Privacy Policy

1. Introduction

Crest Review LLC ("Crest Review," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at crestreview.com (the "Site") or purchase a Report. Please read this policy carefully. If you disagree with its terms, please discontinue use of the Site.

2. Information We Collect

We collect information in the following ways:

Information You Provide Directly

• Email address: When you subscribe to our blog newsletter or contact us through the Site, we collect your email address.
• Contact form submissions: When you submit a contact or inquiry form, we collect the information you provide, which may include your name, email address, and message.
• FDD documents: When you purchase a Report, you will submit a Franchise Disclosure Document for analysis. We use this document solely to prepare your Report and do not retain it beyond the period necessary to complete your order.

Payment Information

All payment transactions are processed by Stripe, a third-party payment processor. Crest Review does not collect, store, or have access to your full credit card number, CVV, or other sensitive payment card data. Stripe collects and processes payment information in accordance with its own Privacy Policy and is compliant with the Payment Card Industry Data Security Standard (PCI DSS). We receive only a transaction confirmation and limited order metadata from Stripe.

Automatically Collected Information

When you visit the Site, we may automatically collect certain information about your device and browsing activity, including your IP address, browser type, operating system, referring URLs, pages visited, and time spent on pages. This information is collected through standard server logs and analytics tools (including Google Analytics) and is used in aggregate form to understand how visitors use the Site and to improve our content and services.

3. How We Use Your Information

We use the information we collect to:

• Prepare and deliver the Reports you purchase.
• Send you blog updates and educational content if you have subscribed to our newsletter.
• Respond to your inquiries and provide customer support.
• Process payments and send order confirmations.
• Improve the Site, our content, and our services.
• Comply with applicable legal obligations.
• Detect and prevent fraud or abuse.

4. We Do Not Sell Your Personal Information

Crest Review does not sell, rent, trade, or otherwise transfer your personal information to third parties for their marketing purposes. We do not share your email address or any other personal information with advertisers, data brokers, or any other third parties for commercial purposes.

5. Third-Party Service Providers

We work with a limited number of trusted third-party service providers who assist us in operating the Site and delivering our services. These providers are permitted to use your information only as necessary to perform services on our behalf and are contractually required to protect your information. Our current service providers include:

• Stripe — payment processing. Stripe's Privacy Policy is available at stripe.com/privacy.
• Google Analytics — website analytics. Google's Privacy Policy is available at policies.google.com/privacy.
• Manus — website hosting and infrastructure. Manus's Privacy Policy is available at manus.im.

6. Cookies and Tracking Technologies

The Site uses cookies and similar tracking technologies to enhance your experience. Cookies are small data files stored on your device that help us remember your preferences and understand how you use the Site.

We use the following types of cookies:

• Essential cookies: Required for the Site to function properly, including session management and security.
• Analytics cookies: Used by Google Analytics to collect aggregate information about how visitors use the Site.

You can control cookies through your browser settings. Disabling cookies may affect the functionality of certain parts of the Site. Most browsers also allow you to opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on, available at tools.google.com/dlpage/gaoptout.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Email addresses collected through our newsletter subscription are retained until you unsubscribe. FDD documents submitted for analysis are deleted after your Report has been delivered.

8. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information, including:

• Right to access: You may request a copy of the personal information we hold about you.
• Right to correction: You may request that we correct inaccurate or incomplete personal information.
• Right to deletion: You may request that we delete your personal information, subject to certain exceptions.
• Right to opt out of marketing: You may unsubscribe from our newsletter at any time by clicking the unsubscribe link in any email we send.
• GDPR rights (EEA residents): If you are located in the European Economic Area, you have additional rights under the General Data Protection Regulation, including the right to data portability and the right to lodge a complaint with a supervisory authority.
• CCPA rights (California residents): If you are a California resident, you have the right to know what personal information we collect, the right to delete your personal information, and the right to opt out of the sale of your personal information. We do not sell personal information.

To exercise any of these rights, please contact us at [email protected].

9. Security

We implement reasonable administrative, technical, and physical security measures to protect your personal information from unauthorized access, use, or disclosure. However, no method of transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee absolute security and encourage you to use caution when sharing personal information online.

10. Children's Privacy

The Site is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child under 13, please contact us immediately at [email protected] and we will take steps to delete such information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this page. We encourage you to review this Privacy Policy periodically. Your continued use of the Site after any changes constitutes your acceptance of the revised Privacy Policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Crest Review LLC

Email: [email protected]

Website: crestreview.com