Privacy Notice

1. Who we are

This site, Cryer Liveries (cryerliveries.com), is operated by Nathan Cryer, a sole trader based in the United Kingdom ("Cryer Liveries", "we", "us", "I"). For the personal data described in this notice, Nathan Cryer is the data controller.

Contact: nate@cryerliveries.com

2. Personal data we collect

• Contact & brief data — name, email address, Discord handle, iRacing customer ID, brief content, reference images you supply.
• Payment data — handled by Stripe. We receive transaction metadata (project number, amount, status, country, last 4 of card) but not your full card details.
• Communications — emails and Discord messages you send us.
• Usage data — basic server logs (IP address, user agent, timestamps) generated when you visit the site.

3. Why we use it & legal basis

• To deliver your commission (contract performance) — managing briefs, sending receipts, delivering files.
• To take payment (contract performance) — card processing via Stripe.
• To run and secure the site (legitimate interests) — server logs, fraud and abuse prevention.
• To meet legal obligations (legal obligation) — tax and accounting records.

4. Who we share it with

• Stripe — our payment processor. Stripe processes card payments, prevents fraud, and (where applicable) calculates tax. See Stripe's Privacy Notice.
• Hosting & infrastructure providers — Lovable / Cloudflare (site hosting), Supabase (database), Resend (transactional email).
• Professional advisers — accountants and legal advisers where necessary.
• Authorities — where required by law.

We do not sell your personal data.

5. International transfers

Some of our processors are located outside the UK/EEA. Where personal data is transferred, we rely on adequacy decisions or standard contractual clauses to ensure an equivalent level of protection.

6. Retention

Brief and project data is kept for as long as needed to deliver the commission and to maintain a portfolio reference (typically 3 years). Payment and tax records are kept for the period required by law (usually 6 years in the UK). Logs are kept for up to 90 days. Data is deleted or anonymized when no longer needed.

7. Your rights

Under UK GDPR / EU GDPR you have the right to: access your data, correct it, delete it, restrict or object to processing, withdraw consent, and data portability. You can also complain to the UK Information Commissioner's Office (ico.org.uk) or your local supervisory authority. To exercise any right, email nate@cryerliveries.com. We will respond within one month.

8. Security

We use appropriate technical and organisational measures (encryption in transit, access controls, vetted processors) to protect personal data. No internet transmission is 100% secure, but we take reasonable steps to safeguard your information.

9. Cookies

We use only essential cookies required for the site and checkout to function. We do not use marketing or third-party analytics cookies.

10. Changes

We may update this notice from time to time. The current version is always available at this URL.