We rely upon consent where required by law, including:

  • newsletter subscriptions
  • marketing communications
  • non-essential cookies
  • certain analytics technologies

You may withdraw your consent at any time.

Withdrawal of consent will not affect the lawfulness of processing carried out before consent was withdrawn.


Legal Obligation

We may process personal information where necessary to comply with legal obligations, including obligations relating to:

  • taxation
  • accounting
  • anti-money laundering requirements
  • legal proceedings
  • regulatory compliance

Vital Interests

In exceptional circumstances, we may process personal information where necessary to protect the vital interests of an individual.

10. How We Use Your Personal Information

We use personal information only where it is necessary for legitimate business purposes, to fulfil contractual obligations, to comply with legal requirements, or where you have provided your consent.

Depending upon your interaction with Crespont Group Limited, we may use your personal information for one or more of the following purposes:

  • responding to enquiries submitted through our website
  • preparing quotations and proposals
  • providing consultancy, brokerage and advisory services
  • sourcing products, vehicles, suppliers or service providers
  • facilitating introductions to trusted third parties where requested
  • managing existing client relationships
  • arranging meetings and consultations
  • communicating regarding projects or ongoing work
  • issuing quotations, invoices and other contractual documentation
  • maintaining accurate business records
  • complying with legal and regulatory obligations
  • improving our website and services
  • analysing website traffic and visitor behaviour
  • detecting fraud or misuse of our website
  • protecting the security of our systems
  • administering newsletter subscriptions
  • sending marketing communications where you have provided your consent
  • establishing, exercising or defending legal claims where necessary

We will only process your personal information for the purposes for which it was originally collected unless we reasonably determine that another compatible purpose applies.


11. Contact Forms

Our website allows visitors to contact us using an online contact form.

When submitting a contact form, you may be asked to provide:

  • your name
  • your email address
  • your telephone number
  • your company name
  • details of your enquiry
  • any additional information you choose to include

We use this information solely to:

  • respond to your enquiry
  • provide requested information
  • assess your requirements
  • determine whether our services are suitable
  • maintain a record of correspondence

Submitting a contact form does not automatically create a contractual relationship between you and Crespont Group Limited.


12. Quotation Requests

Where you request a quotation, consultation or proposal, we may collect additional information necessary to understand your requirements.

Depending upon the nature of your enquiry, this may include:

  • project specifications
  • procurement requirements
  • preferred timescales
  • estimated budgets
  • business objectives
  • preferred suppliers
  • vehicle preferences
  • destination information
  • documentation supporting your request

This information is used exclusively for assessing your enquiry, preparing an appropriate proposal and communicating with you regarding your requirements.


13. Newsletter Subscriptions

Visitors may choose to subscribe to our newsletter and marketing communications.

We will only send marketing emails where:

  • you have actively subscribed;
  • you have provided your consent; or
  • we are otherwise permitted to do so under applicable legislation.

Marketing communications may include:

  • company news
  • service updates
  • market insights
  • industry developments
  • articles
  • events
  • promotional announcements
  • other information which we believe may be relevant to your interests.

You may withdraw your consent at any time.

Every marketing email will contain an unsubscribe facility allowing you to opt out immediately.

Alternatively, you may contact us directly and request removal from our marketing list.

We will honour unsubscribe requests without unnecessary delay.


14. Telephone Communications

If you contact us by telephone, we may process information discussed during that conversation in order to:

  • respond to your enquiry
  • provide requested services
  • prepare quotations
  • maintain accurate business records
  • follow up on agreed actions

Telephone calls are not routinely recorded.

Should this change in the future, you will be informed where legally required.


15. Email Communications

When you contact us by email, we process the information contained within your correspondence in order to:

  • respond to enquiries
  • manage projects
  • provide requested services
  • prepare quotations
  • maintain business records
  • comply with legal obligations

Email communications are hosted using Microsoft 365 and Outlook services.

Whilst we implement appropriate security measures, email communications should not be regarded as completely secure.

We recommend that sensitive personal information should not be transmitted by email unless appropriate security measures have been agreed.


16. WhatsApp Business Communications

Crespont Group Limited provides WhatsApp Business as an additional communication channel for client convenience.

Where you choose to contact us using WhatsApp Business, we may process:

  • your telephone number
  • your profile name
  • messages you send
  • images
  • documents
  • voice notes
  • other information voluntarily shared during the conversation

WhatsApp is operated by Meta Platforms and is subject to its own privacy policies and terms of service.

We encourage users to review WhatsApp’s own Privacy Policy before communicating sensitive information through the platform.

We use WhatsApp Business primarily for:

  • responding to enquiries
  • arranging appointments
  • sharing updates
  • exchanging documents
  • facilitating client communication

You are under no obligation to communicate with us through WhatsApp and may instead contact us by telephone or email.


17. Social Media Communications

Crespont Group Limited maintains a presence on selected social media platforms, including:

  • LinkedIn
  • Instagram
  • X (formerly Twitter)

If you contact us through these platforms, we may process personal information contained within your messages in order to respond to your enquiry.

Please note that these platforms operate independently of Crespont Group Limited and are governed by their own privacy policies.

We encourage users to review the privacy policies of each platform before interacting with them.


18. Payments and Financial Information

Payments for our services are generally made by:

  • bank transfer
  • invoice

We do not process payment card information directly through our website.

Invoices and associated financial records may contain personal information necessary for accounting, taxation and legal compliance.

Such information is retained only for as long as necessary to satisfy legal, regulatory and contractual obligations.


19. Cookies

Our website uses cookies and similar technologies to improve functionality, enhance user experience and analyse website performance.

Cookies are small text files placed on your device when visiting a website.

Some cookies are essential for the operation of the website and cannot be disabled through our cookie preference centre.

Other cookies are optional and will only be placed after you have provided your consent.

We categorise cookies as follows:

Strictly Necessary Cookies

These cookies enable core website functionality including:

  • page navigation
  • website security
  • session management
  • cookie preference storage

These cookies cannot be disabled as the website would not function correctly without them.


Analytics Cookies

Analytics cookies help us understand:

  • how visitors use our website
  • which pages are visited most frequently
  • how visitors navigate between pages
  • where website improvements may be made

Analytics information is aggregated wherever possible and is not intended to identify individual visitors.


Functionality Cookies

These cookies remember choices made by visitors, such as:

  • language preferences
  • cookie preferences
  • accessibility settings

They improve the overall browsing experience.


Marketing Cookies

Should marketing technologies be introduced in the future, marketing cookies may be used to measure campaign effectiveness and improve the relevance of communications.

These cookies will only be placed with your prior consent.


20. Google Analytics 4

Crespont Group Limited uses Google Analytics 4 (“GA4”) to better understand how visitors interact with our website.

Google Analytics may collect information including:

  • pages viewed
  • session duration
  • browser type
  • operating system
  • approximate location
  • referral source
  • interactions with website content
  • device information

Google Analytics uses cookies and similar technologies to generate anonymous statistical reports regarding website usage.

Where available, IP anonymisation and privacy-enhancing settings are enabled to minimise the amount of personal information processed.

Analytics information is used solely for legitimate business purposes, including:

  • improving website performance
  • understanding visitor behaviour
  • enhancing user experience
  • measuring website effectiveness
  • identifying technical issues

You may prevent Google Analytics from collecting information by declining analytics cookies through our cookie consent banner or by adjusting your browser settings.

21. Google Maps

Our website may incorporate Google Maps to assist visitors in locating our business premises or other relevant locations.

Google Maps is provided by Google and may collect information relating to your interaction with the embedded map, including your IP address, browser information and location data where you have permitted your device to share this information.

The use of Google Maps is subject to Google’s own Privacy Policy and Terms of Service.

By interacting with an embedded map, your information may be processed by Google in accordance with its own privacy practices.

If you do not wish Google to collect this information, you should avoid interacting with embedded maps or adjust your browser and device privacy settings accordingly.


22. Third Party Service Providers

In order to operate our business efficiently, we may engage carefully selected third party service providers to perform certain functions on our behalf.

These providers may process personal information only where necessary to provide their services to Crespont Group Limited.

Examples include:

  • Microsoft 365
  • Outlook
  • Google Analytics
  • Google Maps
  • website hosting providers
  • domain name providers
  • website developers
  • IT support providers
  • professional advisers
  • accountants
  • legal advisers
  • cloud storage providers
  • email marketing platforms

Where third parties process personal information on our behalf, they do so under contractual obligations requiring them to process information securely, confidentially and only in accordance with our instructions and applicable data protection legislation.

We do not permit third parties to use your personal information for their own marketing purposes.

We do not sell, rent, trade or otherwise commercially exploit your personal information.


23. International Data Transfers

Crespont Group Limited operates internationally and may receive enquiries or provide services to individuals and organisations located outside the United Kingdom.

As a result, personal information may occasionally be transferred to countries outside the United Kingdom or European Economic Area.

Where international transfers occur, we will ensure that appropriate safeguards are implemented to protect your personal information.

Such safeguards may include:

  • countries recognised as providing an adequate level of data protection
  • Standard Contractual Clauses approved by the relevant authorities
  • contractual obligations requiring appropriate security measures
  • other lawful transfer mechanisms recognised under applicable legislation

We take reasonable steps to ensure that any organisation receiving personal information maintains appropriate standards of confidentiality and security.


24. Data Security

Protecting the confidentiality, integrity and availability of personal information is fundamental to our business.

We maintain appropriate technical and organisational measures designed to safeguard personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or unauthorised access.

These measures include, where appropriate:

  • SSL encryption across our website
  • secure website hosting
  • password protected systems
  • Microsoft 365 business services
  • restricted access to information
  • secure authentication procedures
  • firewall and endpoint protection
  • software updates and security monitoring
  • encrypted communications where appropriate
  • secure disposal of information no longer required

Although we take appropriate steps to protect personal information, no method of electronic transmission or internet-based storage can be guaranteed to be completely secure.

Accordingly, whilst we strive to protect your information, we cannot guarantee its absolute security.


25. Data Retention

We retain personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, accounting and contractual requirements.

Unless a longer retention period is required by law, we generally retain information as follows:

Information Type

Typical Retention Period

General enquiries

Up to 24 months

Contact form submissions

Up to 24 months

Quotation requests

Up to 24 months unless they become clients

Client records

Up to 7 years following completion of services

Accounting and financial records

Up to 7 years

Newsletter subscriptions

Until consent is withdrawn

Marketing consent records

Whilst marketing continues and for a reasonable period thereafter

Google Analytics data

In accordance with our configured retention settings (currently up to 14 months)

Legal documentation

As required by applicable law

Following expiry of the applicable retention period, personal information will be securely deleted, anonymised or otherwise disposed of in accordance with our internal procedures.


26. Your Rights

Depending upon your location and applicable law, you may have a number of rights concerning your personal information.

These rights may include:

Right of Access

You have the right to request confirmation of whether we process your personal information and, where applicable, obtain a copy of that information.


Right to Rectification

You may request that inaccurate or incomplete personal information be corrected without undue delay.


Right to Erasure

In certain circumstances, you may request that we delete your personal information.

This right is not absolute and may be limited where we have legal obligations requiring continued retention.


Right to Restrict Processing

You may request that we temporarily restrict processing of your personal information in certain circumstances.


Right to Object

Where we rely upon legitimate interests as our lawful basis, you have the right to object to such processing.

You also have an absolute right to object to direct marketing.


Right to Data Portability

Where applicable, you may request a copy of certain personal information in a structured, commonly used and machine-readable format.


Right to Withdraw Consent

Where processing is based upon consent, you may withdraw that consent at any time.

Withdrawal of consent will not affect the lawfulness of processing undertaken before consent was withdrawn.


Exercising Your Rights

If you wish to exercise any of your rights, please contact us using the details contained within this Privacy Policy.

We may request reasonable information to verify your identity before responding to your request.

We aim to respond to all legitimate requests within one month, although this period may be extended where permitted by law.


27. Automated Decision Making

Crespont Group Limited does not make decisions about individuals solely by automated means that produce legal or similarly significant effects.

We do not use automated profiling to determine eligibility for our services or make decisions affecting your legal rights.

Should this position change in the future, this Privacy Policy will be updated accordingly.


28. Children’s Privacy

Our website, services and communications are intended for adults, businesses and professional users.

We do not knowingly collect personal information from children under the age of 16.

If we become aware that personal information relating to a child has been submitted without appropriate authority, we will take reasonable steps to delete such information as soon as practicable.

Parents or guardians who believe that a child has provided personal information should contact us immediately.


29. Links to Other Websites

Our website may contain links to external websites operated by third parties.

These websites are not controlled by Crespont Group Limited.

We are not responsible for the privacy practices, content or security of third party websites.

We encourage visitors to review the privacy policies of any external websites before providing personal information.


30. Changes to this Privacy Policy

We may amend this Privacy Policy from time to time to reflect changes in legislation, regulatory guidance, business operations, technology or our services.

The most current version will always be published on our website.

Where changes are significant, we may take additional steps to notify users where appropriate.

Your continued use of our website following publication of an updated Privacy Policy constitutes acknowledgement of those changes.


31. Complaints

If you have any questions or concerns regarding how we process your personal information, we encourage you to contact us in the first instance so that we may seek to resolve the matter promptly and fairly.

If you remain dissatisfied, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the United Kingdom’s independent authority responsible for upholding information rights.

Information about making a complaint can be found on the ICO’s official website.


32. Contact Us

If you have any questions regarding this Privacy Policy or wish to exercise any of your rights, please contact:

Data Controller
Crespont Group Limited
Berkeley Suite
35 Berkeley Square
Mayfair
London
W1J 5BF
United Kingdom

Email: info@crespont.com

Telephone: +44 (0)20 3432 1931

Website: https://crespont.com


33. Governing Law

This Privacy Policy shall be governed by and construed in accordance with the laws of England and Wales.

Any dispute arising in connection with this Privacy Policy or the processing of personal information shall be subject to the exclusive jurisdiction of the courts of England and Wales, unless applicable law provides otherwise.