Skip to content
Ferrolo

Website privacy policy

How Ferrolo handles personal data when you visit ferrolo.com or contact us.

Last updated 29 September 2026

1. Who we are

Crown Student Consultancy (CSC) UK Ltd, trading as Ferrolo, is the controller of the personal data described in this policy. We are a company registered in England and Wales (company number 14324057), with our registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ. We are registered with the Information Commissioner's Office (ICO) under registration number ZC265399. You can contact us at hello@ferrolo.com.

2. What this policy covers

This policy covers the Ferrolo website at ferrolo.com, and the personal data we collect when you contact us about our company or our services.

It does not cover our products. Assay, Lesson Diary, Bezelia and Iris each have their own privacy policy, and that policy applies when you use the product.

3. What we collect

We collect:

  • information you give us, such as your name, email address, telephone number, company name and the contents of any message you send us through the website, by email or by phone;
  • information collected automatically when you visit, such as your IP address, browser and device type, the pages you view, and the time and date of your visit.

We do not ask for special category data (such as health or ethnicity data) through the website, and we do not collect it deliberately.

4. How and why we use it

We use personal data for the purposes below, and only where we have a lawful basis to do so:

  • to reply to your enquiry and take steps before entering into a contract with you or your business, because it is necessary to respond to you or to enter into a contract;
  • to run, secure and keep the website available, and to prevent abuse, because we have a legitimate interest in running a safe, working website;
  • to understand how the website is used and to improve it, because we have a legitimate interest in improving what we offer;
  • to send you occasional business-to-business updates about our services, where you are a business contact and have not opted out, because we have a legitimate interest in promoting our services. You can opt out at any time;
  • to meet our legal, accounting and tax obligations, because the law requires it.

We do not use personal data to make solely automated decisions that produce legal or similarly significant effects about you.

5. Cookies

The website sets no advertising or tracking cookies, and we do not use third-party advertising trackers.

Like most websites, our hosting provider may keep standard server logs (including IP addresses) to keep the site running and secure. If we add analytics or any other cookies in future, we will set them only where the law allows, ask for your consent first where consent is required, and update this policy.

6. Who we share it with

We share personal data only with:

  • service providers who help us run our business and the website, such as hosting, email and IT providers, under contracts that require them to protect the data;
  • professional advisers, where we need their help;
  • authorities, where the law requires or allows us to share it;
  • a buyer or successor, if our business or part of it is sold or reorganised.

We do not sell personal data.

7. Where it is kept

Personal data may be stored and processed in the United Kingdom, the European Economic Area, the United States and other countries where we or our providers operate. Where we transfer personal data outside the United Kingdom or the European Economic Area, we rely on adequacy regulations or on appropriate safeguards such as the UK International Data Transfer Addendum and the EU Standard Contractual Clauses.

8. How long we keep it

We keep enquiries and correspondence for as long as we need them to deal with your query, and for a reasonable period afterwards for our records. This is normally no longer than 24 months after our last contact, unless the law requires us to keep them for longer.

Aggregated or de-identified information that no longer identifies you may be kept indefinitely.

9. Your rights

Under UK data protection law, you have the right to be informed, to access a copy of your personal data, to have inaccurate data corrected, to have data erased, to restrict or object to processing, to data portability, and to withdraw consent where we rely on it. Some rights have limits, for example where we must keep records by law.

To exercise any of these rights, email hello@ferrolo.com. We will answer within one month.

If you are unhappy with how we have handled your data, please tell us first. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113. We are registered with the ICO under registration number ZC265399.

10. Security

We take reasonable technical and organisational measures to protect personal data, including encryption while it travels and access controls. No system is completely secure, and no method of sending information is completely safe.

11. Children

The website is intended for businesses and is not aimed at children. We do not knowingly collect personal data from children. If you believe a child has sent us personal data, please contact us and we will delete it.

12. Changes to this policy

We may update this policy at any time. The version published on the website when you use it applies, and the date at the top of the page shows when it last changed.

13. How to contact us

Write to us at hello@ferrolo.com, or at our registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ.

A question about your data you'd like us to answer?

Write to us and a person will reply, usually the same working day.