Privacy Policy

Krytal (“we”, “us”, “our”) is a growth studio (performance marketing, web engineering, reporting, marketing automation, and design & creative) working with ambitious brands worldwide. Krytal is the data controller for the personal data described in this policy. For any privacy enquiry, email grow@krytal.com.

We collect only what we need to respond to you and run this website:

• Enquiry data:your name, email, company, the service you’re interested in, and your message, when you submit our contact form or email us.
• Usage & analytics data:pages viewed, time on site, referral source, approximate region, and device/browser type, collected in aggregate via Google Analytics 4 and Google Tag Manager.
• Technical data:your IP address, used transiently on our server to prevent spam and abuse. It is not written to a database or retained.

We do not collect payment card details, special-category data, or data from children. This website does not connect to or access your advertising or analytics accounts. That is a feature of our product, Pulse (see section 7).

• To respond to your enquiry and prepare proposals or deliver services.
• To operate, secure, and improve this website (aggregate analytics and abuse prevention).
• To send you updates or marketing only with your consent:you can opt out at any time.
• We do not sell, rent, or trade your personal data, and we do not use it to train machine-learning models.

We process personal data in accordance with applicable data protection laws, including the UK GDPR and the Data Protection Act 2018, the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), and, for visitors located in the EU, the EU GDPR. Our lawful bases for processing are:

• Legitimate interests:responding to enquiries and keeping the website secure.
• Consent:analytics cookies and any marketing communications.
• Legal obligation / contract:where we must retain data by law or to fulfil an agreement.

• Preferences:your light/dark theme choice is stored locally in your browser (localStorage). It is not a tracking cookie and never leaves your device.
• Analytics:Google Analytics 4, loaded via Google Tag Manager (_ga, _ga_*), measures aggregate usage. These are set only after you accept via our cookie banner; if you decline, no analytics cookies are placed. The website works fully either way.

We use no advertising or retargeting cookies on this website.

We share limited data with trusted processors who help us run the site:

• Vercel:website hosting and content delivery.
• Google Analytics 4 / Tag Manager:aggregate usage analytics.
• Our email provider:delivering messages you send through the contact form.

Each processes data under its own terms; we share only what is necessary.

Pulse is our marketing-reporting product, available at pulse.krytal.com. When you use Pulse and connect platforms such as Google or Meta, that data is governed by the Pulse Privacy Policy (see pulse.krytal.com/privacy), not this policy. This website (krytal.com) does not request, connect to, or store data from your advertising or analytics accounts.

• Enquiry & contact data:kept only for as long as necessary to handle your enquiry and for legitimate business and accounting records, after which it is deleted.
• Analytics:retained for up to 14 months, the maximum retention period available in Google Analytics 4.
• IP addresses:used only transiently for spam prevention and never stored.

Subject to applicable law, you have the right to access, correct, delete, restrict, or object to our processing of your data, to data portability, and to withdraw consent. To exercise any of these, email grow@krytal.com and we will respond within 30 days.

You also have the right to lodge a complaint with a data protection authority. In the UK, the Information Commissioner’s Office (ICO); in the EU, your local supervisory authority; and in the UAE, the UAE Data Office.

We operate internationally and use service providers that may process data outside your country. Where personal data is transferred internationally, we rely on appropriate safeguards (such as standard contractual clauses) where required by law.

Our website and services are not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.

We may update this policy from time to time. The “last updated” date above reflects the latest version, and material changes will be highlighted here.

Questions about this policy? Email grow@krytal.com or visit our contact page.