Last updated: 10 June 2025
wearecrank limited, trading as Crank, is the data controller for personal data collected through this website and our WhatsApp communications. We are registered in England and Wales (company number 9456050).
If you have any questions about how we handle your data, contact us via WhatsApp at the link in the footer, or in writing to wearecrank limited, England and Wales.
We collect personal data only through one channel: WhatsApp. When you message us via WhatsApp — either by clicking a link on this website or by contacting us directly — we may collect:
We do not use contact forms, newsletter sign-ups, or any other data capture mechanism on this website. We do not collect payment or billing information directly — any transactions are handled by third-party payment processors under their own privacy terms.
We rely on legitimate interests as our lawful basis under UK GDPR Article 6(1)(f) for processing the personal data you share with us via WhatsApp. Our legitimate interests are:
We have assessed that our legitimate interests are not overridden by your rights and freedoms, given that the processing is limited to data you have proactively shared with us and is used only for the purpose of responding to and managing your enquiry.
Where we enter into a contract with you, we will additionally rely on contract performance (Article 6(1)(b)) for processing necessary to deliver our services.
We use Umami Analytics, a privacy-focused, open-source analytics platform, to collect anonymised, aggregated data about how visitors use this website. Umami does not use cookies, does not track users across websites, and does not collect any personally identifiable information. The data it collects — page views, referrer, browser type, and device type — is fully anonymised. No data is shared with third-party advertising networks. No consent is required for this type of processing.
We do not use cookies on this website. We do not run Google Analytics, Meta Pixel, or any other client-side tracking or advertising technology. You will not see a cookie banner on this site because none are needed.
We use the personal data you share with us via WhatsApp to:
We do not use your data for automated decision-making or profiling. We do not send unsolicited marketing messages.
We do not sell your personal data. We may share it with:
We retain personal data for as long as is necessary for the purpose it was collected. For enquiries that do not result in a contract, we will typically retain conversation records for up to 2 years. For active clients, we retain data for the duration of the relationship and for 6 years thereafter, in line with UK statutory limitation periods. You can ask us to delete your data at any time (see section 8).
You have the right to:
Because we rely on legitimate interests rather than consent, there is no consent to withdraw — but you have a right to object at any time, and we will stop processing unless we can demonstrate compelling legitimate grounds. To exercise any of these rights, contact us via WhatsApp or in writing. We will respond within one calendar month.
If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. WhatsApp messages are end-to-end encrypted in transit. Access to any CRM records is restricted to authorised personnel only.
This website contains links to third-party websites including shop.wearecrank.com. We are not responsible for the privacy practices of those sites and encourage you to read their own privacy policies.
We may update this policy from time to time. The current version is always available at wearecrank.com/privacy-policy. Material changes will be flagged with an updated "Last updated" date.