Privacy Policy
This is a living document. We review it regularly against what this site actually does, revise it when our practices change, and keep prior versions on file — see Changes to this policy below. It describes what Creston Global Enterprises LLC ("CrestonGE," "we," "us") collects on crestonge.com, why, and what rights you have over it.
1. Who we are
Creston Global Enterprises LLC is a California-based venture studio and digital-services business. This policy covers crestonge.com only. Contact us at [email protected] for anything below, including privacy rights requests.
2. Information we collect
| Category | What | When |
|---|---|---|
| Contact-form submissions | Name, email address, business name, website URL, project description, and budget range | Only when you fill out and submit the "Get a quote" form |
| Bot-verification signal | A Cloudflare Turnstile token and your IP address, used to confirm you're a real visitor before we process a form submission | On every form submission attempt |
| Security & traffic logs | IP address, request path, timestamp — standard web-server/CDN logging, used to block abusive traffic (rate limiting) and keep the site running | Every visit, generated by Cloudflare (our host) |
| Analytics & ad-conversion signal | Browser/device information and cookies set by Google Tag Manager; a single event is recorded when a contact-form submission is confirmed sent, so we can measure whether our ads are working | On every visit (cookie-setting scripts load); the conversion event fires only after a confirmed form send |
We do not currently operate a server-side database for this site. Contact-form submissions are relayed directly to our inbox by email (via Resend) and are not stored in a database of our own beyond that.
3. Why we collect it
- To respond to your inquiry — contact-form data is used solely to reply to you about the work you asked about.
- To keep the site secure — Turnstile and Cloudflare's edge logging exist to block bots, scrapers, and abusive traffic.
- To measure whether our marketing works — the Google Tag Manager conversion event tells us whether ad spend is producing real inquiries. It does not feed any decision about you individually.
We do not use any of this information to make automated decisions that produce legal or similarly significant effects about you.
4. Who we share it with
We use a small number of service providers ("subprocessors") to run this site. We don't sell your information, and we don't share it with anyone for their own independent marketing purposes.
| Provider | Role | Their privacy terms |
|---|---|---|
| Resend | Delivers the contact-form email to our inbox | resend.com/legal/privacy-policy |
| Cloudflare | Hosting, CDN, bot verification (Turnstile), and abuse/rate-limit protection | cloudflare.com/privacypolicy |
| Google (Tag Manager) | Loads analytics and ad-conversion tags in your browser | policies.google.com/privacy |
If a free tool on this site (like a local-visibility check) looks up public information about a business you enter — for example through Google's Places or PageSpeed APIs — that lookup is described on the tool itself at the time you use it, and this policy is updated to reflect it once that tool is live.
5. How long we keep it
Contact-form submissions live in our email inbox for as long as we need them to handle your inquiry and aren't copied into a separate database. Cloudflare's security logs and Google's analytics data are retained under those providers' own standard retention windows, linked above.
6. Cookies and similar technology
This site uses a small number of cookies:
- A theme preference (light/dark), stored only in your browser's local storage — never sent to us or anyone else.
- A Cloudflare Turnstile verification cookie, used briefly to confirm a form submission isn't automated.
- Cookies set by Google Tag Manager for analytics and ad-conversion measurement.
We don't sell personal information, and we don't automatically read a Global Privacy Control (GPC) browser signal yet. If you'd like your GPC preference honored manually — for example, to opt out of the ad-conversion tag described above — email us at the address in §7 and we'll act on it by hand until automated GPC recognition is in place.
7. Your rights
Regardless of where you live, we offer everyone the same set of rights, modeled on California's CCPA/CPRA:
- Know what personal information we hold about you and why.
- Correct inaccurate personal information.
- Delete personal information you've given us.
- Opt out of any sale or sharing of personal information — we don't sell personal information, and you can opt out of ad-conversion tracking by emailing us (see §6).
- Portability — get a copy of the information you gave us in a portable format.
- Non-discrimination — we won't treat you worse for exercising any of these rights.
To exercise any of these, email [email protected] with the subject line "Privacy request." We'll respond within 45 days. Because this site doesn't have user accounts, we verify requests by replying to the email address the request came from.
8. Children's privacy
This site is not directed to children under 13, and we do not knowingly collect personal information from them.
9. Security
Traffic to this site is encrypted in transit (HTTPS/TLS). Form submissions are protected against automated abuse by Cloudflare Turnstile, and the site's API endpoints are rate-limited per IP address to block abusive traffic.
10. Changes to this policy
We treat this policy as a living document and expect to revise it — most immediately as we add new tools to this site (like a HubSpot-backed lead system with its own opt-in/opt-out controls). Each revision gets a new version number and posted date at the top of this page. Prior versions are kept on file rather than silently overwritten; ask us at the email above if you'd like to see an earlier version.