Privacy Policy

Last updated July 20, 2026

This Privacy Policy for Smilumin LLC (“we,” “us,” or “our”) explains how and why we may access, collect, store, use, and/or share (“process”) your personal information when you use our services (“Services”), including when you:

Visit our website at https://www.crest.me.uk or any other website of ours that links to this Privacy Policy.
Engage with us in other related ways, including in connection with marketing or events.

Questions or concerns? Reading this Privacy Policy will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at info@crest.me.uk.

SUMMARY OF KEY POINTS

This summary highlights the key points of our Privacy Policy. You can find more detailed information about each topic in the relevant section below or by using the table of contents.

What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us and the Services, the choices you make, and the products and features you use. Learn more about the personal information you provide to us.

Do we process any sensitive personal information? Some information may be considered “special” or “sensitive” in certain jurisdictions, such as racial or ethnic origin, sexual orientation, and religious beliefs. We do not process sensitive personal information.

Do we collect any information from third parties? We do not collect any information from third parties.

How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, maintain security and prevent fraud, and comply with applicable laws. We may also process your information for other purposes with your consent. We process your information only where we have a valid legal basis to do so. Learn more about how we process your information.

When and with whom do we share your personal information? We may share information in specific situations and with certain third parties. Learn more about when and with whom we share your personal information.

How do we keep your information safe? We have appropriate organisational and technical processes and procedures in place to protect your personal information. However, no electronic transmission over the Internet or information-storage technology can be guaranteed to be 100% secure. Therefore, we cannot promise or guarantee that hackers, cybercriminals, or other unauthorised parties will not be able to defeat our security measures and improperly collect, access, steal, or modify your information. Learn more about how we keep your information safe.

What are your rights? Depending on where you are located, applicable privacy laws may provide you with certain rights regarding your personal information. Learn more about your privacy rights.

How can you exercise your rights? The easiest way to exercise your rights is by submitting a data subject access request or contacting us. We will consider and act upon any request in accordance with applicable data-protection laws.

Would you like to learn more about what we do with the information we collect? Please review the full Privacy Policy.

TABLE OF CONTENTS

1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

In short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you register for the Services, express an interest in obtaining information about us or our products and Services, participate in activities through the Services, or otherwise contact us.

Personal information provided by you. The personal information we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we collect may include:

Names
Telephone numbers
Email addresses
Postal addresses
Usernames
Passwords
Contact preferences
Billing addresses
Contact or authentication information
Debit or credit card numbers

Sensitive information. We do not process sensitive information.

Payment data. If you choose to make a purchase, we may collect data necessary to process your payment, such as your payment instrument number and the security code associated with your payment instrument. All payment data is processed and stored by Stripe. You can view Stripe’s privacy policy at https://stripe.com/privacy.

Social media login data. We may offer you the option to register with us using details from your existing social media account, such as Facebook, X, or another social media account. If you choose to register in this way, we will collect certain profile information from the relevant social media provider, as described in the section titled “HOW DO WE HANDLE SOCIAL LOGINS?” below.

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to that information.

Information collected automatically

In short: Certain information, such as your Internet Protocol (IP) address and/or browser and device characteristics, is collected automatically when you visit our Services.

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity, such as your name or contact information, but it may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. This information is primarily required to maintain the security and operation of our Services and for internal analytics and reporting purposes.

Like many businesses, we also collect information through cookies and similar technologies.

The information we collect may include:

Log and usage data. Log and usage data consists of service-related, diagnostic, usage, and performance information that our servers automatically collect when you access or use our Services and that we record in log files. Depending on how you interact with us, this data may include your IP address, device information, browser type, settings, and information about your activity within the Services, such as the date and time of use, pages and files viewed, searches, and other actions or features used. It may also include device-event information, such as system activity, error reports, sometimes called “crash dumps,” and hardware settings.
Device data. We collect device data, such as information about the computer, phone, tablet, or other device you use to access the Services. Depending on the device used, this data may include information such as your IP address or proxy server, device and application identification numbers, location, browser type, hardware model, Internet service provider and/or mobile carrier, operating system, and system-configuration information.
Location data. We collect location data, such as information about the location of your device, which may be precise or imprecise. The amount of information we collect depends on the type and settings of the device you use to access the Services.
For example, we may use GPS and other technologies to collect geolocation data that tells us your current location, including location based on your IP address. You can prevent us from collecting this information by refusing access to it or disabling location settings on your device. However, if you choose to opt out, you may not be able to use certain features of the Services.

Google API

Our use of information received from Google APIs will comply with the Google API Services User Data Policy, including the Limited Use requirements.

2. HOW DO WE PROCESS YOUR INFORMATION?

In short: We process your information to provide, improve, and administer our Services, communicate with you, maintain security and prevent fraud, and comply with applicable laws. We may also process your information for other purposes with your consent.

We process your personal information for various reasons, depending on how you use our Services, including:

To facilitate account creation and authentication and to manage user accounts. We may process your information so that you can create and log in to your account and so that we can keep your account functioning properly.
To provide and facilitate the provision of services to you. We may process your information to provide you with the requested service.
To respond to user enquiries and provide support. We may process your information to respond to your enquiries and resolve any potential issues relating to the requested service.
To fulfil and manage orders. We may process your information to fulfil and manage orders, payments, returns, and exchanges made through the Services.
To request feedback. We may process your information when necessary to request feedback and contact you about your use of our Services.
To send you marketing and promotional communications. We may process the personal information you provide to us for marketing purposes where this is consistent with your marketing preferences. You may unsubscribe from our marketing emails at any time. For more information, see the section “WHAT ARE YOUR PRIVACY RIGHTS?” below.
To deliver targeted advertising to you. We may process your information to develop and display personalised content and advertising tailored to your interests, location, and other relevant factors.
To protect our Services. We may process your information as part of our efforts to keep our Services safe and secure, including fraud monitoring and prevention.
To identify usage trends. We may process information about how you use our Services to better understand how they are used and how we can improve them.
To determine the effectiveness of our marketing and promotional campaigns. We may process your information to better understand how to provide marketing and promotional campaigns that are most relevant to you.
To save or protect an individual’s vital interests. We may process your information where necessary to protect or safeguard an individual’s vital interests, such as to prevent harm.

3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION?

In short: We process your personal information only when we believe it is necessary and we have a valid legal basis under applicable law, such as your consent, compliance with legal obligations, the performance of a contract, protection of your rights, or the pursuit of our legitimate business interests.

The General Data Protection Regulation (GDPR) and the UK General Data Protection Regulation (UK GDPR) require us to explain the legal bases on which we rely when processing your personal information.

Accordingly, we may rely on the following legal bases:

Consent. We may process your information if you have given us permission, or consent, to use your personal information for a specific purpose. You may withdraw your consent at any time. Learn more about withdrawing your consent below.

Performance of a contract. We may process your personal information where we believe it is necessary to perform our contractual obligations to you, including providing our Services, or at your request before entering into a contract with you.

Legitimate interests. We may process your information where we believe it is reasonably necessary to pursue our legitimate business interests and those interests do not override your interests, fundamental rights, or freedoms.

For example, we may process your personal information for some of the purposes described in this Policy in order to:

Send users information about special offers and discounts on our products and services.
Develop and display personalised and relevant advertising content for our users.
Analyse how our Services are used so that we can improve them and attract and retain users.
Support our marketing activities.
Diagnose problems and/or prevent fraudulent activity.
Understand how users use our products and services so that we can improve the user experience.

Legal obligations. We may process your information where we believe it is necessary to comply with our legal obligations, such as cooperating with law-enforcement bodies or regulatory agencies, exercising or defending our legal rights, or disclosing your information as evidence in legal proceedings in which we are involved.

Vital interests. We may process your information where we believe it is necessary to protect your vital interests or the vital interests of another person, such as in situations involving a potential threat to any person’s safety.

4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In short: We may share information in the specific situations described in this section and/or with the following third parties.

Vendors, consultants, and other third-party service providers. We may share your information with third-party vendors, service providers, contractors, or agents (“third parties”) that perform services for us or on our behalf and require access to that information to carry out their work.

We have contracts in place with third parties designed to protect your personal information. This means that they may not use your personal information for any purpose unless we instruct them to do so. They will not share your personal information with any organisation other than us. They also agree to protect the data they hold on our behalf and retain it only for the period specified by us.

The categories of third parties with whom we may share personal information include:

Advertising, direct marketing, and lead generation: Google AdSense
AI service providers: OpenAI
Allowing users to connect to third-party accounts: Stripe account
Communicating and chatting with users: ZOHO Campaigns
Content optimisation: Google Site Search
Data backup and security: Dropbox Backup
Functionality and infrastructure optimisation: Termly.io
Invoicing and billing: Stripe, Google Wallet, and Apple Pay
Retargeting platforms: Google Ads Remarketing
Social media sharing and advertising: Facebook advertising, Firebase Dynamic Links, Facebook social plugins, Google Friend Connect, and Google+ social plugins
User account registration and authentication: YouTube OAuth 2.0
User comments and forums: Facebook Comments and Google Tag Manager
Web and mobile analytics: Google Ads, Google Analytics, Google Tag Manager, Facebook Ads conversion tracking, and Facebook Analytics
Website hosting: Shopify
Website testing: Google Website Optimizer

We may also be required to share your personal information in the following situations:

Business transfers. We may share or transfer your information in connection with, or during negotiations concerning, any merger, sale of company assets, financing, or acquisition of all or part of our business by another company.

5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

In short: We may use cookies and other tracking technologies to collect and store your information.

We may use cookies and similar tracking technologies, such as web beacons and pixels, to collect information when you use our Services. Certain online tracking technologies help us maintain the security of our Services and your account, prevent crashes, fix errors, save your preferences, and support basic website functions.

We also permit third parties and service providers to use online tracking technologies within our Services for analytics and advertising purposes, including to help manage and display advertisements or tailor advertisements to your interests.

These third parties and service providers use their technologies to display advertisements for products and services tailored to your interests, which may appear both within our Services and on other websites.

Specific information about how we use these technologies and how you can refuse certain cookies is set out in our Cookie Policy.

Google Analytics

We may share your information with Google Analytics to track and analyse the use of the Services.

Google Analytics advertising features that we may use include Remarketing with Google Analytics, Google Display Network Impressions Reporting, and Google Analytics Demographics and Interests Reporting.

To opt out of being tracked by Google Analytics across the Services, visit https://tools.google.com/dlpage/gaoptout.

You can opt out of Google Analytics advertising features through Google Ads Settings and Ads Settings for mobile apps.

Other opt-out options are available at:

For more information about Google’s privacy practices, please review Google’s Privacy & Terms page.

6. HOW DO WE HANDLE SOCIAL LOGINS?

In short: If you choose to register or log in to our Services using a social media account, we may access certain information about you.

Our Services may allow you to register and log in using details from a third-party social media account, such as Facebook or X. If you choose to do this, we will receive certain profile information about you from the relevant social media provider.

The profile information we receive may vary depending on the provider, but it commonly includes your name, email address, friends list, profile picture, and any other information you choose to make public on that social media platform.

We will use the information we receive only for the purposes described in this Privacy Policy or for other purposes clearly disclosed to you through the relevant Services.

Please note that we do not control, and are not responsible for, any other use of your personal information by third-party social media providers. We recommend that you review their privacy notices to understand how they collect, use, and share your personal information and how you can manage your privacy preferences on their websites and applications.

7. HOW LONG DO WE KEEP YOUR INFORMATION?

In short: We retain your information for as long as necessary to fulfil the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

We will retain your personal information only for as long as necessary to fulfil the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by law, such as for tax, accounting, or other legal requirements.

No purpose described in this Policy will require us to retain your personal information for longer than the period during which you maintain an account with us.

When we no longer have a legitimate business need to process your personal information, we will delete or anonymise it.

If this is not possible, for example because your personal information has been stored in backup archives, we will securely store it and isolate it from any further processing until deletion is possible.

8. HOW DO WE KEEP YOUR INFORMATION SAFE?

In short: We aim to protect your personal information through appropriate organisational and technical security measures.

We have implemented appropriate and reasonable technical and organisational security measures designed to protect the security of the personal information we process.

However, despite our safeguards and efforts to protect your information, no electronic transmission over the Internet or information-storage technology can be guaranteed to be 100% secure.

We therefore cannot promise or guarantee that hackers, cybercriminals, or other unauthorised third parties will not be able to defeat our security measures and improperly collect, access, steal, or modify your information.

Although we will use reasonable efforts to protect your personal information, the transmission of personal information to and from our Services is at your own risk. You should access the Services only within a secure environment.

9. DO WE COLLECT INFORMATION FROM MINORS?

In short: We do not knowingly collect information from, or market to, children under 18 years of age.

We do not knowingly collect, solicit, or market to individuals under 18 years of age, nor do we knowingly sell their personal information.

By using the Services, you confirm that you are at least 18 years old or that you are the parent or guardian of a minor dependent and consent to that minor’s use of the Services.

If we learn that personal information from users under 18 years of age has been collected, we will deactivate the relevant account and take reasonable steps to promptly delete such information from our records.

If you become aware of any information that we may have collected from a child under 18, please contact us at info@crest.me.uk.

10. WHAT ARE YOUR PRIVACY RIGHTS?

In short: In certain regions, such as the European Economic Area (EEA), the United Kingdom (UK), and Switzerland, you have rights that provide you with greater access to and control over your personal information. Depending on your country, province, or place of residence, you may review, change, or close your account at any time.

In certain regions, including the EEA, the UK, and Switzerland, you have specific rights under applicable data-protection laws.

These may include the right:

To request access to and obtain a copy of your personal information.
To request correction or deletion.
To restrict the processing of your personal information.
Where applicable, to data portability.
Not to be subject to automated decision-making.

In certain circumstances, you may also have the right to object to the processing of your personal information.

You may submit a request by contacting us using the details provided in the section “HOW CAN YOU CONTACT US ABOUT THIS POLICY?” below.

We will consider and act upon every request in accordance with applicable data-protection laws.

If you live in the United Kingdom and are dissatisfied with the way we process your personal information, you may submit a complaint directly to us. This right is in addition to the rights available to you under the UK General Data Protection Regulation and the Data Protection Act 2018.

How to contact us

Online: https://www.crest.me.uk/contact
Email: info@crest.me.uk

By post: See the section “HOW CAN YOU CONTACT US ABOUT THIS POLICY?” below.

What happens after you submit a complaint

We will acknowledge receipt of your complaint within 30 days of receiving it.
We will investigate the complaint without undue or excessive delay.
We will keep you informed of our progress and explain the outcome to you.

If you are dissatisfied with our final response, you may refer your complaint to the Information Commissioner’s Office (ICO), the UK supervisory authority.

Website: https://ico.org.uk/make-a-complaint/
Helpline: 0303 123 1113
Postal address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom
If you live in the EEA or the United Kingdom and believe that we are unlawfully processing your personal information, you also have the right to lodge a complaint with the data-protection authority in your EEA Member State or with the UK data-protection authority.

If you live in Switzerland, you may contact the Federal Data Protection and Information Commissioner.

Withdrawing your consent

Where we rely on your consent to process your personal information, you have the right to withdraw that consent at any time.

You may withdraw your consent by contacting us using the details provided in the section “HOW CAN YOU CONTACT US ABOUT THIS POLICY?” below.

Please note that withdrawing your consent will not affect the lawfulness of processing carried out before the withdrawal, nor will it affect processing carried out on legal grounds other than consent.

Opting out of marketing and promotional communications

You may unsubscribe from our marketing and promotional communications at any time by clicking the unsubscribe link in the emails we send or by contacting us using the details provided in the section “HOW CAN YOU CONTACT US ABOUT THIS POLICY?” below.

You will then be removed from our marketing lists.

However, we may still communicate with you, for example to send service-related messages necessary for the administration and use of your account, to respond to service requests, or for other non-marketing purposes.

Account information

If you would like to review or change the information in your account or close your account at any time, you may:

If you ask us to close your account, we will deactivate or delete your account and information from our active databases.

However, we may retain certain information in our files for the purposes of preventing fraud, troubleshooting problems, assisting with investigations, enforcing our legal obligations, and/or complying with applicable legal requirements.

Cookies and similar technologies. Most web browsers accept cookies by default. If you prefer, you can usually configure your browser to remove or reject cookies. If you choose to remove or reject cookies, this may affect certain features or services within our Services.

If you have questions or comments about your privacy rights, you may email us at info@crest.me.uk.

11. CONTROLS FOR DO-NOT-TRACK FEATURES

Most web browsers and some mobile operating systems and mobile applications include a Do Not Track (“DNT”) feature or setting that you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected.

At present, no uniform technology standard for recognising and implementing DNT signals has been finalised.

Accordingly, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online.

If a standard for online tracking is adopted in the future that we are required to follow, we will inform you about that practice in an updated version of this Privacy Policy.

12. DO WE UPDATE THIS POLICY?

In short: Yes. We will update this Policy as necessary to remain compliant with applicable laws.

We may update this Privacy Policy from time to time.

The updated version will be identified by a revised “Last updated” date at the top of this Privacy Policy.

If we make material changes to this Privacy Policy, we may notify you by prominently posting a notice of those changes or by sending you a direct notification.

We encourage you to review this Privacy Policy frequently to stay informed about how we protect your information.

13. HOW CAN YOU CONTACT US ABOUT THIS POLICY?

If you have questions or comments about this Policy, you may contact our Data Protection Officer (DPO) by email at info@crest.me.uk, by telephone at +44 20 3807 1085, or by post at:

Smilumin LLC
Data Protection Officer
2232 Dell Range Blvd., Suite 245-3030, Cheyenne, WY 82009 United States

14. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE INFORMATION WE COLLECT FROM YOU?

Depending on the applicable laws in your country, you may have the right to request access to the personal information we collect from you, obtain details about how we process it, correct inaccuracies, or request deletion of your personal information.

You may also have the right to withdraw your consent to our processing of your personal information.

These rights may be limited in certain circumstances by applicable law.

To request access to, review, update, or delete your personal information, please complete and submit a data subject access request.

Privacy Policy

Sign Up to Our Newsletter

Collections

Legal Policies

Customer Service