Privacy notice

Last updated · August 2026

This notice explains how Crumb collects and uses personal data — both on this website and within the Crumb platform. Crumb is a trading name of A&R Retail Group Limited, a company registered in England and Wales (company number 15955485), registered office 8 Perrys Lea, Bradley Stoke, Bristol, England, BS32 0EE ("we", "us", "Crumb").

1. Controller and processor

For enquiries made through this website and for the accounts of our direct customers, we are the data controller. For the business and employee data a customer enters into the platform to run their stores (sales, invoices, payroll, employee records), the customer is the controller and Crumb acts as their processor, handling that data only on their documented instructions under our customer agreement and data processing terms.

2. Data we collect

• Website enquiries: your name, work email, company name, approximate number of stores and anything you tell us in your message.
• Account data: the name, email and login credentials of the people you authorise to use Crumb, and your company and store details.
• Business data (as processor): sales figures synced from Subway® LiveIQ, supplier invoices, VAT records, bank transactions and nominal codes you connect or upload.
• Employee data (as processor): where you use Crumb for HR and payroll, this can include employees' names, contact details, date of birth, address, National Insurance number, bank details, right-to-work documents and employment contracts.

3. How and why we use it

• To respond to enquiries and prepare quotes — on the basis of our legitimate interest in answering people who contact us.
• To provide and support the platform — to perform our contract with you as a customer.
• To meet legal and tax obligations — for example, retaining invoice and VAT records to support Making Tax Digital and HMRC requirements.
• We do not sell your data, and we do not share it with third parties for their own marketing.

4. Where your data lives and who processes it

Crumb is hosted on Amazon Web Services in the United Kingdom (London, eu-west-2), with inbound email processed in the EU (Ireland, eu-west-1). Data is encrypted in transit and at rest, and the most sensitive employee fields (such as National Insurance and bank details) are additionally encrypted at the field level.

We rely on a small number of sub-processors:

• Amazon Web Services — hosting and storage (UK/EU).
• Resend — outbound email delivery (United States). Where email contains personal data it is transferred to the US under appropriate safeguards (Standard Contractual Clauses / the UK Addendum).
• Subway® LiveIQ — the source of the sales data we sync on your behalf (operated by Subway®, not by us).
• Google Fonts — this website loads typefaces from Google, which receives visitors' IP addresses to serve them.

5. How long we keep it

• Enquiries: for as long as needed to deal with your request and a reasonable period afterwards.
• Invoice, VAT and financial records: six years, in line with HMRC requirements.
• Employee records: for the period set by the customer as controller and applicable employment law; deleted or returned on request.

6. Your rights

Under UK GDPR you have the right to access, correct, delete, restrict or object to the processing of your personal data, and to data portability. Where Crumb acts as a processor, we will pass any such request to the relevant customer (controller) or assist them in responding. To exercise a right, contact us at sign-up@crumb.live. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).

7. Cookies

This marketing website sets no analytics or advertising cookies. The Crumb application uses a single strictly-necessary cookie to keep you signed in.

8. Contact

Questions about this notice or your data: sign-up@crumb.live.