Crosure Privacy Policy
Last Updated: March 2026
Crosure Limited (“Crosure”, “we”, “our”, or “us”) is committed to protecting your privacy and safeguarding the personal data we process.
This Privacy Policy explains:
- what personal data we collect
- how and why we use it
- how we share and protect it
- the rights and choices available to you
This Privacy Policy applies to:
- visitors to the Crosure website
- individuals who contact us or request information about our services
- individuals whose data we process in connection with services provided to our customers
Crosure provides an AI-driven SaaS platform that enables insurers and telecommunications providers to deliver digital insurance products and services.
Where Crosure processes personal data on behalf of customers using our platform, those customers remain responsible for their own privacy disclosures and data protection obligations.
- WHO WE ARE
Crosure Limited
Nine Hills Road
Cambridge, Cambridgeshire
CB2 1GE
United Kingdom
Email: info@crosure.com
For the purposes of UK data protection law, Crosure Limited is the data controller for personal data collected through our website and corporate communications.
In some circumstances, Crosure acts as a data processor when processing personal data on behalf of insurers, telecommunications providers, or other partners using the Crosure platform.
- COLLECTION OF PERSONAL INFORMATION
Personal data means any information relating to an identified or identifiable individual.
We collect personal information in several ways.
2.1 Personal Information You Provide
You may provide personal information when you:
- request a demo of our platform
- contact us through our website
- subscribe to updates or communications
- communicate with us via email, phone, or other channels
- engage with Crosure as a partner, customer, or supplier
The personal information you provide may include:
- name
- email address
- company name
- job title
- telephone number
- location or country
- communication content
- any information voluntarily submitted through forms or correspondence
2.2 Information We Collect Automatically
When you visit our website, certain information may be collected automatically, including:
- IP address
- browser type and version
- device information
- operating system
- referring website
- pages viewed
- date and time of visits
- website usage statistics
This information helps us improve website performance, understand visitor behaviour, and enhance user experience.
2.3 Cookies and Tracking Technologies
We use cookies and similar technologies such as:
- cookies
- analytics tags
- web beacons
These technologies help us:
- operate our website
- understand how visitors interact with our content
- improve website functionality
- measure marketing performance
For more information, please see our Cookie Policy.
2.4 Information Received from Third Parties
We may receive personal information from third parties including:
- analytics providers
- CRM and marketing automation providers
- integration partners
- business partners and customers
- publicly available sources
Where personal information is provided to us by our customers in connection with services delivered through the Crosure platform, we process that information on behalf of those customers in accordance with contractual agreements.
- CATEGORIES OF PERSONAL DATA WE MAY PROCESS
Depending on how you interact with Crosure, we may process the following categories of personal data.
Contact Information
- name
- email address
- phone number
- job title
- organisation
Technical and Usage Data
- IP address
- device information
- browser type
- interaction with our website
Business Communications
- correspondence
- meeting information
- support inquiries
Marketing Data
- communication preferences
- engagement with marketing communications
We do not intentionally collect special category personal data (such as health data or biometric data) through our website.
- HOW WE USE PERSONAL INFORMATION
We may use personal information for the following purposes:
Providing services and responding to inquiries
To respond to demo requests, partnership inquiries, or customer support requests.
Business relationship management
To manage relationships with customers, partners, and suppliers.
Marketing and communications
To send updates about Crosure products, services, industry insights, or events where you have opted in to receive such communications.
Improving our website and services
To analyse usage patterns and improve the performance and usability of our website and services.
Security and fraud prevention
To maintain the security of our systems and prevent misuse of our services.
Legal and regulatory compliance
To comply with applicable laws, regulations, and legal obligations.
- DATA PROCESSING ACTIVITIES
The table below summarises the primary ways in which Crosure processes personal data, including the purpose of processing, categories of personal data involved, and the lawful basis under UK GDPR.
| Processing Activity | Personal Data Collected | Purpose of Processing | Lawful Basis |
| Website operation and security | IP address, device data, browser type, technical logs | To maintain website functionality, ensure security, detect misuse, and protect infrastructure | Legitimate interests |
| Website analytics | IP address, device information, usage data, page interactions | To analyse website traffic, understand user behaviour, and improve website performance | Consent (via cookie banner) |
| Contact inquiries | Name, email address, company name, phone number, message content | To respond to inquiries, demo requests, or support requests | Legitimate interests or steps prior to entering a contract |
| Business relationship management | Contact details, professional information, communications | To manage relationships with prospective and existing customers, partners, and suppliers | Legitimate interests |
| Marketing communications | Name, email address, organisation, engagement data | To send updates about Crosure services, events, insights, and company news | Consent |
| Customer and partner onboarding | Business contact details, organisational information | To establish commercial relationships and facilitate service delivery | Contractual necessity |
| Platform service delivery (when acting as a processor) | Personal data provided by Crosure customers through the platform | To provide SaaS services and platform functionality on behalf of Crosure customers | Contractual obligations with the customer |
| Compliance and legal obligations | Identification information, communications, transaction records | To comply with regulatory requirements, legal obligations, or enforcement requests | Legal obligation |
| Fraud prevention and security monitoring | Technical data, system logs, behavioural indicators | To protect our systems, prevent fraud, and maintain service integrity | Legitimate interests |
- SHARING OF PERSONAL INFORMATION
We do not sell personal data.
We may share personal information with trusted third parties where necessary for legitimate business purposes, including:
Service providers
- cloud hosting providers
- CRM systems
- marketing automation platforms
- analytics providers
- IT support providers
Business partners and customers
Where Crosure provides services through its platform on behalf of insurers or telecommunications partners.
Professional advisors
- legal advisors
- auditors
- consultants
Corporate transactions
In connection with a merger, acquisition, restructuring, or sale of assets.
Legal and regulatory authorities
Where required by law or necessary to protect our rights or comply with legal obligations.
All service providers are contractually required to protect personal data and process it only for authorised purposes.
- INTERNATIONAL DATA TRANSFERS
Crosure operates internationally and may transfer personal data outside the United Kingdom.
Where such transfers occur, we implement appropriate safeguards to ensure personal data remains protected, including:
- Standard Contractual Clauses approved by the UK government
- contractual safeguards with service providers
- transfers to jurisdictions recognised as providing adequate protection
- DATA SECURITY
Crosure uses appropriate technical and organisational measures designed to protect personal data from:
- unauthorised access
- loss
- misuse
- alteration or disclosure
These measures may include:
- encryption
- access controls
- network security monitoring
- secure hosting environments
- internal security policies and procedures
However, no method of transmission over the internet or electronic storage can be guaranteed to be completely secure.
- DATA RETENTION
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected.
Typical retention periods may include:
- inquiry and contact data: up to 24 months after last contact
- marketing data: until you unsubscribe or withdraw consent
- website analytics data: according to the retention settings of the analytics platform used
Data may be retained longer where required for legal, regulatory, or contractual reasons.
- YOUR DATA PROTECTION RIGHTS
Under UK GDPR, individuals have the following rights regarding their personal data:
Right of Access
You may request a copy of the personal data we hold about you.
Right to Rectification
You may request correction of inaccurate or incomplete information.
Right to Erasure
You may request deletion of your personal data in certain circumstances.
Right to Restrict Processing
You may request that we limit how we process your personal data.
Right to Data Portability
You may request transfer of your personal data to another organisation.
Right to Object
You may object to processing based on legitimate interests or direct marketing.
Right to Withdraw Consent
Where processing is based on consent, you may withdraw consent at any time.
To exercise any of these rights, please contact:
info@crosure.com
- MARKETING COMMUNICATIONS
If you subscribe to marketing communications from Crosure, we may send updates about:
- our platform and services
- industry insights
- events and announcements
You may unsubscribe from marketing communications at any time using the unsubscribe link in our emails or by contacting us.
- LINKS TO THIRD-PARTY WEBSITES
Our website may contain links to third-party websites or services.
We are not responsible for the privacy practices or content of these third-party sites and encourage you to review their privacy policies.
- CHILDREN’S POLICY
Our website and services are not intended for individuals under the age of 16.
We do not knowingly collect personal data from children.
If we become aware that personal data from a child has been collected without appropriate consent, we will delete that information promptly.
- INTERNATIONAL USERS
Crosure is headquartered in the United Kingdom but operates internationally.
If you access our website from outside the UK, your personal data may be transferred to and processed in the United Kingdom or other countries where our service providers operate.
- UPDATES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes in legal requirements, technology, or our services.
The updated version will be posted on this page with the revised date.
- CONTACT US
If you have any questions about this Privacy Policy or how your personal data is handled, please contact:
Crosure Limited
Nine Hills Road
Cambridge
CB2 1GE
United Kingdom
Email: info@crosure.com
- COMPLAINTS
If you believe your personal data has been processed in a way that does not comply with data protection law, you have the right to lodge a complaint with the UK data protection authority:
Information Commissioner’s Office (ICO)
https://ico.org.uk
