Summary
- We collect the details you send us through our contact form or by email, the information needed to deliver services you order, and basic analytics about how our website is used.
- We use this information to reply to you, deliver and bill for services, run and improve the website, and meet legal obligations.
- We do not sell your personal information, and we do not use advertising or cross-site tracking cookies on this website.
- Depending on where you live, you can ask to access, correct, or delete your information. Email biz@crecso.com.
1. Who we are
This Privacy Policy explains how Crecso ("Crecso", "we", "us", or "our") collects, uses, shares, and protects personal information when you visit www.crecso.com (the "website"), contact us, pitch an article to us, or use our services.
Crecso is operated by [Placeholder: legal business name], [Placeholder: registered business address]. For personal information covered by this policy, we are the "data controller" (or "data fiduciary" under India's Digital Personal Data Protection Act, 2023), except where we process information on behalf of a client, as explained in section 9.
You can contact us about privacy at biz@crecso.com.
2. Information we collect
Information you give us
- Enquiries and quote requests. When you use our contact form, we collect your full name, work email, company or website, phone number (optional), the service you are interested in, your budget range, your message, and your confirmation that we may use these details to respond.
- Emails and calls. Anything you choose to share when you email us or speak with us.
- Guest post pitches. If you pitch an article through our Write for Us page, we collect your name, email address, pitch, draft, author bio, and any links you provide.
- Client and project information. When you order services, we collect contact and billing details, the websites and pages you want us to work on, content briefs and approvals, and, for WordPress work, access credentials you provide for your website, hosting, or related accounts.
- Newsletter or updates. If you enter your email address to receive updates from us, we collect that email address.
Information collected automatically
- Analytics. We use Statcounter to understand how visitors use the website. Statcounter records information such as your IP address, browser type, operating system, screen resolution, the page you came from, the pages you view, and the date and time of your visit, and uses a cookie to tell new visitors from returning ones.
- Server logs. Our hosting provider automatically logs technical information such as IP addresses, requested pages, and browser details to operate and secure the website.
- Fonts. The website loads fonts from Google Fonts, which means your browser connects to Google's servers and shares your IP address with Google when a page loads.
Information from other sources
- Publishers and editors. To place guest posts, we find business contact details of website owners, editors, and publishers from public sources, such as their websites and professional profiles.
- Website metrics. We use SEO tools to review publicly available metrics about websites, such as estimated traffic and link data. These metrics describe websites rather than individuals.
3. How we use information and our legal bases
We use personal information for the purposes below. Where the EU or UK General Data Protection Regulation (GDPR) applies, we rely on the legal basis shown.
| Purpose | Legal basis (GDPR) |
|---|---|
| Responding to enquiries, preparing quotes, and discussing your needs | Steps taken at your request before entering a contract; our legitimate interest in responding to business enquiries |
| Delivering services, managing projects, reporting, and providing support | Performance of a contract |
| Invoicing, accounting, and tax records | Legal obligation; performance of a contract |
| Contacting publishers and editors about guest post placements | Our legitimate interest in running our business and delivering client campaigns |
| Reviewing and responding to guest post pitches | Steps taken at your request; legitimate interest |
| Website analytics and improvement | Legitimate interest in understanding how the website is used, or consent where the law requires it |
| Sending updates you asked to receive | Consent, which you can withdraw at any time |
| Security, fraud prevention, and protecting our legal rights | Legitimate interest; legal obligation |
Where India's Digital Personal Data Protection Act, 2023 applies, we process personal data on the basis of your consent or for legitimate uses permitted by that law, such as when you voluntarily provide information for a specific purpose.
6. International transfers
Our team is based in India, and we work with clients in the United States, the United Kingdom, India, and other countries. Your information may be processed in India and in other countries where we or our service providers operate, which may have different data protection laws from your country. Where the law requires safeguards for these transfers, we use recognized mechanisms such as standard contractual clauses.
7. How long we keep information
We keep personal information only as long as needed for the purpose it was collected for:
- Enquiries that do not lead to work are kept for as long as needed to respond and follow up, and then deleted or anonymized.
- Client, project, and billing records are kept for the length of the engagement and afterward for as long as required by tax, accounting, and other laws, or to handle legal claims.
- Website credentials you give us for WordPress work are used only during the engagement, and we ask you to change or revoke them when it ends.
- Analytics data is kept in aggregate form to show trends over time.
8. How we protect information
We use reasonable technical and organizational measures to protect personal information, including encrypted connections to the website, access controls, and limiting access to people who need it. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a breach affects your personal information, we will notify you and the relevant authorities where the law requires it.
9. Information we handle for clients
When we work on a client's website, such as WordPress maintenance or development, we may have access to personal information of that client's own customers or users. In that case, we process it only on the client's instructions and for the purpose of providing the service, and the client's own privacy policy applies to that information. White-label agency partners are responsible for informing their own clients about our role.
10. Your privacy rights
Your rights depend on where you live and which laws apply. To use any of them, email biz@crecso.com. We may need to verify your identity before responding, and we will respond within the time the applicable law requires. We will not discriminate against you for using your rights.
European Economic Area and United Kingdom
You can ask to access, correct, or delete your personal information, restrict or object to how we use it, receive a copy in a portable format, and withdraw consent at any time. You can also complain to your local data protection authority; in the UK, that is the Information Commissioner's Office (ICO).
United States
Residents of California and other states with consumer privacy laws may have rights, where those laws apply to us, to know what personal information we collect and how we use and disclose it, to access, correct, or delete it, and to opt out of the sale or sharing of personal information. As stated above, we do not sell personal information or share it for cross-context behavioral advertising. You may use an authorized agent to make a request where the law allows.
India
Under the Digital Personal Data Protection Act, 2023, you can ask for a summary of the personal data we process about you, ask us to correct, complete, update, or erase it, withdraw consent, nominate another person to exercise your rights, and raise a grievance with us. If you are not satisfied with our response, you may approach the Data Protection Board of India.
Grievance contact: [Placeholder: name or title of the person handling privacy grievances], biz@crecso.com.
11. Marketing emails
We send updates only to people who asked for them. Every marketing email includes a way to unsubscribe, or you can email us to stop. We will still send messages needed to deliver services you have ordered.
12. Children
Our website and services are intended for businesses and are not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has sent us personal information, contact us and we will delete it.
13. Other websites
Our website and guides link to other websites, including publishers, tools, and official sources. We are not responsible for their privacy practices, so please read their privacy policies.
14. Changes to this policy
We may update this policy from time to time. We will post the updated version on this page and change the "Last updated" date. If changes are significant, we will take reasonable steps to let you know.
15. Contact us
Questions or requests about this policy: biz@crecso.com
Postal address: [Placeholder: legal business name and registered address]