Legal information

Privacy Policy

Last updated: 10 August 2026

CR Investigations Ltd respects your privacy and is committed to protecting personal information that you provide when using this website, contacting our team, requesting an initial assessment, or considering our services. This Privacy Policy explains how we collect, use, store, disclose and protect personal data, and describes the rights available to individuals under applicable data protection law.

This Privacy Policy applies to personal information collected through this website, through enquiry and consultation forms, by telephone or email, and through other direct communications relating to CR Investigations Ltd and its services.

1. Who we are

The controller responsible for your personal data is:

CR Investigations Ltd
Company number: 08003102
Registered office:
167 Turners Hill,
Cheshunt, Waltham Cross,
Hertfordshire, EN8 9BH,
United Kingdom

Information Commissioner’s Office (ICO) registration number: ZA427383.

In this Privacy Policy, “CR Investigations”, “CRI”, “we”, “us” and “our” refer to CR Investigations Ltd.

“You” and “your” refer to the individual accessing this website, submitting an enquiry, requesting an assessment, communicating with us, or otherwise providing personal information to us.

2. Scope of this Privacy Policy

This Privacy Policy applies to information collected when you:

• visit or browse our website;
• submit an enquiry through our website;
• request an initial assessment of a financial situation;
• request a broker or company verification;
• contact us by telephone or email;
• provide information concerning a suspicious company, platform, payment, broker, investment project or other financial situation;
• communicate with a CRI specialist;
• become a client or prospective client;
• provide documents or other supporting materials for assessment;
• communicate with us regarding an existing or potential engagement; or
• otherwise interact with our website or services.

This policy does not apply to third-party websites, platforms, payment providers, financial institutions, brokers, exchanges, regulators or other services that you may access through links or references on our website. Those organisations operate under their own privacy policies and terms.

3. What personal data we collect

Depending on how you interact with us, we may collect different categories of personal information.

3.1 Information you provide directly

When you submit an enquiry or contact us, we may collect:

• first name;
• last name;
• email address;
• telephone number;
• country or approximate geographic location;
• type of enquiry;
• information included in your description of the situation;
• details of a company, broker, platform, payment or transaction;
• information about communications you have received;
• information about payments or attempted payments;
• information about cryptocurrency transactions or wallet addresses;
• documents, screenshots or other materials that you voluntarily provide;
• information contained in correspondence with our team; and
• any other information that you voluntarily choose to provide.

3.2 Contact and communication information

If you contact us by email, telephone, online form or another available communication method, we may retain information necessary to understand and respond to your enquiry.

This may include the date and time of contact, the communication channel, the subject of the enquiry, information you provide during the communication, and records necessary to manage an existing or potential professional relationship.

3.3 Technical information

When you visit our website, certain technical information may be automatically processed by our hosting infrastructure, security systems, analytics tools or other technical services.

Depending on the configuration of the website and services used, this may include:

• IP address;
• browser type and version;
• operating system;
• device type;
• screen characteristics;
• language and regional settings;
• referring website or page;
• pages visited;
• approximate date and time of access;
• technical logs;
• security-related information; and
• other information reasonably necessary to operate and secure the website.

Technical information is generally used for security, website operation, troubleshooting, performance monitoring and, where permitted, analytics.

4. Telephone number and country detection

Our website uses a telephone number input service to help users enter a telephone number in an appropriate international format.

Where enabled, an IP lookup service may be used to estimate the visitor’s country based on their IP address. This information is used to assist with selecting an appropriate telephone country code and improving the user experience.

The website currently uses the ipapi.co service for this purpose. The result may be temporarily retained in the current browser session so that the website does not repeatedly perform the same lookup.

Approximate country detection should not be regarded as precise location tracking. We do not use this feature to determine your exact physical address.

5. Information relating to your situation

Our website is designed for people who may be seeking an initial assessment concerning potentially suspicious or disputed financial situations.

Information you choose to provide may therefore include details concerning:

• financial companies;
• brokers and investment platforms;
• investment projects;
• cryptocurrency platforms and wallets;
• payments and attempted payments;
• bank transfers;
• payment service providers;
• communication with suspected counterparties;
• documents received from another party;
• account access or login incidents;
• requests for additional payments;
• requests for identity documents or security codes;
• phishing or social-engineering incidents;
• business payment disputes; and
• other circumstances relevant to your enquiry.

You should provide only information that is reasonably necessary for us to understand and assess your situation. Please do not submit passwords, authentication codes, private keys, seed phrases, complete payment-card numbers or other credentials unless specifically requested through a secure and appropriate process.

6. Special categories of personal data

We do not generally require special category personal data for an initial assessment.

You should therefore avoid providing information about health, political opinions, religious beliefs, racial or ethnic origin, sexual orientation, trade union membership, biometric data or other special category information unless it is genuinely relevant and you have been specifically asked to provide it.

If such information is voluntarily provided, we will process it only where permitted by applicable data protection law and where an appropriate legal basis applies.

7. How we use personal data

We may use personal information for the following purposes:

• to receive and respond to enquiries;
• to contact you regarding your enquiry;
• to conduct an initial assessment;
• to clarify the circumstances described in your enquiry;
• to assess whether a detailed investigation may be appropriate;
• to identify information or documents that may be relevant;
• to provide information about possible next steps;
• to determine the appropriate scope of potential services;
• to communicate proposed formats, timeframes and fees;
• to establish, manage and perform a contract or proposed contract;
• to maintain appropriate business and client records;
• to protect our website, systems and users from fraud, abuse and security threats;
• to prevent or investigate misuse of our services;
• to comply with applicable legal and regulatory obligations;
• to establish, exercise or defend legal claims;
• to maintain appropriate records for accountability purposes;
• to improve website functionality and user experience;
• to conduct analytics where the required consent has been provided; and
• to perform other purposes that are reasonably compatible with the purpose for which the information was collected.

8. Initial assessment and no-obligation enquiries

The website allows you to request an initial assessment without committing to paid investigative work.

Information submitted through the enquiry form may be used to understand the circumstances, clarify relevant facts, identify potential risks and determine whether a more detailed investigation may be appropriate.

Submitting an enquiry does not automatically create a contract, financial obligation or commitment to purchase services.

Where further paid work may be appropriate, we intend to communicate the proposed scope, format, expected timeframe and applicable fees before the paid work begins.

9. Legal bases for processing

Depending on the circumstances, we may process your personal data under one or more of the following legal bases available under applicable UK data protection law:

9.1 Consent

Where processing requires consent, we will ask for it before carrying out the relevant processing. For example, certain non-essential analytics technologies may only be activated after you provide the appropriate consent.

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

9.2 Contract or steps before entering into a contract

We may process information where this is necessary to take steps at your request before entering into a contract or to perform a contract with you.

9.3 Legal obligations

We may process personal information where necessary to comply with a legal or regulatory obligation applicable to us.

9.4 Legitimate interests

We may process information where this is necessary for legitimate interests pursued by CR Investigations Ltd or a relevant third party, provided those interests are not overridden by your rights and freedoms.

Examples may include website security, fraud prevention, maintaining business records, responding to enquiries, protecting legal rights, improving services, and managing professional relationships.

10. Marketing communications

We do not use enquiry information to send unsolicited marketing communications where such communications are not permitted by applicable law.

If we ever use personal data for direct marketing, we will do so in accordance with applicable privacy and electronic communications requirements and will provide an appropriate mechanism to object or unsubscribe.

11. Confidentiality of enquiries

We understand that enquiries concerning suspicious companies, brokers, payments and financial situations may be highly sensitive.

Information submitted through our website is treated as confidential and is handled only to the extent reasonably necessary to respond to your enquiry, assess the situation, provide requested services, comply with legal obligations, or protect our legitimate interests.

We do not intentionally disclose the fact that you have contacted us to the company, broker, platform, payment recipient or other party described in your enquiry merely because you submitted an enquiry.

12. Confidential broker verification

Where you request a broker or company verification, the initial verification is conducted without notifying the broker or company that you have requested an assessment.

We do not contact the broker, investment platform, payment recipient or other party merely because you submitted an enquiry.

If a future stage of the work may require communication with a broker, bank, payment provider, regulator, company, platform or another external organisation, we will normally discuss this with you and obtain your approval before making such contact, unless we are legally required to make the disclosure or contact without your approval.

13. Documents and evidence provided by you

You may choose to provide screenshots, correspondence, receipts, bank statements, transaction information, website addresses, wallet addresses, documents or other materials relevant to your situation.

We use such materials only to the extent reasonably necessary for the relevant assessment, investigation, communication, legal or operational purpose.

We recommend that you remove unnecessary sensitive information before submitting documents where that information is not relevant to the enquiry.

In particular, you should not send passwords, private keys, cryptocurrency seed phrases, full authentication credentials or other security secrets.

14. Sharing personal data with service providers

We may use carefully selected third-party service providers to operate our website and business.

Depending on the services actually used, these may include providers of:

• website hosting;
• server infrastructure;
• email services;
• telephone and communications services;
• customer relationship management systems;
• secure document storage;
• technical monitoring;
• security and anti-abuse services;
• analytics;
• IP geolocation services;
• website performance services;
• professional accounting or administrative services; and
• legal, compliance or professional advisers.

Third-party service providers are given access only to information that is reasonably necessary for them to provide the relevant service, subject to appropriate contractual, security or legal requirements where applicable.

15. IP lookup service

The website may use the third-party service ipapi.co to estimate a visitor’s country from an IP address for the purpose of selecting an appropriate international telephone country code.

This functionality is intended to provide a convenient user experience and is not intended to determine a precise physical location.

Use of this service may involve the transmission of technical information, such as an IP address, to the relevant service provider. The service provider may process such information in accordance with its own privacy documentation and terms.

16. Cookies

Our website may use cookies and similar technologies.

Cookies are small files or pieces of information stored on or associated with your device that can help a website remember preferences, maintain functionality, measure performance or perform other technical functions.

16.1 Necessary cookies

Necessary cookies and similar technologies may be used where required for the operation, security and functionality of the website.

These technologies may be used without consent where applicable law permits them because they are necessary to provide a service that you have requested or to operate the website.

16.2 Analytics cookies

Non-essential analytics technologies are intended to be activated only after the appropriate consent has been provided through the cookie preferences displayed on the website.

You may choose the option to allow only necessary cookies instead of accepting optional analytics technologies.

16.3 Managing cookies

You can also manage cookies through your browser settings. Disabling some cookies may affect the availability or functionality of certain website features.

17. Website security

We take reasonable technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, alteration, disclosure, destruction or other unlawful processing.

Depending on the circumstances, security measures may include:

• access controls;
• authentication mechanisms;
• server and application security measures;
• HTTPS encryption for data transmitted through the website;
• rate limiting and anti-abuse controls;
• spam and automated-submission protection;
• restricted administrative access;
• security monitoring;
• software and infrastructure updates;
• backup and recovery procedures; and
• internal procedures designed to limit unnecessary access to personal information.

However, no internet transmission, electronic storage system or website can be guaranteed to be completely secure. You should therefore use reasonable caution when submitting information online.

18. Data retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including responding to enquiries, providing services, maintaining appropriate records, complying with legal obligations, resolving disputes and establishing or defending legal claims.

The retention period may depend on:

• the nature and sensitivity of the information;
• whether an enquiry develops into a client relationship;
• whether services are provided;
• whether there is an ongoing matter or investigation;
• legal or regulatory retention requirements;
• accounting and tax obligations;
• the need to establish or defend legal claims;
• security and fraud-prevention requirements; and
• our legitimate business and record-keeping requirements.

When personal data is no longer required, we will take reasonable steps to delete it, anonymise it, or otherwise dispose of it securely, subject to any applicable legal or regulatory requirement to retain it.

19. International transfers

Some of our service providers or technical infrastructure may be located outside the United Kingdom.

Where personal data is transferred outside the UK, we will take steps to ensure that the transfer is carried out in accordance with applicable data protection requirements and that an appropriate transfer mechanism or safeguard is used where required.

Depending on the circumstances, safeguards may include an adequacy decision, appropriate contractual safeguards, or another lawful mechanism recognised under applicable data protection law.

20. Your data protection rights

Subject to applicable law and any relevant exemptions, you may have the following rights in relation to your personal data:

• Right of access — you may request a copy of personal data we hold about you.
• Right to rectification — you may ask us to correct inaccurate or incomplete information.
• Right to erasure — you may ask us to delete personal data where there is no lawful reason for us to continue processing it.
• Right to restriction — you may ask us to restrict processing in certain circumstances.
• Right to object — you may object to certain processing, including processing based on legitimate interests in circumstances provided by law.
• Right to data portability — in certain circumstances, you may request personal information in a structured, commonly used and machine-readable format.
• Right to withdraw consent — where processing is based on consent, you may withdraw that consent at any time.

These rights are not absolute and may be subject to legal exceptions or limitations.

21. How to exercise your rights

If you wish to exercise a data protection right, please contact us using the contact details provided on this website.

To protect personal information from unauthorised disclosure, we may need to verify your identity before processing certain requests.

We aim to respond to valid requests within the time required by applicable data protection law.

22. Right to complain

If you believe that your personal data has been processed unlawfully or that your data protection rights have not been respected, you have the right to raise the matter with the relevant supervisory authority.

In the United Kingdom, the relevant supervisory authority is the Information Commissioner’s Office (ICO).

You can find information about the ICO and data protection rights on its official website:

Information Commissioner's Office

23. Children’s privacy

Our website and services are intended for adults and are not directed at children.

We do not knowingly collect personal information from children where such collection is not permitted by applicable law.

If you believe that a child has provided personal information to us without appropriate authorisation, please contact us so that the matter can be reviewed.

24. Third-party websites and links

Our website may contain links to external websites, public registers, regulatory websites, payment services or other third-party resources.

A link to another website does not mean that CR Investigations Ltd controls or endorses that website.

We are not responsible for the privacy practices, content, security or policies of third-party websites. You should review the privacy policy of any external website before providing personal information to it.

25. Fraud prevention and website abuse

We may process technical and personal information where reasonably necessary to protect the website, users, company systems and services against fraud, malicious activity, automated abuse, spam, unauthorised access and other security threats.

This may include processing IP addresses, technical logs, browser information, submission metadata and information concerning suspicious or abusive activity.

Such information may be retained for an appropriate period where necessary to investigate, prevent or respond to security incidents.

26. Fraudulent or abusive enquiries

We reserve the right to take reasonable measures to identify and prevent fraudulent, malicious, misleading or abusive use of our website and services.

Where necessary, information may be used to investigate suspected abuse, protect our legal rights, comply with law enforcement or regulatory requirements, or prevent further misuse.

27. Legal disclosures

We may disclose personal information where we reasonably believe that such disclosure is necessary to:

• comply with a legal or regulatory obligation;
• respond to a valid legal process;
• comply with a lawful request from a competent authority;
• protect the rights, property or safety of CR Investigations Ltd;
• protect the rights or safety of another person;
• prevent fraud or other unlawful activity;
• establish, exercise or defend legal claims; or
• protect the security and integrity of our systems.

28. No disclosure to the other party as a standard practice

The nature of our website means that users may contact us because they are concerned about a company, broker, platform, payment recipient or another party.

We do not disclose the identity of an individual who submits an enquiry to the subject of that enquiry merely because the enquiry has been submitted.

We also do not represent that an external party has been contacted, notified, investigated or formally reported unless such action has actually been authorised and carried out.

Any statement that a third party will not be contacted should be understood subject to circumstances where disclosure is required by law or where necessary to comply with a binding legal or regulatory obligation.

29. Accuracy of information

We rely on information provided by you when conducting an initial assessment. You are responsible for ensuring that information supplied to us is accurate and not intentionally misleading.

If you discover that information you have provided is incorrect or incomplete, please notify us so that appropriate records can be updated.

30. No guarantee of financial recovery

An enquiry submitted through this website does not constitute a guarantee that funds will be recovered, a transaction will be reversed, an account will be restored, a broker will be sanctioned, or another specific result will be achieved.

Any assessment or information provided by CR Investigations Ltd depends on the facts, evidence, jurisdiction, payment method, available records, timing and other circumstances of the individual matter.

Nothing in this Privacy Policy should be interpreted as a promise or guarantee of a particular financial, legal or investigative outcome.

31. Legal and professional advice

Information provided through the website or during an initial assessment is intended to help you understand your situation and possible next steps.

Unless expressly agreed otherwise in writing, information published on this website should not be treated as individual legal advice, financial advice, investment advice or a guarantee of recovery.

Where appropriate, you may be advised to obtain independent legal, financial, tax, banking or regulatory advice.

32. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal requirements, regulatory guidance or data processing practices.

When changes are made, the updated version will be published on this page with a revised “Last updated” date.

Where required by law, we may provide additional notice or obtain consent before implementing material changes to the way we process personal data.

33. Data protection by design

Where reasonably appropriate, we seek to minimise the amount of personal information collected and limit access to information to people and service providers who require it for legitimate operational, legal or professional purposes.

We seek to avoid collecting unnecessary information through our initial enquiry process and encourage users to provide only information relevant to their situation.

34. Data minimisation

You are not required to provide more information than is reasonably necessary to understand and respond to your enquiry.

If you are unsure whether a document or piece of information is necessary, you may contact us before sending it.

35. Automated decision-making and profiling

We do not intend to make decisions producing legal or similarly significant effects solely through automated processing of information submitted through this website.

Information provided through an enquiry is reviewed in the context of the circumstances described and the available materials.

36. Data breach and security incidents

If we become aware of a personal data breach, we will assess the incident and take appropriate steps in accordance with applicable data protection law.

Where legally required, we will notify the relevant supervisory authority and affected individuals within the applicable statutory timeframe.

37. Business records

We may retain certain information as part of our ordinary business records, including records relating to enquiries, communications, agreements, invoices, payments, professional services and legal or regulatory obligations.

Such records may be retained after an enquiry has ended where there is a legitimate or legal reason to do so.

38. Payments

Where payment for services is arranged, payment processing may be performed by a third-party payment provider.

Payment providers may collect and process payment information in accordance with their own privacy policies and applicable payment regulations.

Where possible, payment card or other sensitive payment credentials should be provided directly to the relevant secure payment provider rather than submitted through general website enquiry forms.

39. Communications by telephone and email

If you provide a telephone number or email address, we may use it to respond to your enquiry, clarify information, arrange a consultation, provide requested information, manage an engagement, or communicate about services you have requested.

We may retain records of communications where reasonably necessary for service delivery, administration, security, legal compliance or dispute resolution.

40. Information provided about another person

Our website allows a person to contact us regarding circumstances involving another individual.

If you provide personal information relating to another person, you should ensure that you have a lawful basis for providing that information where required by applicable law.

You should avoid providing unnecessary information about another person and should not provide confidential information that you are not authorised to disclose.

41. Business and corporate enquiries

Where an enquiry is submitted on behalf of a company, organisation or other legal entity, we may process the personal information of individuals acting on behalf of that organisation.

Such information may include names, job titles, business email addresses, telephone numbers, correspondence and information necessary to manage the professional relationship.

42. Third-party service providers and data processors

Where a third party processes personal data on our behalf, we seek to use providers that offer appropriate technical and organisational safeguards and, where required, enter into appropriate contractual arrangements.

The specific providers used by CR Investigations Ltd may change over time as our infrastructure and operational requirements develop.

Where legally required, appropriate information about material processing arrangements will be made available to individuals exercising their data protection rights.

43. Third-party analytics

If analytics services are enabled, they may collect information about how visitors interact with the website, such as pages viewed, approximate geographic information, device characteristics, browser information and general usage patterns.

Non-essential analytics are intended to operate only where the appropriate consent has been provided.

44. Cookie preferences

When the website displays a cookie consent banner, you may choose between necessary cookies only and accepting optional analytics technologies, subject to the functionality available on the website at the time.

Your preference may be stored in your browser so that the website can remember the choice you have made.

45. Server logs

Our hosting and security infrastructure may automatically generate server logs containing technical information such as IP addresses, timestamps, requested resources, response status codes and other technical metadata.

Server logs may be used for troubleshooting, system administration, security monitoring, fraud prevention and investigation of technical incidents.

46. Contact forms and anti-spam protection

Our enquiry forms may use technical measures designed to identify automated or abusive submissions.

These measures may involve processing technical information associated with the submission, including IP address, browser information, timing and other metadata.

Such information may be retained where reasonably necessary to prevent abuse and protect the website.

47. Your responsibility when submitting information

Before submitting information, you should consider whether it is necessary for the purpose of your enquiry.

You should not submit:

• passwords;
• banking login credentials;
• one-time authentication codes;
• cryptocurrency seed phrases;
• private cryptocurrency keys;
• full payment-card security information;
• security questions and answers; or
• other credentials that could be used to access an account.

If information of this type is accidentally submitted, please contact us promptly so that the appropriate security steps can be considered.

48. Relationship with other CRI documents

This Privacy Policy should be read together with our Terms of Use and any other applicable notices or agreements published on the website.

If a specific service is governed by a separate written agreement, that agreement may contain additional provisions concerning confidentiality, records, fees, scope of work and information handling.

49. Contact information

If you have questions about this Privacy Policy, wish to exercise your data protection rights, or have a concern about how your personal data is handled, please contact CR Investigations Ltd using the current contact details published on our website.

CR Investigations Ltd
Company number: 08003102
Registered office: 167 Turners Hill, Cheshunt, Waltham Cross, Hertfordshire, EN8 9BH, United Kingdom
ICO registration: ZA427383

Email:

50. Regulatory information

CR Investigations Ltd is a company registered in the United Kingdom under company number 08003102.

The company is registered with the Information Commissioner’s Office under registration number ZA427383.

Company registration information can be independently checked through the official UK Companies House register.

ICO registration information can be independently checked through the Information Commissioner’s Office.

51. Important limitation

This Privacy Policy describes the intended handling of personal data in connection with the website and services of CR Investigations Ltd. The exact categories of data, third-party providers, retention periods, international transfer mechanisms and technical measures may depend on the systems and services actually deployed at the relevant time.

We may update this document when our data processing practices, technology, contractual arrangements or legal obligations change.

52. Effective date

This Privacy Policy is effective from 10 August 2026 and remains applicable until replaced by a newer version published on this website.