CROVER'S PRIVACY POLICY

Crover Ltd (also referred to as "we" or "us") takes your privacy seriously and is responsible for your personal data. Our use of personal data is subject to the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and, where applicable, the Privacy and Electronic Communications Regulations (PECR).

Please read this policy, which explains how we collect and use your personal data and the rights you have.

The effective date of this notice is 6 October 2026.

If you have any questions or concerns about your data and rights, please contact us at privacy@crover.tech.

WHAT DATA WE COLLECT

Personal Information

"Personal Information" refers to any information that identifies you  (also referred as “user”)  personally, including contact information, such as your name, e-mail address, company name, address, phone number, and other information about yourself or your business. Personal Information can also include information about you that is available on the internet, such as from Facebook, LinkedIn, Twitter and Google, or information that we acquire from service providers.

Personal Information includes Navigational Information where such information can directly or indirectly identify an individual. Navigational information refers to information about your computer and your visits to the Websites such as your IP address, geographical location, browser type, referral source, length of visit and pages viewed. 

We will never sell your Personal Information to any third party. 

How we collect data

Cookies, web beacon and similar technologies

These technologies are small files placed on your computer, tablet, mobile phone, or whatever device you are browsing with (collectively, "device"), that allow us to record information when you visit or interact with our websites, applications, and other tools.

We use these to compile information about the usage of our websites (“analytics”) and interaction with emails from us.

When you visit our websites, we or an authorized third party (see “Tools and service providers”) may place a cookie on your browser, which collects information, including Personal Data, about your online activities over time and across different sites. Cookies allow us to track overall usage, determine your browsing preferences and improve and customize your browsing experience.

We use web beacons on our websites and in email communications for similar purposes. For example, we may place web beacons in marketing emails that notify us when you click on a link in the email that directs you to one of our websites.

Form/s

We collect personal information through contact forms, newsletter subscriptions and other information you provide to us, including enquiries, sales and partnership discussions. We also keep records of consent, communication and marketing preferences, opt-ins and opt-outs.

If you subscribe to our mailing list or newsletter, we use your email address to send news, product updates and promotional information about Crover's products and services, in line with your communication preferences. We use Mailchimp to manage these emails and mailing-list preferences (see Tools).

CRM (customer relationship management)

We use CRM platforms to keep records of our interactions with users, organisations, prospects and leads. This helps us handle enquiries, manage sales and business relationships, and keep our communications consistent. We also keep consent, opt-out and do-not-contact records to manage communication preferences (see Tools).

Duration

We will retain your Personal Information for as long as necessary to provide our services, and as necessary to comply with our legal obligations, resolve disputes, and enforce our policies. Retention periods will be determined taking into account the type of information that is collected and the purpose for which it is collected. We routinely review the data in our possession to assess and the need to destroy outdated, unused information at the earliest reasonable time. Under applicable regulations, we will keep records containing Personal Information, communication, and other information as required by applicable laws and regulations.

Why we collect data

We retain and evaluate information on visits to our website and how visitors move around it for analytics, to understand website use, assess content and communication campaigns, and improve the user experience and our communications. We use information about pages and sections visited to understand interests and make our content more relevant. Cookies and similar technologies are subject to applicable consent requirements.

We may also use personal information to inform you about changes to our terms, privacy policy or other legal agreements; investigate and help prevent security issues and abuse; and meet legal requirements.

We may use your contact details to send information we think may interest you by post, email or other permitted means, including news, product updates and marketing communications about Crover's products and services.

We use these communications to promote our products and services and share relevant information, in line with your communication preferences.

Under the UK GDPR, the lawful bases we rely on for these marketing uses are:

Your consent. Where we rely on your consent, you can withdraw it at any time by contacting privacy@crover.tech or using the unsubscribe link in our marketing emails.

Our legitimate interests. Where legally permitted, we rely on our legitimate interest in promoting Crover's products and services and maintaining relevant business relationships, where this use is necessary and is not overridden by your interests, rights or freedoms. For marketing emails sent on this basis, we use business contact details of contacts at companies and other corporate bodies where consent is not required by the applicable email-marketing rules.

You can object to our use of your personal data for direct marketing at any time by contacting privacy@crover.tech.

We can explain the specific legal basis that applies to processing your data and whether providing it is a statutory or contractual requirement, or is necessary to enter into a contract (see Grounds for Data Collection).

Genuine Market Researches 

We may contact unsolicited parties for genuine marketing research purposes, to aid in the development and refinement of our product/s and services. This complies with the PECR directives and any personal data will be retained only for the duration of the research efforts. The analysis and results from such efforts will be almost exclusively used and kept internally and in the rare case research results (or part of them) would be shared with third parties, all of the data will be aggregated and anonymised.

During such research we will avoid by any means selling under the guise of research (“sugging”) and we will provide with the request for content and preference for further messages (including marketing ones) or the opportunity to opt-out of any additional communication.

Grounds for data collection

Processing of your personal information (see “Personal Information") is necessary for the performance of our contractual obligations towards you and providing you with our services, to protect our legitimate interests and for compliance with legal and financial regulatory obligations to which we are subject. More information can be found in the "Why we collect data" section of this Policy.

Lawful basis

Depending on the purpose, the lawful bases we rely on under the UK GDPR are your consent, performance of a contract or steps you request before entering into a contract, compliance with a legal obligation, or our legitimate interests. Our marketing purposes and lawful bases are explained above. Where we rely on consent, you can withdraw it at any time by contacting privacy@crover.tech.

Know your Data Protection Rights 

Under data protection law, you have rights including:

Your right of access - You have the right to ask us for copies of your personal information.

Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate and complete information you think is incomplete.

Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.

Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.

Your right to object to processing - You have the right to object to the processing of your personal information in certain circumstances. You can object at any time to our use of your personal data for direct marketing.

Your right to data portability - You have the right to ask us to transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You can withdraw consent at any time where we rely on your consent. This does not affect the lawfulness of processing before withdrawal.

To exercise your rights, contact privacy@crover.tech. You can also stop marketing emails using their unsubscribe link. We keep a minimal record to honour marketing opt-outs.

We normally respond to rights requests within one month and without charge, subject to the exceptions allowed by law.

You have the right to complain to the Information Commissioner's Office: https://ico.org.uk/make-a-complaint/.

If you are located in the EU and have questions or concerns regarding your personal data, you may contact our appointed GDPR representative:

EU Representative:

Euverify Ltd (Ireland)

Unit 3D North Point House

North Point Business Park

New Mallow Road

Cork

T23 AT2P

Ireland

Email: gdpr@euverify.com

To submit a Data Subject Access Request (DSAR), data deletion request, or any other GDPR-related inquiry, please use our secure portal at:

https://gdpr.euverify.com/verify/bf5a49c2-e83a-43ae-a2bc-69a7c0e38fc7

We understand the importance of protecting children’s privacy, especially in an online environment. The Site is not designed for or directed at children. Under no circumstances shall we allow use of our services by minors without prior consent or authorization by a parent or legal guardian. We do not knowingly collect Personal Information from minors. If a parent or guardian becomes aware that his or her child has provided us with Personal Information without their consent, he or she should contact us at privacy@crover.tech.

We may update this privacy notice from time to time. We will inform you of changes to how we use your personal data where required by law and obtain fresh consent where required.

If you have general questions about the Site, contact info@crover.tech. For questions about your personal data or to exercise your rights, contact privacy@crover.tech.

Crover Ltd. is a limited company registered in Scotland. Registered number: SC597529. Registered office: The National Robotarium, Boundary Road North, Third Gait, Edinburgh, EH14 4AS.

We use the service providers listed below to operate our website, manage enquiries and relationships, and provide communications, recruitment and support services. Their processing may take place outside the UK, including in the US. Regional hosting options do not limit all processing to that region.

Where required, we rely on standard contractual clauses with the UK Addendum under our providers' data-processing terms for transfers outside the UK. You can request details or a copy of the applicable safeguards at privacy@crover.tech.

Last modified 6 October 2026