Privacy Policy
Draft: not yet reviewed or approved.
Draft for review — not yet approved. This page is a draft. It has not been legally approved and is not ready for publication. It describes the website as currently built, and certain statements (including those about hosting, cookies, analytics, email contact and data practices) must be verified by the company before it is published. Open decisions and checks are listed in the company’s separate checklist.
In short. As currently built, this information-only website has no checkout, customer accounts, payment processing or contact form. Some technical data is received by our hosting provider and by Google Fonts when you visit, and we handle any correspondence you choose to send us. Details are below.
Last updated: 8 November 2026
1. Who we are
This website, westoncrest.co.uk, is operated by WESTON CREST LTD, using Weston Crest as its brand name, a private limited company registered in England and Wales (company number 17563955). Our registered office is Office 2250, 85 Dunstall Hill, Wolverhampton, WV6 0SR, England.
We are the controller of the personal data described in this policy for the purposes of the UK GDPR and the Data Protection Act 2018. For any privacy question or request, write to us at the registered office, marked for the attention of “Data Protection”.
2. What we collect and why
Technical data from your visit
When you load a page, your browser automatically sends data such as your IP address, browser type and version, device and operating system, the page requested, the referring page, and the date and time. This data is received by the company that hosts the Website (see section 4), which needs it to deliver pages and keep its service secure. We do not use it for marketing, profiling or any purpose of our own. If our hosting service makes any such data available to us, we use it only to keep the Website secure and working. The legal basis is our legitimate interest in operating a secure website (Article 6(1)(f) UK GDPR).
Font request data
See section 5.
Correspondence you send us
If you write to us, we will receive what you choose to include, such as your name, contact details and the content of your message. We use it to read and respond to you and to keep a record of the exchange. Our legal basis is our legitimate interest in responding to enquiries and running our business or, where you ask about entering into an agreement with us, taking steps at your request before a contract. Please do not send sensitive information (such as health details) unless it is necessary.
What we do not do
As currently built, the Website has no accounts, forms, payments or newsletter sign-up, so it does not collect payment card details or other information in those ways. We do not make automated decisions about you, we do not carry out profiling, and we do not sell personal data.
3. Where the data comes from
Technical data comes from your browser. Correspondence data comes from you. We do not obtain personal data about Website visitors from other sources.
4. Hosting
The Website is a static website hosted by a third-party provider. The provider receives the technical data described above and handles it under its own privacy terms, for its own security and operational purposes. You can read the provider’s privacy information if you ask us who it is, by writing to the registered office.
5. Google Fonts
The Website displays its typefaces (Newsreader and Instrument Sans) using Google Fonts. When a page loads, your browser requests the font files from Google servers (fonts.googleapis.com and fonts.gstatic.com). Google therefore receives your IP address and standard request information, such as your browser type and the address of the page being viewed. We do not receive this data. Google handles it under its own privacy policy, available at policies.google.com/privacy.
6. Cookies and similar technologies
The Website’s own pages and scripts do not set cookies and do not use analytics, advertising or tracking tools. Our hosting provider and Google Fonts run their own services (sections 4 and 5), and we do not control the technical measures they use. If we add cookies or similar tools in future, we will update this policy and, where the law requires, ask for your consent before setting non-essential ones. You can also block or delete cookies in your browser settings.
7. Who we share data with
- Our hosting provider and Google, as described in sections 4 and 5, which receive data directly from your browser.
- Service providers who help us run the business, such as email and IT suppliers, who may handle correspondence on our behalf and only on our instructions.
- Professional advisers, insurers and auditors, where needed.
- Courts, regulators, law enforcement and other bodies, where the law requires or permits disclosure.
- A buyer or successor, if the business or its assets are sold or reorganised, subject to this policy.
8. Transfers outside the United Kingdom
Data received by our hosting provider and by Google (sections 4 and 5) may be processed outside the United Kingdom, depending on where those organisations operate. We have not yet verified where they process data or which legal safeguards, if any, they rely on for international transfers, and this section will be updated once we have. Each handles that data under its own privacy terms. If we ourselves transfer personal data outside the UK, we will make sure it is protected by an appropriate safeguard under UK data protection law.
9. How long we keep data
We keep correspondence only as long as needed to deal with your enquiry and any follow-up, and for a limited period afterwards for record-keeping, then delete it. We may keep it longer where the law requires or where we need it to establish, exercise or defend legal claims. Retention of technical data held by our hosting provider and by Google is governed by their own policies.
10. Security
As currently built, the Website has no visitor accounts and does not store customer data. We use reasonable organisational and technical measures to protect correspondence we hold. No method of transmission over the internet is completely secure.
11. Your rights
Under UK data protection law, you have the right, in the circumstances the law sets out, to:
- be told how your personal data is used (this policy);
- access a copy of your personal data;
- have inaccurate data corrected and incomplete data completed;
- have your data erased;
- restrict how we use your data;
- object to processing based on our legitimate interests; and
- receive certain data in a portable format, where that right applies.
To use any of these rights, write to us at the registered office. We may need to verify your identity. We will normally respond within one month, which the law allows us to extend by up to two further months for complex or numerous requests, and we will tell you if so. There is normally no charge.
12. Complaints
If you are unhappy with how we have handled your personal data, please tell us at the registered office so we can try to put it right. We will acknowledge your complaint promptly, within any time limit the law sets, and keep you informed of the outcome. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator, at ico.org.uk/make-a-complaint or by telephone on 0303 123 1113. You can complain to the ICO at any time, whether or not you have contacted us first.
13. Children
The Website is not directed at children, and we do not knowingly collect their personal data.
14. Links to other websites
Where the Website links to other sites, we do not control them and are not responsible for their content or privacy practices.
15. Changes to this policy
We will update this policy when our actual practices for collecting, using, sharing or otherwise processing personal data materially change, including when we introduce new website features such as contact forms, analytics, customer accounts or online sales. The date at the top shows when it was last updated.
See also our Website Terms and Conditions and our contact details.