Privacy Policy
Evaltree Insights by Crowbar (Crowbar Ltd) • Last Updated: 11/12/2025
This Privacy Policy explains how Crowbar Ltd (“Crowbar”, “we”, “us”, “our”) collects, uses, stores, and protects your personal information when you access or purchase from Evaltree Insights by Crowbar.
1. Operator Details
Crowbar Ltd (United Kingdom)
Registered Address:
Contact: support@crowbarltd.com
Crowbar Ltd acts as the Data Controller for personal data processed through this website.
2. Information We Collect
A. Purchase & Contact Information
- Email address
- Order details
- Purchase access details
B. Payment Information
Payments are processed securely by Stripe.
We do not store, process, or have access to your full card details.
C. Technical & Usage Data
Collected automatically when you use the website:
- IP address (may be anonymized)
- Device and browser information
- Pages viewed and interactions (if analytics enabled)
D. Communications Data
Information you provide when contacting support.
We do not intentionally collect sensitive personal data (e.g., health, religion, biometric data).
3. Legal Basis for Processing (GDPR Compliance)
We process personal data under the following lawful bases:
- Contractual Necessity: delivering purchased digital products.
- Legitimate Interests: fraud prevention, security, service improvement.
- Consent: analytics cookies, marketing (if ever introduced).
- Legal Obligation: tax, accounting, regulatory compliance.
Where consent is required, you may withdraw it at any time.
4. How We Use Your Information
We may use your personal data to:
- Deliver digital briefs and enable download access
- Provide customer support
- Process payments securely
- Prevent fraud and maintain platform security
- Improve site performance and analytics (if consented)
- Comply with legal or regulatory obligations
We do not sell your personal information.
5. Payments & Stripe
Payments are processed by Stripe, a PCI-compliant provider.
Stripe may collect and process:
- payment tokens
- transaction metadata
- fraud-prevention data
Processing is subject to Stripe’s Privacy Policy , and Stripe may act as an independent controller for some processing.
6. Cookies & Tracking
We may use cookies for:
- essential functionality
- preference saving
- security
- analytics (only if you provide clear consent)
Analytics cookies (e.g., Google Analytics/Vercel Analytics) will not activate without your opt-in consent, as required by GDPR/ePrivacy laws.
See our Cookie Policy for more details.
7. Data Retention
We retain data only for as long as necessary for:
- service delivery
- Customer support
- Legal and regulatory obligations
- Fraud prevention
- Business continuity
When no longer required, data is deleted or anonymized.
8. Data Sharing
We may share data with:
- Stripe (payment processing)
- Hosting providers (e.g., Vercel)
- Analytics providers (if analytics enabled and consented)
- Legal authorities only when legally required
All third-party providers comply with applicable data-protection regulations.
9. International Data Transfers
All third-party providers comply with applicable data-protection regulations.
When required, we rely on:
- SCCs (Standard Contractual Clauses)
- UK Addendum
- Adequacy decisions
- Third-party compliance frameworks
We take steps to ensure your data remains protected.
10. Data Security
We use appropriate technical and organizational measures including:
- Encryption
- Secure hosting environments
- restricted access controls
- monitoring and fraud-prevention tools
Despite safeguards, no internet transmission is completely secure.
11. Your Rights
Depending on your region (GDPR, UK GDPR, DPDP), you may have the right to:
- Access your personal data
- Correct incorrect or incomplete data
- Request deletion (“right to be forgotten”)
- Withdraw consent
- Restrict processing
- Object to processing (where applicable)
- Request data portability
- Lodge a complaint with a regulator
For EU/UK Users:
You may file complaints with your local Data Protection Authority or the UK ICO.
For India (DPDP Act) Users:
You may file complaints with the Data Protection Board of India
To exercise your rights, Contact: support@crowbarltd.com
12. Children’s Privacy
Evaltree Insights is not intended for users under the digital consent age applicable in their jurisdiction (13–16 depending on region).
We do not knowingly collect data from children.
13. Automated Decision-Making
We do not use automated decision-making that produces legal or significant effects on users.
14. Changes to This Policy
We may update this Privacy Policy from time to time.
The “Last Updated” date reflects the most recent version.
Material changes will be communicated where appropriate.
15. Contact
For questions, rights requests, or privacy concerns:
📧 support@crowbarltd.com
📍 Crowbar Ventures Limited
71–75 Shelton Street
Covent Garden
London, WC2H 9JQ
United Kingdom