Privacy Policy
This privacy policy outlines our practices for collecting, using, and protecting visitor information. We value transparency and your privacy rights.
Our Commitment to Privacy
We are dedicated to protecting the privacy and security of our visitors and customers. This policy explains how we collect, use, and safeguard your information while providing transparent access to your data rights and choices.
Introduction
This Privacy Policy explains how Crux Global Ltd. ("Crux", "we", "our", "us") collects, uses, processes, stores, and protects personal data when individuals access or use the services provided through the website www.cruxlegacy.com, the web application, and mobile applications collectively referred to as “Crux: Secure Life Organiser”.
Crux is committed to protecting the privacy and security of personal data in accordance with the United Kingdom General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable data protection and privacy legislation.
By accessing or using the services, users acknowledge that they have read and understood this Privacy Policy.
Company Information
Crux Global Ltd.
Company Registration Number: 16006514
Registered Office: 20 Wenlock Road, London N1 7GU, United Kingdom
Support Contact: support@cruxlegacy.com
Eligibility
The Crux platform is intended for use only by individuals aged 18 years or older. By registering for an account, users confirm that they meet this requirement.
Categories of Personal Data Collected
4.1 Account Information
When creating an account, users may provide:
- Full name
- Email address
- Mobile phone number
- Password credentials
4.2 User Stored Information
Users may choose to upload or store information including but not limited to:
- Identity documents
- Financial records
- Insurance policies
- Property documentation
- Digital asset information
- Personal messages
- Journals or memories
- Notes and instructions
- Time capsule messages
- Instructions for trusted contacts
Crux does not control the type of information users choose to upload.
4.3 Trusted Contact Information
Users may invite trusted contacts by email address. Trusted contacts may receive notifications or access information only when specific user-defined conditions are triggered.
4.4 Technical Data
Technical data may include:
- IP address
- Device identifiers
- Browser type
- Operating system
- Application usage patterns
- Session information
5. Analytics and Tracking Technologies
Crux uses analytics tools to understand platform usage and improve services. Providers may include:
- Google Analytics
- Meta Pixel
- Firebase
- MixPanel
These services may collect anonymised usage metrics according to their own privacy policies.
6. Payment Processing
Subscription payments are processed through Stripe, a third-party payment processor. Crux does not store full payment card information.
7. Data Storage and Security
User data is stored using secure cloud infrastructure provided by Amazon Web Services (AWS) located in the London region. Security measures include:
- AES‑256 encryption
- encrypted data transmission
- authentication controls
- role-based access management
Crux utilises an encryption architecture designed to ensure that administrators cannot access the contents of user encrypted storage environments.
8. Trusted Contact Access and Trigger Events
Users may configure rules that release selected information to trusted contacts when trigger events occur. Examples include:
- verified death notification submitted by a trusted contact
- expiry of travel mode
- other user-configured conditions
Crux operates solely as a technology platform facilitating automated workflows defined by users.
Crux does not independently verify the legal authenticity of documents submitted by users or third parties.
9. Legal Basis for Processing
Personal data may be processed on the following bases:
- contractual necessity
- legitimate business interests
- user consent
- legal compliance obligations
10. Data Retention
Account data is retained while the account remains active. When an account is deleted, associated data may be permanently removed within 30 days unless retention is required for legal compliance.
11. User Rights
Users have the following rights under UK GDPR:
- access personal data
- correct inaccurate data
- request erasure
- restrict processing
- request data portability
- withdraw consent
Requests may be submitted to support@cruxlegacy.com.
12. International Transfer
Where third‑party services operate internationally, data transfers may occur under safeguards compliant with UK GDPR.
13. Updates
Crux may update this policy periodically. Updated policies will be published on the website.
Contact Us
We strive to address all privacy-related questions and concerns promptly. Our dedicated privacy team is available through multiple channels to ensure you receive comprehensive support for any data protection inquiries.
Main Contact Options:
Privacy Team: privacy@cruxlegacy.com
Security Team: security@cruxlegacy.com
Office Hours:
Monday-Friday, 9am-6pm EST
Response Time: Within 48 hours
Mailing Address:
20, Wenlock Road
London - N1 7GU
United Kingdom