Loading ...

Shopping cart

Free Shipping for all orders over $50

Subtotal:

$113.00
Crestline Digital

Privacy Policy

Privacy Policy

Effective Date: May 7, 2026

This Privacy Policy ("Policy") describes how Crestline Digital ("Company", "we", "us", or "our"), operating through the website www.crestlinedigital.org and located at 30 N Gould St #30975, Sheridan, WY 82801, United States, collects, uses, processes, stores, and protects personal information from our clients, website visitors, and other individuals who interact with our digital properties and services (collectively, "you" or "User").

We are committed to protecting your privacy and handling your personal information with transparency, care, and in compliance with applicable data protection laws, including but not limited to the California Consumer Privacy Act (CCPA), the General Data Protection Regulation (GDPR) where applicable, and other relevant U.S. federal and state privacy statutes.

By accessing our website or engaging our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein.

1. Information We Collect

We collect personal information in a variety of ways, depending on how you interact with us. The categories of information we may collect include:

1.1 Information You Provide Directly

  • Contact and Inquiry Information: Name, email address, phone number, company name, job title, and the content of messages submitted through our contact forms, email correspondence, or discovery calls.
  • Project and Billing Information: Business details, project requirements, billing address, and payment information necessary to process transactions. Payment data is processed through secure, PCI-compliant third-party payment processors. We do not store full credit card numbers on our servers.
  • Account Information: If you create an account or client portal access, we collect your username, password (stored in encrypted form), and account preferences.
  • Support Requests: Records of communications when you contact us for support, including the nature of your inquiry and our responses.

1.2 Information Collected Automatically

When you visit our website, we and our service providers may automatically collect certain information through cookies, web beacons, server logs, and similar tracking technologies, including:

  • Technical Data: IP address, browser type and version, operating system, device identifiers, screen resolution, and language settings.
  • Usage Data: Pages visited, time spent on pages, links clicked, referring URLs, exit pages, and overall navigation patterns.
  • Location Data: General geographic location derived from your IP address (country, city-level). We do not collect precise GPS coordinates.
  • Session Data: Session identifiers, click paths, and interaction heatmaps for the purpose of analyzing and improving user experience.

1.3 Information from Third Parties

We may receive information about you from third-party sources, including:

  • Social Media Platforms: If you interact with our profiles on platforms such as LinkedIn, Instagram, Facebook, or others, we may receive information consistent with your privacy settings on those platforms.
  • Advertising and Analytics Partners: We work with third-party advertising networks and analytics providers (e.g., Google Analytics, Meta Pixel) that may provide aggregated and anonymized insights about how users interact with our website.
  • Referral Partners: If a referral partner or business associate introduces you to us, they may provide your contact details to initiate a business relationship.

2. Legal Basis for Processing (GDPR)

For users located in the European Economic Area (EEA), the United Kingdom, or other jurisdictions where a legal basis for data processing is required, we rely on the following lawful bases:

  • Contractual Necessity: Processing is necessary to fulfil our contractual obligations to you, such as delivering services you have engaged us for.
  • Legitimate Interests: Processing is necessary for our legitimate business interests, including improving our services, preventing fraud, and marketing to prospective clients, provided these interests do not override your fundamental rights.
  • Consent: Where we rely on your consent — such as for marketing emails or the use of non-essential cookies — you have the right to withdraw consent at any time without affecting the lawfulness of prior processing.
  • Legal Compliance: Processing may be necessary to comply with applicable legal obligations, such as tax record retention requirements.

3. How We Use Your Information

We use the personal information we collect for the following purposes:

3.1 Service Delivery

  • To communicate with you regarding project inquiries, proposals, and ongoing engagements.
  • To process payments and manage billing and invoicing.
  • To deliver, manage, and improve the services outlined in your project agreement.
  • To provide technical support and respond to client requests.

3.2 Business Operations

  • To maintain accurate records of client engagements and contractual relationships.
  • To conduct internal audits, financial reporting, and compliance monitoring.
  • To enforce our Terms and Conditions and other contractual rights.

3.3 Marketing and Communications

  • To send you newsletters, service updates, promotional materials, and case studies — but only where you have given consent or where permitted by applicable law.
  • To retarget website visitors through advertising platforms with relevant content about our services.
  • To measure the effectiveness of our marketing campaigns and optimize our outreach.

3.4 Website Improvement and Analytics

  • To analyze user behavior and preferences to enhance our website's usability and content.
  • To identify and resolve technical issues, security vulnerabilities, or performance bottlenecks.
  • To conduct A/B testing and optimize user journeys across our digital properties.

3.5 Legal and Safety Purposes

  • To comply with applicable laws, regulations, and legal proceedings.
  • To protect the rights, property, and safety of Crestline Digital, our clients, and the public.
  • To investigate and prevent fraud, unauthorized access, or other illegal activities.

4. Cookies and Tracking Technologies

4.1 What Are Cookies?

Cookies are small text files placed on your device by a website to remember your preferences and behavior. We use cookies and similar technologies (including web beacons, pixels, and local storage) to operate our website effectively and provide a personalized experience.

4.2 Types of Cookies We Use

  • Strictly Necessary Cookies: Essential for the website to function. These cannot be disabled as they are required for core functionality such as security, session management, and accessibility.
  • Performance and Analytics Cookies: These collect anonymized information about how visitors use our website (e.g., Google Analytics). They help us understand which pages are most popular and how users navigate our site.
  • Functional Cookies: These allow the website to remember choices you make (e.g., language or region preferences) to provide enhanced, personalized features.
  • Targeting and Advertising Cookies: These are set by our advertising partners (e.g., Google Ads, Meta Ads) to deliver advertisements relevant to your interests and to measure the effectiveness of ad campaigns.

4.3 Managing Cookies

You can manage, restrict, or delete cookies through your browser settings at any time. Disabling certain cookies may affect the functionality of our website. For comprehensive cookie management, we recommend using browser-level controls or a consent management tool if provided on our site. You may also opt out of interest-based advertising through the Network Advertising Initiative (NAI) opt-out tool at www.networkadvertising.org.

5. How We Share Your Information

Crestline Digital does not sell, rent, or trade your personal information to any third parties for their own commercial purposes. We may share your information only in the following circumstances:

5.1 Service Providers and Vendors

We engage trusted third-party service providers to perform functions on our behalf, including payment processing, cloud hosting, email delivery, analytics, CRM management, and project management tools. These providers have access to your information only as necessary to perform their services and are contractually obligated to maintain its confidentiality and security.

5.2 Business Partners

In some cases, we may collaborate with specialist sub-contractors, freelancers, or partner agencies to deliver certain project components. These partners are bound by non-disclosure agreements and are permitted to use your information only for the purposes of the project.

5.3 Legal Requirements

We may disclose your information if we are required to do so by law, court order, subpoena, or governmental authority, or if we believe in good faith that disclosure is necessary to: (a) comply with a legal obligation; (b) protect and defend our legal rights or property; (c) prevent or investigate wrongdoing; or (d) protect the safety of our clients, the public, or others.

5.4 Business Transfers

In the event that Crestline Digital undergoes a merger, acquisition, restructuring, or sale of all or a portion of its assets, your personal information may be transferred to the acquiring or surviving entity as part of that transaction. We will notify you via email or a prominent notice on our website prior to any such transfer, and you will have the option to request deletion of your data if you do not consent to the transfer.

5.5 Aggregate and Anonymized Data

We may share aggregated, de-identified, or anonymized information — which cannot reasonably be used to identify you — with partners, industry bodies, or in public-facing reports, for the purposes of research, analysis, and business development.

6. Data Retention

We retain your personal information for as long as is necessary to fulfil the purposes described in this Policy, unless a longer retention period is required or permitted by law. The specific retention periods we apply are:

  • Client project and billing records are retained for a minimum of seven (7) years following the completion of the project, in compliance with financial and tax record-keeping requirements.
  • Marketing and communication data (e.g., newsletter subscribers) is retained until you withdraw consent or opt out, after which your data will be deleted or anonymized within thirty (30) days.
  • Website analytics data is retained in anonymized form and may be held indefinitely for trend analysis purposes.
  • Support correspondence is retained for three (3) years following the resolution of the matter.

Upon expiration of the applicable retention period, personal data is securely deleted or anonymized in accordance with our internal data disposal procedures.

7. Data Security

Crestline Digital employs industry-standard technical, administrative, and physical safeguards to protect your personal information from unauthorized access, disclosure, alteration, and destruction. These measures include:

  • Secure Sockets Layer (SSL) / Transport Layer Security (TLS) encryption for data transmitted to and from our website.
  • Access controls ensuring that personal data is accessible only to authorized personnel on a need-to-know basis.
  • Regular security assessments, vulnerability testing, and software patching.
  • Secure and redundant cloud infrastructure managed by reputable hosting providers.
  • Employee training on data protection and information security best practices.

While we take reasonable and appropriate steps to protect your information, no security system is completely impenetrable. We cannot guarantee absolute security of your data, and you acknowledge and accept this inherent risk. In the event of a data breach that affects your rights and freedoms, we will notify you and the relevant supervisory authorities as required by applicable law.

8. Your Privacy Rights

Depending on your location and applicable law, you may have the following rights with respect to your personal information:

8.1 Rights Under GDPR (EEA / UK Users)

  • Right of Access: You have the right to request a copy of the personal data we hold about you.
  • Right to Rectification: You may request that we correct inaccurate or incomplete information about you.
  • Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data, subject to certain legal exceptions (e.g., where retention is required by law).
  • Right to Restriction of Processing: You may request that we restrict how we process your data in certain circumstances.
  • Right to Data Portability: You may request that your data be provided to you or a third party in a structured, commonly used, machine-readable format.
  • Right to Object: You may object to our processing of your data for direct marketing or where processing is based on our legitimate interests.
  • Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting prior processing.

8.2 Rights Under CCPA (California Residents)

If you are a California resident, you have the following additional rights under the California Consumer Privacy Act:

  • Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you, and the purposes for which it was used.
  • Right to Delete: You may request deletion of personal information we have collected about you, subject to certain exceptions.
  • Right to Opt-Out of Sale: We do not sell personal information. If this changes, we will provide you with an opportunity to opt out.
  • Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

8.3 How to Exercise Your Rights

To exercise any of the rights described above, please submit a written request to us at the contact details provided in Section 13 of this Policy. We will respond to your request within thirty (30) days (or as required by applicable law) and may ask you to verify your identity before processing your request. There is no charge for exercising your rights, unless your request is manifestly unfounded or excessive, in which case we may charge a reasonable fee.

9. Children's Privacy

Our website and services are not directed at children under the age of thirteen (13), and we do not knowingly collect personal information from children under that age. If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately. We will take prompt steps to delete such information from our records. Users between the ages of thirteen (13) and seventeen (17) may use our website only with verifiable parental or guardian consent. Crestline Digital does not knowingly engage minors as clients for professional services.

10. International Data Transfers

Crestline Digital is based in the United States. If you are accessing our services from outside the United States, please be aware that your personal information may be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction. For transfers from the European Economic Area (EEA) or United Kingdom to the United States, we implement appropriate safeguards including Standard Contractual Clauses (SCCs) approved by the European Commission, or other legally recognized transfer mechanisms, to ensure that your personal data receives an adequate level of protection.

11. Third-Party Links and Services

Our website may contain links to third-party websites, social media platforms, tools, and services. These third-party sites have their own privacy policies, and we are not responsible for their practices or content. We encourage you to review the privacy policies of any third-party sites you visit. The presence of a link on our website does not constitute an endorsement of the third party's privacy practices. When you use third-party integrations in the context of our services (e.g., Google Ads, Meta Business Suite, Mailchimp), those services operate under their own privacy policies and data processing agreements. We will notify you when third-party tools with material data implications are used as part of your project.

12. Changes to This Privacy Policy

We reserve the right to amend or update this Privacy Policy at any time to reflect changes in our practices, legal obligations, or the services we offer. The revised Policy will be posted on our website with an updated "Effective Date" at the top of the document. Where changes are material — meaning they significantly affect your rights or the way we use your personal information — we will notify you by email (using the email address you provided) or through a prominent notice on our website at least thirty (30) days before the changes take effect. Your continued use of our website or services after the effective date of the revised Policy constitutes your acceptance of those changes. We encourage you to review this Policy periodically to stay informed about how we are protecting your information.

13. Contact Us & Data Protection Inquiries

If you have any questions, concerns, or complaints regarding this Privacy Policy, the way we handle your personal information, or if you wish to exercise any of your data subject rights, please reach out to us using the information below:

Crestline Digital — Privacy & Data Protection

30 N Gould St #30975, Sheridan, WY 82801, United States

Phone: +1 (307) 310-6902

Email: contact@crestlinedigital.org

Website: www.crestlinedigital.org

We take all privacy inquiries seriously and will acknowledge receipt of your request within five (5) business days. We are committed to resolving concerns in a timely, fair, and transparent manner. If you are located in the EEA or the UK and are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.