CRESCITA Privacy Policy

Effective Date: 7/16/2025

Last Updated: 8/24/2025

1. Introduction

CRESCITA ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website, crescitacg.com, or use our marketing, consulting, and IT implementation services.

2. Information We Collect

2.1 Information You Provide Directly

We collect information you voluntarily provide through:

• Contact Forms: Name, company name, email address, phone number, and message content

• Service Inquiries: Business information, project details, and communication preferences

• Social Media Interactions: Information from social media platforms when you engage with our content

IMPORTANT: By submitting any information through our forms or website, you represent and warrant that:

• You are the rightful owner of the email address and information provided

• You have the legal authority to provide this information and consent to marketing communications

• The information submitted is accurate and belongs to you or your organization

• You are not submitting information on behalf of another person without their explicit consent

• We are not responsible for information submitted by third parties without authorization.

2.2 Information Collected Automatically

• Usage Data: Pages visited, time spent on our website, referring websites, browser type, device information

• Log Data: IP addresses, access times, and technical information about your device and connection

• Cookies and Tracking Technologies: We may use cookies and similar technologies to enhance your experience (see Cookie Policy below)

3. How We Use Your Information

We use your personal information for the following purposes:

3.1 Service Provision

• Respond to your inquiries and provide the requested services

• Deliver marketing, consulting, and IT implementation services

• Provide customer support and technical assistance

3.2 Business Operations

• Marketing Communications: Send you relevant marketing materials, newsletters, and service updates

• Customer Segmentation: Organize contacts by company type, industry, and service needs

• Sales Management: Assign appropriate sales representatives based on your business profile

• Analytics and Improvement: Analyze usage patterns to improve our services and website functionality

• Campaign Management: Develop and execute targeted marketing campaigns

3.3 Legal Basis for Processing (EU Users)

• Consent: When you submit contact forms, you provide explicit consent to our marketing communications by agreeing to our marketing policies

• Legitimate Interest: We also process B2B contact information for direct marketing purposes based on our legitimate business interests

• Contract Performance: To fulfill our service agreements with you

4. Information Sharing and Disclosure

4.1 Third-Party Service Providers

We may share your information with trusted third parties who assist us in:

• CRM Services: CRM for customer relationship management

• Media + Email Marketing: Authorized email service providers for marketing communications

• Analytics: Service providers for website and marketing analytics

• IT Services: Technical support and hosting providers

4.2 What We Do NOT Do

• We do not sell your personal information

• We do not rent or lease your email addresses

4.3 Legal Requirements

We may disclose your information when required by law, court order, or to protect our rights, property, or safety.

5. Data Storage and Security

5.1 Data Storage

• Primary storage in CRM (secure cloud environment)

• Data may be processed and stored in the United States and other countries where our service providers operate

5.2 Security Measures

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

6. Your Privacy Rights

6.1 All Users

• Opt-Out: Unsubscribe from marketing communications at any time (automatically processed via "do not email" flag)

• Access: Request information about what personal data we have about you

• Correction: Request correction of inaccurate personal information

• Deletion: Request deletion of non-essential personal information (subject to business records retention requirements)

6.2 EU Users (GDPR Rights)

• Right to Portability: Receive your personal data in a structured, machine-readable format

• Right to Object: Object to processing based on legitimate interests

• Right to Restrict Processing: Limit how we process your personal data

• Right to Lodge a Complaint: File a complaint with your local data protection authority

6.3 California Users (CCPA Rights)

• Right to Know: Request disclosure of personal information collected, used, or shared.

• Right to Delete: Request deletion of non-essential personal information (business records from actual interactions, contracts, communications, demos, quotes, and legal documentation will be retained)

• Right to Opt-Out: Opt out of the sale of personal information (we do not sell data)

• Right to Non-Discrimination: Equal service and pricing regardless of privacy choices

• Important Note: We maintain business records of all actual interactions, communications, contracts, and transactions for legal and business purposes, regardless of deletion requests.

7. Marketing Communications

7.1 B2B Marketing and Consent

• Explicit Consent: When you submit contact forms on our website, you agree to our marketing policies and consent to receive marketing communications

• Authorization Requirement: By submitting information, you warrant that you are authorized to provide that information and consent on behalf of yourself or your organization

• Consent Documentation: We maintain records of your consent for legal protection and compliance purposes

• Legitimate Interest: We also send marketing communications to business email addresses based on legitimate business interests

• All marketing emails include clear opt-out mechanisms.

• Real-Time Opt-Out Processing: When you opt out via email, our database is automatically updated in real-time, and your account is immediately flagged "do not email".

• Immediate Compliance: Opt-out requests are processed instantly - no delays, no manual processing required

• Re-Engagement Options: If you previously opted out but wish to receive marketing communications again, you may contact us to request re-engagement

• We respect all opt-out requests immediately and permanently, and all re-engagement requests when verified.

7.2 Communication Channels

• Email: Primary marketing communication channel

• SMS: May be used for service notifications (with consent)

• WhatsApp: May be used for customer support if you initiate contact

8. Cookies and Tracking Technologies

8.1 Current Use

We may use cookies and similar technologies to:

• Remember your preferences

• Analyze website traffic and usage patterns

• Improve user experience

8.2 Cookie Consent

We will obtain appropriate consent for non-essential cookies as required by applicable law.

9. Data Retention

9.1 General Retention Policy

We retain your personal information for business and legal purposes, including:

• Active Business Records: Maintained for ongoing business relationships and potential future opportunities

• Legal Compliance: Records kept to comply with legal, tax, and regulatory requirements

• Contract-Related Information: Data tied to active or completed contracts is retained for legal and business purposes

9.2 Deletion Requests and Business Records

• Real-Time Marketing Suppression: When you opt out of marketing communications via email, our database is automatically updated in real-time, and your account is immediately flagged "do not email"

• Re-Engagement Process: If you previously opted out but wish to receive marketing communications again, you may contact us directly to request removal of the "do not email" flag

• Consent Records: We retain records of your original consent to marketing communications for legal protection, even after opt-out

• Business Records Retention: We retain business records for legitimate legal and business purposes, including:

  • Email conversations and communications

  • Service inquiries and consultations

  • Contracts and agreements

  • Demos and presentations provided

  • Quotes and proposals

  • Payment and billing records

  • Project documentation

• Legal Protection: These business records are maintained regardless of deletion requests to protect our legal interests, comply with regulatory requirements, and fulfill contractual obligations

• What Can Be Deleted: Marketing preferences, behavioral tracking data, and non-essential profile information may be deleted upon request.

• What Cannot Be Deleted: Any information related to actual business interactions, transactions, contracts, communications, or consent records cannot be deleted due to legal and business requirements.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

11. Children's Privacy

Our services are intended for businesses and individuals 18 years or older. We do not knowingly collect personal information from children under 18.

12. Social Media Integration

When you interact with our social media profiles or use social media features on our website, information may be shared with the respective social media platform according to their privacy policies.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of material changes by posting the updated policy on our website and updating the "Last Updated" date.

14. Contact Information

For privacy-related questions or if you are in the EU and have questions, requests, or concerns, please contact us through our Contact Us form at crescitacg.com