Privacy policy

Effective date: September 14, 2026

CREST Corporation, doing business as CREST Products ("CREST", "we", "us"), operates the website at crestcorp.com (the "Site"). The Site presents our products and, in most cases, directs you to our listings on Amazon to complete a purchase. The Site also has its own Shopify checkout, which remains available.

This policy explains what personal information we collect, why, who we share it with, and the choices you have. It describes what we actually do — not everything an online store could theoretically do. We sell to customers in the United States only.

The short version

  • Most visitors give us nothing. If you browse and then click through to Amazon, we do not collect your name, address or payment details at all.
  • If you order on the Site, or email us, we collect what we need to handle that.
  • We do not sell your personal information, and we do not share it with advertising companies for targeted advertising.
  • We run no third-party advertising or analytics trackers on the Site.
  • We never see or store your full payment card number.
  • You can ask what we hold about you, or ask us to correct or delete it, at mr_t@crestcorp.com.

Links to Amazon and other third-party sites

Product links on the Site lead to our listings on Amazon.com. Once you leave the Site, you are on Amazon's platform and Amazon's own privacy policy and terms govern what happens there — including anything you browse, add to a cart, or buy. CREST does not receive your Amazon order details, your payment information, or your Amazon account information.

We may receive aggregate reporting from Amazon about how many visitors arrived from the Site and how many purchases followed. That reporting does not identify individual people to us.

Information we collect

If you order on the Site. We collect your name, billing address, shipping address, email address and phone number, together with the details of what you ordered.

Payment information. Payment card details are entered into a checkout operated by Shopify and passed to the payment processor. CREST does not receive, see, or store your full card number. We receive confirmation that a payment succeeded, along with the card brand and the last four digits shown on the order record.

If you contact us. We collect whatever you include in your message — typically your name, your email address, and what you are asking about.

If you sign up for email. We collect your email address and the fact that you consented.

Collected automatically from every visit. Like any website, the Site records technical information: your IP address, browser type and version, device type, time zone, the pages you viewed, any search terms you used on the Site, and the site you arrived from. This is collected by Shopify, the platform that hosts and runs the Site, using cookies and server logs.

We do not collect Social Security numbers, driver's licence numbers, precise geolocation, biometric information, health information, or any other category of sensitive personal information.

Records from earlier orders

The Site has operated as a store since 2021, and we still hold customer and order records from purchases made on it in earlier years. Those records are kept and treated exactly as described in this policy, and the rights set out below apply to them in full. If you bought from the Site in the past and would like your information removed, email us and we will delete whatever we are not legally required to retain.

How we use it

  • To process, fulfil, ship and invoice any order placed on the Site.
  • To communicate with you about that order, including shipping and delivery notifications.
  • To answer your questions and handle returns, exchanges and warranty matters.
  • To screen orders for fraud and payment risk.
  • To keep the Site working and to understand, in aggregate, how it is used and which products draw interest.
  • To send marketing email — only if you asked us to, and you can unsubscribe from any such message.
  • To keep the business records we are required to keep, and to meet our tax, accounting and other legal obligations.

Who we share it with

We share personal information only with the parties below, and only to the extent they need it:

  • Shopify — hosts the Site and processes order and Site-usage information on our behalf. Shopify's privacy policy is at shopify.com/legal/privacy.
  • Our payment processor — to authorise and settle a payment made on the Site.
  • Shipping carriers — to deliver an order, which requires your name, address and sometimes your phone number or email for delivery notifications.
  • Professional advisers — our accountant, where order and revenue records are needed for bookkeeping and tax filings.
  • Law enforcement and courts — where we must respond to a subpoena, warrant or other lawful demand, or where disclosure is necessary to protect our legal rights.

If CREST is ever sold or merged, customer records may transfer to the acquiring party as part of that transaction. We would update this policy to say so.

We do not sell personal information. We do not share personal information for cross-context behavioural advertising. We do not disclose personal information to data brokers, list sellers, or advertising networks.

Cookies

A cookie is a small file a website stores on your device. The Site uses only the cookies Shopify sets to make it work and to measure its own traffic. Broadly, two groups:

  • Necessary cookies that remember your shopping cart, carry you through checkout, and keep you signed in if you have an account (for example cart, checkout_token, secure_customer_sig).
  • Shopify's own analytics cookies that count visits and record which pages are used and where visitors arrived from (for example _shopify_y, _shopify_s, _landing_page).

We do not place advertising, retargeting, or social media cookies on the Site.

Most cookies we use expire between thirty minutes and two years after they are set. You can block or delete cookies through your browser settings, though blocking the necessary ones will stop the cart and checkout from working.

Do Not Track. There is still no agreed industry standard for responding to browser "Do Not Track" signals, so the Site does not change its behaviour when it receives one. Since we run no advertising or third-party trackers, there is little for such a signal to turn off.

How long we keep it

Order and payment records are kept as long as needed to support the order and to satisfy our tax, accounting and legal record-keeping obligations — generally at least seven years for financial records. Customer correspondence is kept while it remains useful for any follow-up. Marketing email addresses are kept until you unsubscribe or ask to be removed. Technical Site-usage logs are kept for the periods Shopify applies to them.

Your privacy rights

California law gives residents specific rights over their personal information. CREST is a small business and may fall below the thresholds at which the California Consumer Privacy Act formally applies. We extend the following rights to every customer regardless, and we will not treat you differently for exercising them:

  • Know — ask what personal information we hold about you, where we got it, why we have it, and who we have shared it with.
  • Access a copy — receive a copy of that information in a portable form.
  • Correct — have inaccurate information about you fixed.
  • Delete — have your personal information erased, except where we are legally required to keep it (completed order and payment records being the main example).
  • Opt out of sale or sharing — we do not sell or share personal information, so there is nothing to opt out of. If that ever changes, we will publish the change here and provide a clear opt-out before it takes effect.
  • Limit use of sensitive personal information — we do not collect sensitive personal information, so this right does not arise.

How to make a request. Email mr_t@crestcorp.com with "Privacy Request" in the subject line and tell us what you would like us to do. We will respond within 45 days, and will tell you if we need longer. So that we do not hand your information to the wrong person, we will ask you to confirm details that match our records, such as the email address or order number used for a purchase. You may use an authorised agent; we will ask for written proof that you authorised them.

Children

The Site is intended for adults and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, email mr_t@crestcorp.com and we will delete it.

Security

Order data is held within Shopify's platform, and payment card data is handled by a PCI-DSS compliant processor rather than by us. We take reasonable measures to protect what we hold, including limiting who at CREST can access it. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Changes to this policy

We may update this policy to reflect changes in how we operate or in the law. When we do, we will revise the effective date at the top. If a change materially affects how we use information we already hold, we will say so prominently rather than relying on the date alone.

Contact us

For any question, request or complaint about privacy:

CREST Corporation (dba CREST Products)
3225 McLeod Drive, Suite 100
Las Vegas, NV 89121
United States
Email: mr_t@crestcorp.com