Privacy policy

This website is published by Crushed Ice Group Limited, a company registered in England and Wales under number 17217438, with its registered office at Unit 11, Olney Business Park, Osier Way, Olney, Buckinghamshire, MK46 5FP. It is the parent company of Crushed Ice, Cube Systems and Cater Cube. In this policy, “we”, “us” and “our” mean Crushed Ice Group Limited.

For personal data collected through this website we are the controller. That means we decide how and why the data is used, and we are responsible for it under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We are not required to appoint a data protection officer. Questions about this policy or your personal data go to hello@crushedicegroup.co.uk, by telephone on 01234 672 610, or by post to the address above.

Each group company runs its own business, sells its own products and services, and is the controller of the personal data it collects for them. Its own privacy policy applies to those, not this one.

When you send an enquiry about a group company or one of its products, we pass it to that company so it can reply. From then on it holds the enquiry as a controller as well. Enquiries about Cube Systems or a Cube Systems product (CubeERP, CubeCRM, CubeHR, CubeMSP, Kept, Trophy or Signed) go to the Cube Systems enquiries team at Cube Systems Limited, company number 17220899, which is registered with the Information Commissioner’s Office under number ZC216972.

When you visit this website

Pages, fonts, icons and images are served from our own servers. The website sets no cookies unless you allow analytics, and it carries no advertising or social media tags.

Like any web server, ours keeps a log of each request: your IP address, the date and time, the page requested, the page that linked to it, and the browser and operating system your device reports. We use these logs only to keep the site secure and working.

Your browser also keeps a short note of your visit in its session storage, under the name visit_journey: the page you arrived on and when, the site that sent you, any campaign tags or ad click IDs in that first link, the previous page, and how many pages you have viewed. It stays in that browser tab, is deleted when you close it, and only reaches us if you send the contact form.

If you allow analytics

When analytics is in use, a banner asks whether you allow it. If you choose “Accept”, Google Analytics 4 sets its _ga and _ga_<container-id> cookies and records which pages you view, how you arrived, the type of device, browser and screen you use, your approximate location (such as the country and city, worked out by Google from your IP address), and interactions such as scrolling, following a link to another website, clicking a phone number or email address, and sending the contact form. GA4 does not log or store IP addresses. We see the results as reports about visits in general, and we do not use them to identify anyone. Advertising features are switched off.

The Google Analytics script only loads after you allow analytics, so if you choose “Essential only” nothing is sent to Google. If you withdraw your consent through Cookie settings, Google Analytics stops and its _ga cookies are removed. The cookie policy has the full list.

When you get in touch

If you use the contact form we collect your name and email address, your company name and telephone number if you give them, who you would like to speak to, and your message.

With the form, your browser also sends details about your visit. They help us route your enquiry to the right company and respond to it, spot misuse of the form, and understand which pages lead people to get in touch. They are:

• your IP address;
• your browser and operating system, read from the user agent your browser reports, and the type of device;
• your language, time zone and local time, your screen and window size, whether your device has a touch screen, and whether cookies are enabled;
• the note of your visit described above: the page you arrived on and when, the site that sent you, campaign tags and ad click IDs, the previous page and the number of pages viewed; and
• if you allowed analytics, your Google Analytics client ID, which lets us match the enquiry to the analytics for that visit.

The enquiry is sent by email through Amazon Simple Email Service (Amazon SES) to our enquiries mailbox, or to the Cube Systems enquiries mailbox if it is about Cube Systems or one of its products. If you email or call us, we keep what you tell us and the details you contact us from.

We do not ask for special category data, such as health information, and we do not take payments through this website. The website is for businesses, and we do not knowingly collect information about children.

Data protection law requires a lawful basis for every use of personal data. These are ours.

Where we rely on legitimate interests, we have weighed them against your rights and you can ask us for that assessment. You can object at any time, as explained under your rights.

We do not make decisions about anyone based solely on automated processing that have legal or similarly significant effects.

We do not sell personal data, and we do not share it with anyone for their own marketing. We share it only with:

• The group company your enquiry is about, so it can reply to you, as described above.
• Service providers who process data for us under written contracts: Amazon Web Services EMEA SARL, which hosts this website in the UK and delivers our email; Google, for website analytics if you allow it; and our business email provider.
• Professional advisers, such as lawyers, accountants and insurers, who owe us a duty of confidentiality.
• Authorities, such as the police, HMRC or a regulator, where the law requires it. We check that a request is lawful before acting on it.
• A buyer or successor, if all or part of the group is sold or reorganised, on condition that they honour this policy.

This website is hosted in the UK on Amazon Web Services (AWS). Our servers, and the Amazon SES service that sends your enquiry to us, are in the UK.

Some providers, such as Google for website analytics and our business email provider, may process limited data outside the UK. Where that happens the transfer is protected by UK adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework for Google Analytics), the UK International Data Transfer Agreement or Addendum, or equivalent safeguards.

Google Analytics runs only if you allow it. It is provided by Google Ireland Limited, with Google LLC, and the data may be processed in the United States.

We keep personal data only as long as we need it for the purposes above, then delete it.

The site is served over HTTPS, form submissions are validated and rate limited on the server, and access to enquiries is restricted to the people who need it to reply. No system is perfectly secure, but we treat security as an engineering responsibility and review it as the site changes.

Under UK GDPR you have the right to:

• ask for a copy of the personal data we hold about you;
• have it corrected if it is wrong or incomplete;
• have it deleted, where we have no reason to keep it;
• restrict or object to how we use it;
• receive it in a portable format; and
• withdraw your consent to analytics at any time, through Cookie settings in the footer.

To use any of these rights, email hello@crushedicegroup.co.uk. There is no form and no particular wording to get right. We may ask for something that confirms who you are, and we will reply within one month, normally free of charge.

If you are unhappy with how we have handled your data, please tell us first at hello@crushedicegroup.co.uk so we can put it right.

You also have the right to complain to the Information Commissioner’s Office, the UK regulator for data protection, online at ico.org.uk/make-a-complaint, by telephone on 0303 123 1113, or by post to Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.

We will update this page, and the date at the top, when our practices change. If a change affects how we use data we already hold, we will tell the people affected where we can.