Privacy Policy

1. Introduction

Crescera ("we", "us", or "our") is committed to protecting the privacy and security of the individuals and organisations that use our website and services (collectively, the "Services"). This policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us.

By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the terms of this policy, please do not use our Services.

2. Information We Collect

We may collect and process the following categories of information:

• Account and Identity Data: name, email address, business or organisational affiliation, and credentials used to access the platform.
• Usage Data: information about how you interact with our website and platform, including pages visited, features used, session duration, and referring URLs.
• Technical Data: IP address, browser type and version, device identifiers, operating system, and time zone settings, typically collected via server logs and cookies.
• Communications Data: information you provide when contacting us, including support requests, feedback, or correspondence.
• Transactional Data: details relating to any subscriptions, billing arrangements, or services requested through our platform, where applicable.

We do not knowingly collect special category data (such as health or biometric information) through our Services, and we ask that you do not submit such data to us.

3. How We Collect Information

We collect information through the following means:

• Directly from you, when you register for an account, submit a form, or communicate with us.
• Automatically, as you navigate our website, through cookies, log files, and similar tracking technologies.
• From third parties, such as analytics providers or infrastructure partners, where relevant to the operation of our Services.

4. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, operate, and maintain our Services and platform functionality.
• To manage your account and respond to enquiries or support requests.
• To monitor, analyse, and improve the performance, security, and usability of our Services.
• To detect, investigate, and prevent fraudulent activity, security incidents, or unauthorised access.
• To comply with applicable legal, regulatory, or contractual obligations.
• To send administrative communications, such as updates to our policies or notices regarding the Services, where necessary.

We do not sell personal information to third parties.

5. Legal Basis for Processing

Where applicable data protection law requires a legal basis for processing, we rely on one or more of the following:

• Contractual necessity — to provide the Services you have requested or agreed to.
• Legitimate interests — to operate, secure, and improve our Services, provided these interests are not overridden by your rights.
• Legal obligation — to comply with applicable laws and regulatory requirements.
• Consent — where you have given specific consent, such as for certain cookies or marketing communications.

6. Data Retention

We retain personal information only for as long as is necessary to fulfil the purposes outlined in this policy, including to satisfy any legal, accounting, or reporting requirements. Retention periods vary depending on the type of data and the context in which it was collected. Where information is no longer required, we take reasonable steps to securely delete or anonymise it.

7. How We Share Information

We may share information with:

• Service providers and infrastructure partners who assist in operating our platform, such as hosting providers, under appropriate confidentiality and data processing arrangements.
• Regulators and authorities, where disclosure is required by law or in response to valid legal process.
• Professional advisers, including legal, accounting, or security consultants, where necessary to support our operations.
• Successor entities, in the event of a merger, acquisition, or sale of assets, subject to equivalent privacy protections.

We require any third party with access to personal data to maintain appropriate confidentiality and security standards consistent with this policy.

8. International Data Transfers

Where information is processed or stored on infrastructure located outside of the jurisdiction in which you reside, we take steps intended to ensure that such data receives an adequate level of protection, consistent with applicable data protection law.

9. Data Security

We implement technical and organisational measures designed to protect personal information against unauthorised access, alteration, disclosure, or destruction. These measures include access controls, encryption of data in transit, and monitoring of our infrastructure. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Cookies and Tracking Technologies

Our website may use cookies and similar technologies to distinguish you from other users, remember your preferences, and analyse how our Services are used. You can configure your browser to refuse some or all cookies, or to alert you when cookies are being set. Please note that disabling cookies may affect the functionality of certain features.

11. Your Rights

Depending on your jurisdiction, you may have certain rights in relation to your personal information, which may include the right to:

• Request access to the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your personal data, subject to legal exceptions.
• Object to or restrict certain processing of your data.
• Request a copy of your data in a portable format.
• Withdraw consent, where processing is based on consent.

To exercise any of these rights, please contact us using the details provided on our Contact page. We may need to verify your identity before responding to such requests.

12. Children's Privacy

Our Services are intended for business and institutional use and are not directed at individuals under the age of 18. We do not knowingly collect personal information from children, and we ask that such information not be submitted to us.

13. Third-Party Links

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices or content of such third parties, and we encourage you to review their privacy policies before providing any personal information.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will post any updates on this page and revise the "Last updated" date accordingly. We encourage you to review this policy periodically.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or our data practices, please get in touch via the details listed on our Contact page.