Last updated: 1 September 2026
1. Introduction
saffron-crag ("we", "our", "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website saffron-crag.com and use our travel card services.
By using our website and services, you consent to the data practices described in this policy. If you do not agree with the terms of this Privacy Policy, please do not access our website or use our services.
2. Information We Collect
Personal Information
We may collect personal information that you voluntarily provide to us when you:
- Complete an application form for our travel cards
- Create an account on our platform
- Subscribe to our newsletter
- Contact us with enquiries or requests
- Participate in surveys or promotions
This information may include:
- Full name and title
- Email address
- Postal address
- Date of birth
- Identity verification documents
- Financial information for card applications
Automatically Collected Information
When you visit our website, we automatically collect certain information about your device and browsing activity, including:
- IP address and browser type
- Operating system
- Pages visited and time spent on each page
- Referring website addresses
- Device identifiers
3. How We Use Your Information
We use the information we collect for various purposes, including:
- Processing and managing your travel card applications
- Providing customer support and responding to enquiries
- Sending administrative information about your account
- Improving our website and services
- Conducting analytics to understand user behaviour
- Complying with legal and regulatory requirements
- Preventing fraudulent transactions and monitoring for security threats
4. Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Contractual necessity: Processing necessary to perform our contract with you
- Legitimate interests: Processing necessary for our legitimate business interests
- Legal obligation: Processing necessary to comply with applicable laws
- Consent: Where you have given us explicit consent to process your data
5. Data Sharing and Disclosure
We may share your personal information with:
- Service providers who assist in our operations
- Payment processors and financial institutions
- Legal and regulatory authorities when required by law
- Professional advisers including lawyers and accountants
We do not sell, trade, or rent your personal information to third parties for marketing purposes.
6. Data Retention
We retain your personal information for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When your data is no longer needed, we will securely delete or anonymise it.
7. Data Security
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, secure server infrastructure, and access controls.
8. Your Rights
Under applicable data protection laws, you have the following rights:
- Right to access your personal data
- Right to rectification of inaccurate data
- Right to erasure (right to be forgotten)
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent
To exercise any of these rights, please contact us using the details provided below.
9. International Data Transfers
Your information may be transferred to and maintained on servers located outside of your country of residence. We ensure that appropriate safeguards are in place to protect your data when transferred internationally.
10. Children's Privacy
Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.
12. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at:
saffron-crag
47 Commerce Street
London, EC2A 3QN
United Kingdom
Email: [email protected]