Privacy statement

Who is responsible?

Cresco is responsible for processing personal data through this public website. If you have a privacy question or want to exercise your privacy rights, contact us through the contact page.

What data do we process?

For a demo, trial environment or contact request, we may process your name, organization name, business email address, phone number, number of locations and your message. We also record the request type, source page, referrer and any UTM data. We use a technical submission ID to prevent duplicate requests.

To protect against misuse, a hashed technical identifier may temporarily be used for rate limiting. It is not stored in our database as lead data.

Why do we process this data?

We use your data to answer your request, coordinate a demo or trial environment with you and, where applicable, take steps before entering into a possible agreement. We use limited source and campaign data to understand how requests reach Cresco.

A demo, trial environment or contact request is not automatically treated as consent for a newsletter or general marketing email.

How long do we keep data?

While a commercial request is actively followed up, we retain the data needed for that purpose. After that, we keep the request for no more than 24 months, unless a longer retention period is necessary because of a specific agreement or legal obligation. We may delete data earlier when there is a valid reason.

Who do we share data with?

We do not sell personal data. For hosting, security and data storage, we use specialized IT service providers. For the current public Cresco website, these include Cloudflare for hosting and network services and Supabase for backend and database services. They process data only to provide technical services to Cresco.

Cookies and analytics

The public Cresco website currently does not use marketing cookies or web analytics. We therefore do not display a cookie banner for those purposes. If this changes later, we will update this statement and, where needed, the consent flow.

Your privacy rights

Under the GDPR, you can request access to, correction of or deletion of your personal data. Depending on the situation, you may also request restriction of processing, object to processing or request data portability. Contact us through the contact page to exercise these rights.

If you have a complaint about the processing of your personal data, you can also contact the Dutch Data Protection Authority.

Changes

We may update this privacy statement when our website or the way we process personal data changes. The current version is always available on this page.

Last updated: 8 September 2026.