Last updated: 15 September 2026
1. Who we are
Cruxx is a trading name of Russell Williams Limited, a company registered in England and Wales with company number 11841858, whose registered office is at 3-5 Eastgate, Louth, Lincolnshire, England, LN11 9NB. VAT registration number 323761217.
We are the controller of the personal data we collect through thisiscruxx.com and in the course of our business relationships. You can contact us about anything in this notice at privacy@thisiscruxx.com, or in writing to 3-5 Eastgate, Louth, Lincolnshire, LN11 9NB. We are registered with the Information Commissioner’s Office under registration number ZA833669.
If you are a candidate or a prospective candidate, our Candidate Privacy Notice at thisiscruxx.com/candidate-privacy-notice explains how we handle information about you. It takes precedence over this notice.
2. What this notice covers
Personal data we collect when you visit thisiscruxx.com, complete one of our forms, subscribe to our content, listen to our podcast, attend one of our events, apply to join Medtexx, or deal with us as a client, investor, supplier or other business contact.
3. What we collect, why, and our lawful basis
| What | Why | Lawful basis |
| Name, business email, telephone number, employer, job title, LinkedIn profile, and the content of your enquiry, when you complete a form on our site | Responding to you and discussing whether we can help | Legitimate interests; steps prior to entering a contract |
| Contact and role details of client and prospect contacts | Managing the relationship, delivering searches, business development | Legitimate interests; performance of a contract |
| Billing and payment details of clients and suppliers | Invoicing, credit control and accounting | Performance of a contract; legal obligation |
| Email address and preferences, where you subscribe | Sending market intelligence, podcast notifications and event invitations | Consent, or the soft opt-in under regulation 22 of the Privacy and Electronic Communications Regulations 2003 where you are an existing business contact |
| Details you provide when applying to join Medtexx | Assessing and managing your membership | Performance of a contract; legitimate interests |
| Details you provide about a capital raise | Discussing whether and how we can assist | Legitimate interests; steps prior to entering a contract |
| Usage data — IP address, device and browser type, pages visited, time and duration, referring source | Operating and securing the site, and understanding how it is used | Legitimate interests for essential and security purposes; consent for analytics and marketing cookies |
| Records of our correspondence with you | Managing the relationship, and establishing, exercising or defending legal claims | Legitimate interests |
Where we rely on legitimate interests we have carried out a balancing assessment, and you can object to that processing — see section 7.
Submitting a form on our site does not constitute agreement to this notice. This notice tells you what we do with your information; it is not a contract and we do not ask you to accept it.
4. Cookies
Non-essential cookies are set only after you consent through our cookie banner. You can change or withdraw your consent at any time using the Cookie settings link in the footer of our site.
Our Cookie Notice at thisiscruxx.com/cookie-notice lists each cookie we use, its purpose, its provider and how long it lasts.
5. Who we share it with
- Our service providers, who process your data on our instructions under written terms — our website host, customer relationship management system, email and office software, marketing and mailing platform, analytics provider, event and podcast platforms, and IT support. We keep a full list and can tell you who they are on request.
- Our professional advisers — lawyers, accountants, insurers and auditors, where necessary.
- Regulators, courts and law enforcement, where we are required to disclose.
- A buyer or successor, if our business is sold or reorganised.
We do not sell your personal data.
6. Sending data outside the UK
Some of our service providers are located outside the UK. Where a transfer is not to a country with UK adequacy status, we rely on the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with a transfer risk assessment. You can ask us for details at privacy@thisiscruxx.com.
7. Your rights
You have the right to be told what we hold about you, to access a copy of it, to have inaccurate data corrected, to have your data erased where we no longer have a basis to hold it, to restrict our processing while a dispute is resolved, to object to processing based on legitimate interests, to object to direct marketing at any time, to portability of data you provided where processing is based on consent or contract, and to withdraw consent where we relied on it.
To exercise any of these, contact privacy@thisiscruxx.com. We will respond within one month and will tell you if we need longer.
You can complain to the Information Commissioner’s Office at ico.org.uk, or on 0303 123 1113. We would rather you came to us first so we can put it right.
8. How long we keep it
| Data | Retention |
| Enquiries that do not progress | 12 months from last contact |
| Client and supplier relationship records | 6 years from the end of the relationship |
| Billing and accounting records | 6 years, to meet statutory requirements |
| Marketing subscriptions | Until you unsubscribe, after which we keep a suppression record so we do not contact you again |
| Medtexx membership records | 6 years from the end of membership |
| Website usage data | 14 months |
9. Security
Access to personal data is limited to those who need it. Our measures include multi-factor authentication on email and our core systems, encryption in transit and at rest, role-based access controls, managed devices, due diligence on our suppliers, and staff training. We have a procedure for identifying, investigating and reporting personal data breaches.
10. Children
Our website and services are directed at business professionals and are not intended for children. We do not knowingly collect personal data relating to children.
11. Changes
We may update this notice from time to time. The current version is always the one on this page, and the date at the top tells you when it last changed.