Roles
When Crestmont builds, hosts or maintains a website for you, you decide what personal data the site collects and why; Talent Revenue Systems LLC processes that data on your behalf and only on your documented instructions. For data about you as our customer, our privacy policy applies instead.
Processing details
- Purpose: building, hosting, maintaining and supporting your website and related services.
- Data: whatever your website's visitors and customers submit (for example contact-form entries), plus account data of your staff who use the customer portal.
- Duration: the term of your project or maintenance plan, then return or deletion as described below.
Crestmont's commitments
- Process personal data only to provide the services and as you instruct.
- Keep it confidential and limit access to staff who need it, each with individual accounts, two-factor authentication and logged access.
- Protect it with security measures including encryption in transit, access controls, audit logging and backups.
- Help you respond to requests from people exercising their privacy rights.
- Notify you without undue delay after becoming aware of a personal data breach affecting your data.
- At the end of the services, return or delete your personal data unless law requires it to be kept.
Subprocessors
Crestmont uses service providers for hosting, file storage, email delivery, payments and AI-assisted drafting. The current list of subprocessors and where they process data will be published with the final version of this addendum, and you will be told before a new subprocessor is added.