Who we are
CRESTOZ is a digital services studio operating from Tamil Nadu, India, providing website, software, automation and ongoing technology services. This Privacy Policy explains how CRESTOZ (“CRESTOZ”, “we”, “us” or “our”) handles personal information when you visit our website, contact us, request a quotation or consultation, or otherwise communicate with us.
For privacy questions or requests, contact us at hello@crestoz.com.
Information we collect
Depending on how you interact with CRESTOZ, we may collect:
- Identity and contact information — such as your name, email address, country, phone number when provided, and preferred contact method.
- Project and enquiry information — such as the service or sub-service selected, project name, project brief, existing website or project URL, requirements, budget/timeline information if supplied, and other details you choose to include.
- Correspondence — messages and records of communications with us by email, phone, WhatsApp or another channel you choose to use.
- Technical information — standard request, device, browser, IP-address, security and diagnostic information that may be processed by our hosting, infrastructure or security providers when you access the website.
Please do not send sensitive personal information, passwords, financial credentials or confidential third-party data through the general enquiry form unless we have specifically asked for it and an appropriate secure method has been agreed.
How we use information
We use personal information only where reasonably necessary to:
- receive, review and respond to enquiries;
- prepare quotations, proposals, consultations and project discussions;
- communicate about requested or contracted services;
- deliver, administer and support client work;
- maintain appropriate business, project and transaction records;
- operate, secure, troubleshoot and improve our website and services;
- prevent misuse, fraud, spam or security incidents; and
- comply with legal, regulatory, accounting or contractual obligations.
We do not sell personal information. We do not use enquiry information for unrelated advertising or behavioural profiling.
Legal bases where applicable
Privacy laws differ by location. Where a law such as the UK GDPR requires us to identify a legal basis, the basis will depend on the context and may include:
- taking steps at your request before entering into a contract, for example when you ask for a quotation or consultation;
- performing a contract with you;
- our legitimate interests in responding to enquiries, operating our business, improving our services and protecting our website, provided those interests are not overridden by your rights;
- compliance with a legal obligation; or
- your consent where consent is required.
International processing and transfers
CRESTOZ serves clients in more than one country and uses online service providers that may process information in different jurisdictions. As a result, personal information may be processed outside the country in which you are located.
Where applicable law requires specific safeguards for an international transfer, we will rely on appropriate contractual, legal or provider mechanisms available for that transfer.
How long we keep information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected and for legitimate business, legal, accounting, security or dispute-resolution needs.
Enquiry information that does not become an active project will be reviewed periodically and removed or anonymised when it is no longer reasonably needed. Client and transaction records may be retained for longer where required by applicable tax, accounting, contractual or legal obligations. Retention can therefore vary by record type and jurisdiction.
Security
We use reasonable technical and organisational measures intended to protect personal information against unauthorised access, alteration, disclosure, loss or misuse. However, no website, internet transmission or storage system can be guaranteed to be completely secure or continuously available.
If you believe information you provided to CRESTOZ has been affected by a security issue, contact us promptly at hello@crestoz.com.
Your privacy rights
Depending on the law that applies to you and to the particular processing, you may have rights concerning your personal information. These may include rights to request access, correction, deletion, restriction, portability or objection, and to withdraw consent where processing is based on consent.
To make a privacy request, email hello@crestoz.com. We may need to verify your identity before acting on a request. Some rights are subject to legal exceptions or retention requirements.
Where UK data-protection law applies, you may also have the right to complain to the UK Information Commissioner's Office (ICO). Where another privacy regulator has jurisdiction, you may have a right to complain to that regulator.
Third-party websites and services
Our website may link to third-party websites, social networks, client websites or communication services. CRESTOZ does not control the privacy practices of those third parties. When you leave our website, review the privacy information provided by the service you are using.
Children
CRESTOZ services are intended for businesses, organisations and people seeking professional digital services. The website is not directed at children and we do not knowingly request personal information from children through the project enquiry process.
Changes to this policy
We may update this Privacy Policy when our website, service providers, processing activities or legal obligations change. The latest version will be published on this page with an updated date. Material changes will be brought to users' attention where appropriate.
Website use is also subject to our Terms of Use.
Talk to CRESTOZ.
If you have a privacy, legal-page or website-use question, email us and we will respond as soon as reasonably possible.