This Privacy Policy explains how Crowdseek Ltd ("we", "us", "our", "Crowdseek") collects, uses, shares and protects your personal information when you use our website (crowdseek.com), pilot landing pages (try.crowdseek.com, sleep.crowdseek.com, pilot.crowdseek.com), web app (app.crowdseek.com), and related services (together, the "Service"). It applies to all users in the United Kingdom and EEA. Crowdseek's pilot programme is currently restricted to UK residents.
Controller: Crowdseek Ltd
Registered in England & Wales No. 09560574
Registered address: 23 Westfield Park, Redland, Bristol, BS6 6LT, United Kingdom
Privacy contact: privacy@crowdseek.com
General contact: support@crowdseek.com
Where we use advertising tools that involve a joint-controller relationship (for example Meta Pixel and Google Ads), the essence of those arrangements is summarised in Section 7 below.
We collect information in four ways: (a) information you provide when you create an account, (b) information you provide as part of your personalised plan, (c) information collected automatically when you use the Service, and (d) information from third-party services where you choose to use them.
Email address (required) — used to send your magic-link sign-in and the pilot email programme and other service communications. Lawful basis: contract (UK GDPR Art. 6(1)(b)).
First and last name (required) — used to personalise your plan and emails. Lawful basis: contract.
Gender (optional) — used in aggregate to improve our recommendations. Lawful basis: consent (UK GDPR Art. 6(1)(a)). You can leave this blank.
Phone number (optional) — used only if you ask us to reach you about your pilot participation. Lawful basis: consent. You can leave this blank.
Postcode (optional) — used at coarse area level only to understand the UK regional reach of the pilot. Lawful basis: consent. You can leave this blank.
"How did you hear about Crowdseek?" (optional) — used to measure which referral and marketing channels are working. Lawful basis: consent. You can leave this blank.
UK-residency attestation (required) — a single confirmation that you are a UK resident. Required to access the pilot. Lawful basis: contract / legitimate interest.
Marketing preference (optional opt-in) — separate toggle to receive product news, tips and offers from Crowdseek by email. Lawful basis: consent. You can withdraw at any time using the unsubscribe link in any marketing email, by replying "stop", or by emailing privacy@crowdseek.com.
To build and adapt your personalised plan, the Service asks you to share information about your wellbeing. This typically includes the goals you choose, the outcomes you want to achieve, the reasons that matter to you, your progress entries and reflections, and your interactions with daily tips and your plan.
This information can reveal data about your health and wellbeing, which is special-category personal data under UK GDPR Article 9. We ask for your explicit, separate consent before you provide any of it.
How we keep your wellbeing data inside Crowdseek. Your wellbeing data is stored only inside Crowdseek's own systems. We do not send this data to our email service provider, our analytics provider, or any other third-party processor in a form that identifies you. Where our emails appear personalised (for example, referencing the outcome you chose), the personalisation happens at send time by reference to an internal code — only your first name and that code are sent to our email service provider, and the full wellbeing text is added to the email at the point it is dispatched.
Lawful basis: explicit consent (UK GDPR Art. 9(2)(a)).
Usage and device data: pages and screens viewed, clicks and taps, session timing, referrer, approximate location (derived from IP at country/region level), device and browser type, operating system, and language. Log data: IP address, timestamps, error logs and diagnostic data. Cookies and similar technologies: see Section 8.
If you connect a third-party service or invite a supporter to your Crowd, we may receive basic identifiers needed to enable that connection.
The wellbeing information you share to personalise your plan (Section 2B) is special-category data under UK GDPR Article 9. We process it only with your explicit, granular consent, for the specific purpose of building and supporting your personalised plan, and with safeguards including restricted access, encryption in transit (TLS), and deletion on request.
If you withdraw your Article 9 consent, your wellbeing data is deleted from your account; we retain only the account identifiers needed to manage the account itself.
We do not sell your personal data. We share information only in the limited circumstances below.
We use vetted providers to host, maintain and operate the Service under written contracts that include UK GDPR Article 28 terms. Categories include cloud hosting and infrastructure, web app development and hosting (Rocketmakers Ltd), landing-page hosting and paid-media operations (Amplify Growth Ltd), customer relationship management and email service provision, and privacy-focused analytics and error monitoring tools. The identity of our current email service provider is maintained in our Processors Register.
Where we run advertising through Meta (Facebook / Instagram) and Google Ads, those services may set the Meta Pixel and Google Ads tags on our landing pages. These tags only fire if you have given consent via our cookie banner. Full details of Meta and Google's processing are available in their own privacy notices.
We may share aggregated or anonymised insights that cannot reasonably identify you.
We may disclose information if required by law, or to protect rights, safety and security.
If we are involved in a merger, acquisition, or sale of assets, data may be transferred as part of that transaction. We will take steps to protect your data and notify you where required.
Some of our service providers are based outside the UK or EEA. Where personal data is transferred outside the UK or EEA, we use appropriate safeguards including adequacy regulations where applicable, the Standard Contractual Clauses (SCCs), and the UK International Data Transfer Addendum. We do not transfer your Article 9 wellbeing data to providers located outside the UK or EEA.
We use cookies and similar technologies to keep the Service working (strictly necessary cookies, always on), to understand usage and improve the Service (analytics cookies, opt-in), to remember your preferences (preferences cookies, opt-in), and to measure and serve advertising (advertising cookies, opt-in).
We use Cookiebot by Usercentrics to operate our cookie banner on try.crowdseek.com, sleep.crowdseek.com, pilot.crowdseek.com and app.crowdseek.com. "Reject all" is presented with equal prominence to "Accept all". You can change your choice at any time via the "Cookie preferences" link in the footer of those pages.
Our brand site crowdseek.com sets only strictly necessary cookies and does not require a consent banner. If we add non-essential cookies to crowdseek.com in future, we will add a banner there.
Our programme and marketing emails contain small tracking pixels that record whether an email has been opened and whether you have clicked a link inside it. For the pilot email programme we use this to operate the Service. For marketing we use it to understand, in aggregate, whether a campaign is working. For a full list of the cookies we use and their purposes, see our Cookie Policy.
To exercise any of these rights, email privacy@crowdseek.com. If you are in the UK, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.
When you create an account you join the Crowdseek pilot email programme. These programme emails are part of the Service itself — they carry your plan, prompts and guidance, and (when you have been inactive) a short restart sequence to help you ease back in — so we send them on the basis of our contract with you (UK GDPR Art. 6(1)(b)), not on marketing consent. They are separate from marketing (promotions, offers and general product news), which we send only if you separately opt in. The programme is built around the following method:
Although the programme emails are part of the Service, every one includes a one-click unsubscribe button, so you can stop them at any time. Separately, you can unsubscribe from marketing (promotions, offers and product news) at any time using the link in any marketing email, by toggling the preference in your account, by replying "stop", or by emailing privacy@crowdseek.com — without leaving the pilot.
We use appropriate technical and organisational measures to protect personal data, including access controls and encryption in transit (TLS). We will notify you and the ICO of a personal data breach where the law requires it.
The Service is not intended for children under 18. The Crowdseek pilot is restricted to UK residents aged 18 or over. If you believe a child has provided personal data, contact privacy@crowdseek.com.
We may update this policy from time to time. We will update the "Effective" date and, where appropriate, notify you of significant changes. Material changes affecting consent will require fresh consent.
Privacy questions or requests: privacy@crowdseek.com
General contact: support@crowdseek.com
Postal: Crowdseek Ltd, 23 Westfield Park, Redland, Bristol, BS6 6LT, United Kingdom.