PRIVACY POLICY

Revised: 23/12/2025This Privacy Policy explains how Crit Air Stickers Limited, trading as Crit’Air Pass (“we”, “us”, “our”), collects, uses, stores, and protects your personal data when you use our website (https://critairsticker.co.uk) and services. We are registered with the Information Commissioner’s Office (ICO) number: ZB929619. By using our website or services, you agree to the practices described in this Privacy Policy.

1. WHO WE ARE

Crit Air Stickers Limited, trading as Crit’Air Pass, is a UK-registered company providing an online application assistance service for Crit’Air Certificates.We act as an independent intermediary service provider, assisting customers with submitting applications to the relevant French issuing authority.We are not affiliated with the French government or Imprimerie Nationale.

2. INFORMATION WE COLLECT

We collect and process the following types of personal data:

2.1 Information you provide directly

When you place an order or contact us, we may collect:Full nameEmail addressPhone numberPostal addressVehicle registration detailsVehicle information (as shown on V5C or equivalent documents)Any supporting documents or images you choose to uploadOrder and transaction information

2.2 Payment information

All payments are processed securely by third-party payment providers.We do not store full payment card details on our systems.

2.3 Automatically collected information

When you visit our website, we may automatically collect:IP addressBrowser type and device informationOperating systemPages visited and time spent on siteReferring URLsCookies and analytics data

3. HOW WE USE YOUR INFORMATION

We process your personal data under the following lawful bases:Performance of a contractLegitimate business interestsLegal obligationsConsent (where applicable)We use your information to:Process and fulfil your Crit’Air Pass orderSubmit your application to the issuing authorityCommunicate with you regarding your orderProvide customer supportSend confirmations, updates, and resultsPrevent fraud and misuseComply with legal and regulatory obligations

4. DOCUMENT HANDLING & DATA MINIMISATION (IMPORTANT)

We take a data minimisation approach to ensure your personal information is handled securely and responsibly.Where you provide supporting documents (such as vehicle registration documents (V5C) or similar):These documents are used solely for the purpose of processing your applicationThey are accessed only by authorised personnelThey are not retained longer than necessary to complete processing and provide supportOnce your application has been submitted and no longer requires active processing:Supporting document images (including V5C uploads) are securely deleted or anonymised within a reasonable period, unless retention is required for legal, regulatory, or fraud prevention purposesWe do not store sensitive document images indefinitelyThis approach reduces risk, enhances security, and ensures compliance with UK GDPR principles of data minimisation and storage limitation.

5. HOW WE SHARE YOUR INFORMATION

We do not sell your personal data.We may share your data only where necessary with:

5.1 Issuing Authority

We share required application data with the official French issuing authority (Imprimerie Nationale) to process your application.

5.2 Service providers

We use trusted third-party providers for:Payment processingWebsite hosting (e.g. Squarespace)Email communication systemsAnalytics tools (e.g. Google Analytics)These providers are contractually required to protect your data.

5.3 Legal requirements

We may disclose data if required to:Comply with legal obligationsRespond to lawful requests from authoritiesPrevent fraud or illegal activityProtect our rights and users

6. COOKIES & ANALYTICS

We use cookies to:Enable core website functionalityAnalyse traffic and user behaviourImprove performance and user experienceYou can disable cookies in your browser settings, but some features may not work correctly.

7. GOOGLE ANALYTICS

We use Google Analytics to understand website usage and improve our services.Google may collect anonymised data such as:IP address (where anonymisation is enabled)Device and browser informationPages visitedYou can opt out here:https://tools.google.com/dlpage/gaoptout

8. DATA STORAGE & SECURITY

We use appropriate technical and organisational security measures, including:Secure servers and encrypted systems where applicableAccess controls and restricted data accessRegular system monitoring and safeguardsHowever, no system is completely secure, and we cannot guarantee absolute protection of data transmitted online.

9. DATA RETENTION

We retain personal data only for as long as necessary to:Complete your orderProvide customer supportComply with legal and accounting obligationsResolve disputes or prevent fraudAfter this period, data is securely deleted or anonymised.Where legally required (e.g. tax/accounting obligations), certain transaction records may be retained for up to 6–7 years.

10. YOUR RIGHTS

You have rights under UK GDPR, including:Access to your personal dataCorrection of inaccurate dataRequest deletion of your dataRestriction or objection to processingData portabilityWithdrawal of consent (where applicable)To exercise your rights, contact: 📧 support@critairsticker.co.uk

11. INTERNATIONAL DATA TRANSFERS

Your data may be transferred outside the UK/EEA where required to fulfil your application or use third-party services.Where this occurs, we ensure appropriate safeguards are in place.

12. THIRD-PARTY LINKS

Our website may contain links to external websites.We are not responsible for the privacy practices or content of third-party sites.

13. CHILDREN’S PRIVACY

Our services are not intended for individuals under 18. We do not knowingly collect data from children.

14. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time.Updates will be posted on this page with a revised date.

15. CONTACT US

If you have any questions about this Privacy Policy, contact:📧 support@critairsticker.co.uk