Privacy Policy
This policy explains how Cresca ("Cresca", "we", "us") collects, uses and protects personal data when you visit cresca.agency, contact us, book a call, or receive business outreach from us. We are the controller responsible for your personal data. You can reach us at hello@cresca.agency.
The data we collect
- Enquiry & booking data — your name, email, company and anything you tell us when you book a call (via Calendly), email us, or fill in a form.
- Website usage data — pages viewed, referring source, approximate location, device and browser, collected through cookies or similar technologies where you have consented.
- Website visitor identification data — we use a visitor identification service (Instantly / Leadsy) that runs on every page of this site. It uses your IP address and technical signals to estimate which organisation a visit came from, so we can see which companies are researching our services. We use this for business-to-business purposes only; we do not use it to build profiles of you as a private individual.
- Business contact data for outreach — where we contact organisations about our services, we may process business contact details (name, role, business email, company) that are publicly available or lawfully obtained from third-party providers.
Why we use it, and our legal basis
- To respond to enquiries and deliver our services — on the basis of taking steps at your request and performing our contract (Art. 6(1)(b) GDPR).
- To send business-to-business outreach about services relevant to your role — on the basis of our legitimate interest in offering our services (Art. 6(1)(f) GDPR), balanced against your rights. You can object at any time (see below).
- To identify organisations visiting our website — on the basis of our legitimate interest in understanding which businesses are interested in our services (Art. 6(1)(f) GDPR), balanced against your rights. This runs independently of the cookie banner. You can object at any time (see below).
- To measure and improve the website and our advertising — on the basis of your consent for non-essential cookies and analytics (Art. 6(1)(a) GDPR).
- To meet legal obligations — where the law requires us to keep certain records (Art. 6(1)(c) GDPR).
Cookies and analytics
We use essential cookies to run the site and, with your consent, analytics and advertising cookies to understand traffic and measure campaigns (for example Google Ads conversion measurement). You can withdraw consent or change your choices at any time through your browser settings. Blocking non-essential cookies will not affect core site functionality.
Advertising
We run ads on platforms such as Google. These platforms may set cookies or use identifiers to measure conversions and show relevant ads. Their use of data is governed by their own privacy policies, including Google's Privacy Policy.
Website visitor identification
We use Instantly (Leadsy) to identify the organisations visiting cresca.agency. The service loads on every page and processes your IP address and browser signals to match a visit to a likely company. Unlike our analytics and advertising cookies, this runs on the basis of legitimate interest rather than consent, so it is active whether or not you accept non-essential cookies. If you would prefer not to be included, email hello@cresca.agency and we will exclude you, or use a VPN or tracker-blocking extension to prevent the match.
Who we share data with
We share data only with service providers that help us operate, acting on our instructions under appropriate agreements. These include hosting and website infrastructure, our scheduling tool (Calendly), our website visitor identification provider (Instantly / Leadsy), email and CRM tools, and advertising and analytics providers (such as Google). We do not sell your personal data.
International transfers
Some providers may process data outside your country, including outside the EU/EEA. Where that happens, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.
How long we keep it
We keep enquiry and client data for as long as needed to provide our services and to meet legal or accounting obligations, then delete or anonymise it. Outreach contact data is kept only while it remains relevant, and is removed on request or when you object.
Your rights
Subject to applicable law (including the GDPR), you have the right to access, correct, delete or restrict processing of your personal data, to object to processing based on legitimate interests or direct marketing, to data portability, and to withdraw consent at any time. To exercise any of these, email hello@cresca.agency. You also have the right to lodge a complaint with your local data protection supervisory authority.
Opting out of our emails. If you'd rather not hear from us, reply "unsubscribe" to any message or email hello@cresca.agency, and we'll remove your details promptly.
Changes to this policy
We may update this policy from time to time. The "last updated" date above shows when it last changed. Material changes will be reflected here.
Contact
Questions about this policy or your data: hello@cresca.agency.