Data Protection Policy

Last Updated: August 23, 2025

1) Purpose

The purpose of this Data Protection Policy is to ensure that Crestline Technologies, LLC (“we,” “our,” “us”) handles personal and business data responsibly, securely, and in compliance with applicable data protection laws and regulations. We are committed to protecting the confidentiality, integrity, and availability of data entrusted to us.

2) Scope

This policy applies to all personal and business information processed by Crestline Technologies through our website (www.crestline-technologies.com), digital platforms, internal systems, and managed IT services. It applies to all employees, contractors, and third parties who handle data on our behalf.

3) Data We Process

• Client contact details: names, email addresses, phone numbers
• Business information: company name, employee count, and service details
• Technical data: IP addresses, browser details, system logs (where applicable)
• Service-related data: information necessary to provide managed IT and cybersecurity services

Sensitive data such as financial records, health information, or regulated data is processed only if required under a contractual agreement and handled with enhanced safeguards.

4) Data Protection Principles

We adhere to the following principles when handling data:

• Lawfulness, fairness, and transparency: Data is collected and used in a lawful and transparent manner.
• Purpose limitation: Data is collected for specific, legitimate business purposes only.
• Data minimization: We only collect information necessary for service delivery.
• Accuracy: We keep information accurate and up to date.
• Storage limitation: Data is retained only as long as necessary for the stated purpose.
• Integrity and confidentiality: We protect information with appropriate technical and organizational measures.

5) Security Measures

To protect data, Crestline Technologies employs:

• Access controls and authentication measures
• Encryption of sensitive data in transit and at rest where applicable
• Network and endpoint monitoring
• Regular software updates and vulnerability management
• Employee training on data handling and cybersecurity awareness
• Vendor risk assessments for third-party providers

6) Data Subject Rights

Individuals whose data we process may have rights under applicable laws (such as GDPR or CCPA), including the right to:

• Access and request a copy of their personal data
• Request correction or deletion of inaccurate data
• Object to or restrict certain processing activities
• Withdraw consent where previously given

Requests may be submitted using the contact details below.

7) Data Breach Response

In the event of a data breach, Crestline Technologies will promptly assess the situation, contain the incident, notify affected parties and regulatory authorities where required, and take corrective measures to prevent recurrence.

8) Responsibilities

• Management: Ensures policies and resources are in place for compliance.
• Employees: Must follow this policy and attend required training.
• Third parties: Must comply with contractual data protection requirements.

9) Policy Review

This Data Protection Policy is reviewed annually or upon significant changes in business practices, regulatory requirements, or technology affecting data protection.

10) Contact Information

For questions about this policy or to exercise your data protection rights, please contact:

Crestline Technologies, LLC
9111 Cross Park Dr STE D200
Knoxville, TN 37923
Phone: 865-630-2983
Email: [email protected]