Effective date: 9 November 2026
Last updated: 9 November 2026
Company: CREVIUM LTD
Company registration number: 17504254
Registered in: United Kingdom
1. Introduction
CREVIUM LTD ("Crevium", "we", "us" or "our") is committed to protecting personal information and respecting the privacy of people who use our products and services.
This Privacy Policy explains how we collect, access, use, store, disclose, protect and delete personal information in connection with Crevium-operated applications, games, websites, digital platforms and related business activities.
We aim to comply with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR), Data Protection Act 2018, applicable provisions of the Data (Use and Access) Act 2025, and the Privacy and Electronic Communications Regulations (PECR).
Where applicable, we also consider relevant overseas data protection requirements, including EU GDPR.
We apply principles of data minimisation, transparency, security and privacy by design.
Not every service uses every feature or processes every category of data described below. Product-specific notices explain which processing activities are enabled in an individual application or service.
This policy does not authorise the collection of information for features that have not been implemented.
This policy is intended to apply to digital services operated by CREVIUM LTD, including:
Crevium mobile applications and games.
Crevium Hazard Guide.
Crevium Books and other business software.
Crevium Games and software-development tools.
My Caravan, My Stitch Mate, My Patchwork Mate and related applications.
Crevium websites and online platforms.
Mooley, the independent artisan marketplace, when operated by CREVIUM LTD.
Digital customer support and business communications.
Future Crevium-branded products and services.
Examples of other products include Crevium War, My Island, Ivy's Designer Dogs, Crack Crevium and future products developed or published by the company.
Product-specific privacy information may supplement this policy where an application processes additional categories of information, uses additional service providers or has different retention requirements.
A product or feature mentioned in this policy is not necessarily available or currently collecting personal information.
CREVIUM LTD is generally the data controller for personal information that we determine how and why to process in our own services.
For certain business applications, we may instead act as a data processor on behalf of a business customer. In those circumstances, that customer may be the controller and our processing is governed by the relevant agreement and instructions.
Where third-party providers or independent marketplace sellers determine their own purposes and methods of processing, they may act as separate controllers.
To contact us about personal information or your rights, use the privacy contact details at the beginning of this policy.
Depending on the service and functionality being used, information processed may include the following categories.
Account and contact information
Names, account identifiers, email addresses, usernames, business details, communication preferences and information needed to authenticate users.
Device and technical information
Device type, operating system, app version, language, IP address, device identifiers, diagnostic information, crash reports and technical usage information where collected by an enabled service or SDK.
Information supplied by users
Text, notes, checklists, assessments, documents, images, photographs, designs, game content, business records, product listings, customer enquiries and other content submitted through an application.
Transactional information
Order details, invoices, purchase records, refunds, subscription status, transaction references, commission information and payment-related records where a service supports commercial transactions.
Location information
Approximate location or precise location only where a feature requires it, the appropriate permissions and legal requirements are satisfied, and the applicable product notice explains the processing.
Camera, images and files
Images, videos, receipts, documents or other content selected, captured or uploaded by a user when the relevant feature is enabled.
Support and communications
Messages sent to us, correspondence, support requests, complaints and information reasonably needed to investigate and respond to enquiries.
Potentially sensitive information
Some services may involve information about health, accessibility, disability, finances or personal circumstances.
We seek to minimise sensitive information and will process special-category personal data only where an appropriate lawful basis and additional legal condition apply.
We do not require users to provide unnecessary medical or other sensitive personal details to use a basic reference feature.
Some Crevium applications operate partly or entirely offline.
Such applications may store information locally on the user's device, including:
Application settings and preferences.
Saved progress.
Game progress or achievements.
Draft assessments.
Notes or checklists.
User-created designs and project files.
Information stored exclusively on a user's device is not automatically transmitted to CREVIUM LTD.
Where a cloud backup, synchronisation, analytics or other online feature is introduced, the relevant product notice will explain the additional data processing.
Deleting an application may remove locally stored information, but this depends on the operating system, backups and available restoration features.
Crevium Hazard Guide: The supplied v1.5.1 HTML implementation stores unfinished assessments locally for up to seven days, subject to available browser or device storage. It also supports manually clearing saved progress.
Users should avoid entering names, case references or unnecessary sensitive personal information into assessment tools unless a specific secure case-management feature expressly supports such information.
We process information only where there is an appropriate legal basis.
Depending on the circumstances, our purposes and legal bases may include:
Providing requested services — Contract
To create accounts, provide application functionality, process orders, deliver services, manage subscriptions or respond to contractual requests.
Operating and protecting our services — Legitimate interests
To maintain performance, investigate technical faults, prevent misuse, secure systems and improve reliability, where our interests are not overridden by individuals' rights.
Meeting statutory obligations — Legal obligation
To comply with accounting, taxation, consumer protection, security and other applicable legal duties.
Optional processing — Consent
To enable activities that require consent, such as certain advertising, analytics, marketing communications or access to particular device features.
Customer support and correspondence — Contract or legitimate interests
To respond to enquiries, investigate complaints and provide requested assistance.
Where consent is the legal basis, users may withdraw it through the relevant controls or by contacting us. Withdrawal will not invalidate processing already lawfully performed.
We assess the applicable lawful basis for each processing activity before introducing that activity.
Certain current or future Crevium applications may display third-party advertisements.
Where advertising is enabled, it may be delivered through Google AdMob or other advertising partners identified in the applicable product notice.
Depending on configuration, advertising partners may process information such as:
Advertising identifiers.
IP addresses.
Device information.
Ad impressions and interactions.
Approximate location derived from technical information.
Consent choices.
Advertising performance data.
Personalised advertising will only be used where the relevant legal requirements, permissions and consent arrangements have been satisfied.
Where required, we will provide a suitable consent management mechanism, including consent choices and withdrawal or privacy settings.
Applications that do not contain advertising will not be described as advertising-supported solely because CREVIUM LTD uses advertising in other products.
Advertising providers may operate under their own privacy policies and legal responsibilities.
Google Privacy Policy:
https://policies.google.com/privacy
Where enabled, analytics or diagnostic tools may be used to understand application performance, identify errors, improve accessibility and investigate crashes.
This may involve device or application identifiers, usage information, technical logs and diagnostic records.
We will disclose the relevant analytics providers and data-processing activities in the affected application's privacy information.
Analytics tools will not automatically be included in every application.
Where consent is required for analytics storage or tracking, the applicable consent arrangements will be provided.
Certain Crevium products and future services may support purchases, subscriptions, seller transactions or payments.
Depending on the platform, payments may be processed by providers such as Google Play Billing, Stripe or another identified payment service.
The relevant payment provider may collect payment-card details, billing details, transaction information and information necessary to verify payments or prevent fraud.
CREVIUM LTD may process associated transaction records, amounts, payment status, refunds, invoices and customer-service information.
We will not represent payment-card information as stored only by the payment provider unless that is confirmed by the actual payment integration.
Financial records may be retained where required by accounting, taxation, anti-fraud or other applicable legal obligations.
Payment providers may maintain their own privacy notices.
If and when Mooley operates as an online marketplace under CREVIUM LTD, additional personal information may be processed to provide marketplace services.
This may include:
Buyer and seller account details.
Shop names, profiles and public business information.
Product listings and uploaded images.
Order details and delivery information.
Buyer and seller messages.
Reviews, support requests and complaints.
Commission and payout information.
Fraud-prevention and account-verification information.
Information required to fulfil an order may be shared with the relevant seller, delivery provider or payment processor.
Sellers may have separate legal responsibilities for their use of buyer information.
Payment onboarding and identity verification may involve additional information collected by the relevant payment provider.
Before launch, Mooley will require an additional service-specific privacy notice accurately explaining its actual providers, account deletion arrangements, public profile information, communications, retention and payment processes.
Crevium business applications may process information relating to invoices, expenses, receipts, customers, suppliers, financial records, staff or business operations.
Such information may include personal data.
Where cloud functionality is introduced, the application-specific documentation will explain hosting, authorised access, backups, subprocessors, retention, data exports and deletion.
Business customers may remain responsible for deciding the purposes and lawful basis of information they enter.
Users should only upload information they are authorised to process.
Accounting and financial applications are support tools and do not replace the need for appropriate accounting, tax or professional advice.
Some future or existing products may include AI-assisted functionality.
Where an AI feature is enabled, information submitted by users may be processed to generate responses, recommendations, summaries, designs or other requested outputs.
Depending on the feature, this could involve text, images, documents or other content.
Before enabling an AI provider, CREVIUM LTD will assess and disclose relevant processing arrangements, including provider identity, data sharing, retention and whether submitted information is used for model training.
Users should not submit passwords, confidential business information, medical records or other sensitive data unless the relevant feature expressly supports and protects that use.
AI-generated information may be inaccurate or incomplete and should be independently checked where important decisions depend on it.
Some Crevium games or educational applications may be designed for younger audiences.
Where an application is intended for children or is likely to be accessed by children, we will consider applicable children's privacy requirements, including the ICO Children's Code and relevant Google Play policies.
Appropriate measures may include:
Privacy-protective default settings.
Limiting unnecessary data collection.
Age-appropriate explanations.
Restricting profiling and advertising.
Appropriate parental involvement where required.
Stronger restrictions on sharing information.
Avoiding unnecessary location tracking.
Clear reporting and safety arrangements.
Age eligibility and privacy controls may differ between individual Crevium applications.
We do not treat an adult age rating on one application as applying to every other product.
Where required, a separate children's privacy notice and additional parental information will be provided.
Some applications may request access to device capabilities such as cameras, photos, files, notifications, location or microphones.
Permissions will be requested only where needed for the relevant functionality and in accordance with applicable platform requirements.
Where possible, users may choose the content they wish to provide.
Users can manage many device permissions through their operating-system settings.
Denying a necessary permission may prevent the associated feature from functioning.
Permission requests do not themselves mean that all accessed information is transmitted to CREVIUM LTD. The applicable product notice will explain any collection or sharing.
Crevium websites and online services may use cookies, local storage, pixels, SDK identifiers or similar technologies.
These may support essential functionality, security, user preferences, analytics and advertising.
Where legally required, we will request consent before using non-essential storage or tracking technologies and provide a means of managing relevant choices.
Some uses may qualify for legal exceptions to consent requirements.
The cookies and similar technologies actually used by a particular website or application will be identified in its applicable notice or cookie information.
Depending on the service, information may be disclosed to:
Hosting and infrastructure providers.
Payment processors.
Authentication and account-service providers.
Analytics and crash-reporting providers.
Advertising partners where advertising is enabled.
AI processing providers where AI features are enabled.
Sellers, customers or delivery providers involved in transactions.
Professional advisers and compliance service providers.
Regulators, courts and public authorities where legally required.
Other parties where the user has authorised a relevant disclosure.
We seek to restrict disclosure to what is reasonably necessary for the relevant purpose.
Where a provider acts as our processor, appropriate contractual arrangements and security requirements will be used.
The exact service providers and data categories for individual products should be identified in product-specific notices.
We do not describe unrelated disclosures by one product as applying automatically to all Crevium applications.
Some technology, hosting, advertising or payment providers may process personal information outside the United Kingdom.
Where international transfers are restricted under applicable data protection law, CREVIUM LTD will ensure that an appropriate legal transfer mechanism applies.
These may include applicable adequacy regulations, approved contractual safeguards or another permitted mechanism.
Where necessary, additional assessments and protective measures will be considered.
Users may request further information about relevant transfer safeguards using our privacy contact details.
We take appropriate technical and organisational measures to protect personal information against unauthorised access, disclosure, alteration, destruction or loss.
Depending on the service and risk, measures may include access restrictions, secure communications, encryption, software updates, monitoring, backups and controlled permissions.
No electronic system or transmission method can be guaranteed completely secure.
Users should keep their devices updated, protect their login details and report suspected account-security issues promptly.
We will review significant security incidents and comply with applicable breach notification requirements.
We retain personal information only for as long as necessary for the purposes for which it was collected, subject to legal requirements.
Retention depends on the nature of the information and service.
Examples include:
Local application progress: according to the application's stated storage and deletion settings.
Account information: while required to maintain an account and for any justified period after account closure.
Transaction and financial records: for the applicable statutory retention period.
Support correspondence: while necessary to resolve and document an enquiry or dispute.
Security records: for a proportionate period based on security needs and legal requirements.
Marketing preferences: while relevant to the relationship or until consent is withdrawn, subject to necessary suppression records.
Backups: according to the relevant system's documented backup and deletion cycle.
Where specific retention periods or material differences apply, they will be stated in the relevant product-specific information.
We may retain limited information after an account is closed where necessary to comply with a legal duty, resolve a dispute, protect security or establish, exercise or defend legal claims.
Information will be deleted or anonymised when no longer required.
Where an application allows account creation, users will be provided with an appropriate process for requesting deletion.
Where required by Google Play, account deletion will be available through the application and through an accessible external web resource.
Following a valid deletion request, associated personal information will be deleted unless continued retention is justified or required by applicable law.
Where information must be retained, we will limit it to the relevant lawful purpose and retention period.
For locally stored data, users may be able to delete saved content from within an application or by removing local application data.
Users may contact CREVIUM LTD for assistance with applicable personal-data deletion requests.
Subject to applicable law, individuals may have rights to:
Be informed about the use of their personal information.
Request access to personal information.
Request correction of inaccurate information.
Request erasure in relevant circumstances.
Restrict certain processing.
Object to processing based on particular legal grounds.
Request data portability where applicable.
Withdraw consent where consent is relied upon.
Challenge qualifying solely automated decisions with significant effects.
To exercise a right, contact our privacy team using the details at the beginning of this policy.
We may need to verify identity before fulfilling certain requests.
We will respond within the time limits required by applicable law. Requests are generally handled within one month, subject to lawful extensions or exceptions.
Individuals in the UK may complain to the Information Commissioner's Office (ICO).
ICO website:
https://ico.org.uk/
Some applications may provide automatic calculations, gameplay decisions, hazard guidance, suggestions or recommendations.
These functions do not necessarily involve legally significant automated decision-making.
Where a service introduces automated processing with legal or similarly significant effects, we will assess the applicable requirements and provide appropriate information, safeguards and rights.
Informational outputs from Crevium tools should not be treated as legally binding decisions unless the relevant service explicitly establishes such authority.
Certain Crevium products provide information relating to housing, health, safety, business, finance or technical matters.
Such information is provided for general informational or decision-support purposes.
Government information
CREVIUM LTD is an independent company and is not affiliated with, endorsed by, authorised by or operated by the UK Government or any public authority.
Government-related applications should clearly identify their official information sources.
Housing hazard guidance
Crevium Hazard Guide does not replace a competent property inspection, an official hazard assessment, statutory duties, professional advice or government guidance.
Health and safety information
Crevium applications are not emergency services and do not provide medical diagnosis or treatment unless a specific product is expressly authorised and developed for that purpose.
Financial and accounting information
Financial calculators and accounting tools provide assistance but do not replace professional tax, accounting, legal or regulated financial advice.
Creative and AI tools
User-generated and AI-generated content should be checked for accuracy, legality, appropriate permissions and suitability before use.
Separate application-specific warnings may be required and should appear prominently in the relevant product.
Our applications may include links to external websites, platforms, government information or third-party services.
Third-party websites and services have their own privacy practices.
CREVIUM LTD does not control all processing undertaken by independent third parties.
Users should review the relevant third-party privacy notices before providing information.
Where users contact CREVIUM LTD, we may use the information supplied to respond to their enquiry or maintain an appropriate business relationship.
Where we send electronic marketing communications, we will comply with applicable consent and marketing rules.
Users will be provided with an appropriate way to opt out of marketing messages.
Operational communications, such as important account, security, order or service notifications, may still be necessary where there is another lawful basis.
We will not use personal information for unrelated marketing purposes without an appropriate legal basis.
We may update this Privacy Policy when our products, technology, service providers, legal requirements or information practices change.
The latest version will be made available through our relevant websites or applications.
Where a change materially affects the way personal information is processed, we will provide additional notice or obtain consent where required.
The date at the beginning of the policy indicates when it was last updated.
For privacy enquiries, personal-data requests, corrections, deletion requests or concerns regarding the processing of personal information, contact:
CREVIUM LTD
Company registration number: 17504254 — subject to verification
United Kingdom
We aim to investigate privacy concerns fairly and respond in accordance with applicable law.
You may also contact the Information Commissioner's Office at:
CREVIUM LTD — Independent Digital Products and Services
This is the company-wide privacy framework. Product-specific notices and controls supplement it wherever a particular application or service processes additional information or is subject to additional requirements.
Crevium Hazard Guide is an independent informational application for housing hazard assessment support in England.
The v1.5.1 HTML implementation does not require users to create an account or sign in.
Unfinished assessments may be saved locally on the device for up to seven days. Users can clear saved progress using the application's controls.
The assessment logic does not itself upload responses to a Crevium server. Official external reference websites require internet access and may process information according to their own privacy policies.
The current release is intended to operate without advertising. Advertising, additional analytics or cloud features will require updated disclosures if introduced.
Users should avoid entering identifiable tenant information or unnecessary medical information into the assessment.
The app provides indicative guidance only. It is not affiliated with the UK Government, and it does not replace official guidance, professional inspections, legal advice or statutory obligations.