Privacy Policy
Last updated: July 22, 2025
1. Introduction
Thunder Crest ("we," "our," or "us") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website thunder-crest.com or use our tax optimization services.
We are registered in England and Wales and comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Information We Collect
2.1 Personal Information
We may collect the following personal information:
- Name and contact details (email, phone, address)
- Financial information relevant to tax planning
- Professional details and business information
- Communication preferences
- Website usage data and analytics
2.2 Automatically Collected Information
When you visit our website, we automatically collect:
- IP address and location data
- Browser type and version
- Pages visited and time spent
- Referring website information
- Device information
3. How We Use Your Information
We use your personal information for the following purposes:
- Providing tax optimization and advisory services
- Communicating about our services and updates
- Processing newsletter subscriptions
- Responding to inquiries and support requests
- Improving our website and services
- Complying with legal and regulatory requirements
- Preventing fraud and ensuring security
4. Legal Basis for Processing
Under UK GDPR, we process your personal data based on:
- Consent: For newsletter subscriptions and marketing communications
- Contract: To provide our tax optimization services
- Legitimate Interest: For website analytics and service improvement
- Legal Obligation: To comply with tax and financial regulations
5. Information Sharing and Disclosure
We do not sell, trade, or rent your personal information. We may share information in the following circumstances:
- With trusted service providers who assist in our operations
- When required by law or legal process
- To protect our rights, property, or safety
- With your explicit consent
- In connection with a business transfer or merger
6. Data Security
We implement appropriate technical and organizational measures to protect your personal information:
- Encryption of data in transit and at rest
- Regular security assessments and updates
- Access controls and staff training
- Secure data storage and backup systems
- Incident response procedures
7. Data Retention
We retain your personal information only as long as necessary for the purposes outlined in this policy:
- Client records: 7 years after service completion (regulatory requirement)
- Marketing data: Until you unsubscribe or withdraw consent
- Website analytics: 26 months maximum
- Communication records: 3 years for business purposes
8. Your Rights
Under UK data protection law, you have the following rights:
- Access: Request copies of your personal data
- Rectification: Correct inaccurate personal data
- Erasure: Request deletion of your personal data
- Restriction: Limit how we use your data
- Portability: Receive your data in a structured format
- Objection: Object to processing based on legitimate interests
- Withdraw Consent: Withdraw consent at any time
To exercise these rights, contact us at [email protected]
9. Cookies and Tracking Technologies
Our website uses cookies and similar technologies. Please see our Cookie Policy for detailed information about:
- Types of cookies we use
- How to manage cookie preferences
- Third-party cookies and analytics
10. International Transfers
Your personal data may be transferred to and processed in countries outside the UK. When this occurs, we ensure adequate protection through:
- European Commission adequacy decisions
- Standard contractual clauses
- Approved certification schemes
- Your explicit consent where required
11. Children's Privacy
Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete such information.
12. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of any material changes by:
- Posting the updated policy on our website
- Sending email notifications to subscribers
- Displaying prominent notices on our website
Your continued use of our services after changes constitute acceptance of the updated policy.
13. Contact Information
For questions about this Privacy Policy or to exercise your rights, contact us:
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your data appropriately.