Contact Information
Crestline Data
100 King Street West, Suite 5600
Toronto, ON M5X 1B8, Canada
Phone: +1 (416) 847-5219
Email: [email protected]
Privacy Policy
Last Updated: November 15, 2025
Our Commitment to Your Privacy
At Crestline Data, we recognize the importance of protecting your personal information. This Privacy Policy outlines how we collect, use, store, and safeguard the data you provide when using our website and services.
We are committed to transparency in our data practices and compliance with applicable privacy regulations. This policy helps you understand your rights and our responsibilities regarding your personal information.
Information We Collect
Information You Provide Directly
We collect information that you voluntarily provide to us when you:
- Submit contact forms or inquiry requests (name, email address, phone number, project details)
- Communicate with us via email or phone (correspondence details, inquiry content)
- Request information about our services (company information, project scope, analytical requirements)
Information Collected Automatically
When you visit our website, we automatically collect certain information through cookies and similar technologies:
- Technical data (IP address, browser type and version, operating system, device information)
- Usage data (pages visited, time spent on pages, navigation paths, referral sources)
- Analytics data (session duration, interaction patterns, conversion events)
Legal Basis for Processing
We process your personal data based on the following legal grounds: your consent when you provide information voluntarily, our legitimate business interests in providing services and improving our website, contractual necessity when entering into service agreements, and compliance with legal obligations where applicable.
How We Use Your Information
We use the information we collect for the following purposes:
Service Delivery and Communication
To respond to your inquiries, provide requested information about our services, schedule consultations, and deliver analytical services when engaged. This includes all communications necessary to understand your requirements and provide appropriate support.
Website Improvement and Analytics
To analyze website usage patterns, understand visitor preferences, optimize content and user experience, and identify technical issues or areas for improvement. This helps us maintain a professional and effective web presence.
Marketing and Business Development
To send relevant information about our services, share insights about financial analysis topics, and maintain professional relationships with prospective clients. You can opt out of marketing communications at any time.
Legal Compliance and Protection
To comply with applicable laws and regulations, protect our legal rights and interests, prevent fraud and security threats, and maintain records as required by professional standards in financial services.
Information Sharing and Third Parties
We do not sell your personal information to third parties. We may share your information in the following limited circumstances:
Service Providers
We work with trusted third-party service providers who assist with website hosting, email communications, analytics services, and business operations. These providers are contractually bound to protect your information and use it only for specified purposes.
Professional Advisors
We may share information with legal counsel, accountants, or other professional advisors when necessary for business operations, legal compliance, or protection of our interests.
Legal Requirements
We may disclose information when required by law, court order, or legal process, or when necessary to protect our rights, property, or safety, or that of our clients or the public.
Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to this Privacy Policy.
Data Security Measures
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:
Encryption and Secure Transmission
We use industry-standard encryption protocols for data transmission and storage. Sensitive information is encrypted both in transit and at rest using appropriate cryptographic methods.
Access Controls and Authentication
Access to personal data is restricted to authorized personnel who require it for legitimate business purposes. We implement strong authentication and access control mechanisms.
Regular Security Monitoring
We conduct regular security assessments, monitor for potential threats, and maintain incident response procedures to address security events promptly and effectively.
Data Retention and Disposal
We retain personal information only as long as necessary for the purposes outlined in this policy or as required by law. Data is securely disposed of when no longer needed.
Important Note: While we implement robust security measures, no method of transmission or storage is completely secure. We cannot guarantee absolute security but remain committed to protecting your information using industry-standard practices.
Data Retention Periods
We retain your personal information for different periods depending on the type of data and purpose:
- Inquiry and Contact Data: Retained for up to three years after last contact, or as needed for ongoing service relationships
- Client Project Data: Retained for seven years following project completion, consistent with professional standards for financial services
- Website Analytics Data: Typically retained for up to 26 months for analytics purposes
- Marketing Communications: Retained until you opt out or withdraw consent
Your Privacy Rights
Depending on your location and applicable privacy laws, you may have the following rights regarding your personal information:
Right to Access
You can request access to the personal information we hold about you, including details about how we use it and with whom we share it.
Right to Rectification
You can request correction of inaccurate or incomplete personal information we maintain about you.
Right to Erasure
You can request deletion of your personal information under certain circumstances, subject to legal retention requirements.
Right to Data Portability
You can request a copy of your personal information in a structured, commonly used, and machine-readable format.
Right to Object
You can object to processing of your personal information based on legitimate interests or for direct marketing purposes.
Right to Restrict Processing
You can request that we limit how we use your personal information under certain circumstances.
Right to Withdraw Consent
Where processing is based on consent, you can withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.
Exercising Your Rights
To exercise any of these rights, please contact us using the information provided at the top of this page. We will respond to your request within the timeframe required by applicable law, typically within 30 days.
Your Rights and Opt-Out Instructions
You are not required to provide any personal information when using this website. If you prefer not to share your data, you may:
- Avoid filling out contact forms, account registrations, or any data-submitting features
- Disable cookies through your browser settings (see our Cookie Policy for more details)
- Contact us directly to request the deletion of any previously shared personal data
We respect your privacy choices. If you would like us to delete your data, please reach out to us at the contact details provided on our Contact page. We will process your request promptly.
International Data Transfers
As a Canadian-based company, your information is primarily processed and stored in Canada. If we transfer data to other jurisdictions, we ensure appropriate safeguards are in place, including:
- Standard contractual clauses approved by relevant data protection authorities
- Adequacy decisions confirming appropriate data protection standards
- Binding corporate rules for transfers within multinational organizations
- Your explicit consent for specific transfers when required
Children's Privacy
Our services are intended for business and professional use. We do not knowingly collect personal information from individuals under 18 years of age. If we become aware that we have collected personal information from a minor without parental consent, we will take steps to delete that information promptly.
Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or business operations. When we make material changes, we will:
- Update the "Last Updated" date at the top of this policy
- Notify you through prominent website placement or direct communication
- Provide a summary of significant changes where appropriate
We encourage you to review this Privacy Policy regularly to stay informed about how we protect your information.
Questions and Concerns
If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about how we handle your personal information, please contact us:
By Mail:
Crestline Data
100 King Street West, Suite 5600
Toronto, ON M5X 1B8, Canada
By Phone: +1 (416) 847-5219
By Email: [email protected]