How Creston Capital collects, uses, stores, and protects personal data.

We may collect personal and account-related information such as:

• name, email address, phone number, and profile details;
• account registration and authentication information;
• identity and verification information submitted for KYC-related checks;
• transaction, payment, and account activity records;
• communications, support requests, and feedback you send to us;
• technical, device, usage, and security event data generated through platform access.

We may use your information to:

• create and manage your Creston Capital account;
• enable platform features, account actions, and transaction workflows;
• support user verification and AML-aligned compliance controls;
• protect the platform against fraud, abuse, misuse, and unauthorized activity;
• communicate with you about account events, updates, and support matters;
• improve the reliability, usability, and security of our services;
• comply with legal, regulatory, audit, and operational obligations.

Because Creston Capital supports compliance-aware financial workflows, we may process identity information, verification submissions, onboarding records, and related review data to help assess account eligibility, detect risk, and support AML-aligned controls.

This may include reviewing submitted information, maintaining review outcomes, storing necessary records, and applying restrictions where verification is incomplete or under review.

We process and store transaction-related information necessary to support secure payment flows, account funding, internal review, reconciliation, fraud prevention, customer support, and financial recordkeeping.

We do not reference providers in this policy text, but payment and transaction data may be handled through secure systems and controlled workflows necessary for the operation of the platform.

We use security-focused technical and organizational measures designed to protect personal data from unauthorized access, misuse, loss, alteration, or disclosure.

This includes encrypted handling of sensitive data in relevant systems, access limitation based on operational need, monitoring of security-sensitive events, and protective controls around important account and transaction workflows.

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including account administration, support, fraud prevention, legal recordkeeping, dispute management, audit needs, and compliance obligations.

Some records may be retained after account closure where required or permitted for security, legal, operational, or regulatory reasons.

We do not sell your personal information. We may share information where necessary to operate Creston Capital, protect users and the platform, comply with legal obligations, support secure transaction flows, enforce our policies, or respond to lawful requests.

Information may also be disclosed in connection with audits, investigations, fraud prevention, dispute handling, legal claims, or business restructuring where applicable.

Depending on applicable law, you may have rights relating to your personal information, including rights to access, correct, update, restrict, or request deletion of certain data.

Some requests may be limited where continued retention is necessary for security, fraud prevention, compliance, legal obligations, or legitimate operational purposes.

We may use cookies, session technologies, and technical logs to keep the platform functioning properly, improve performance, protect user sessions, understand usage patterns, and maintain platform security.

These technologies help us support a safer and more reliable user experience.

Creston Capital is not intended for use by individuals who are not legally eligible to use the services under applicable law. We do not knowingly collect personal information from individuals where such collection is not legally permitted.

We may update this Privacy Policy from time to time to reflect legal requirements, product changes, security improvements, or operational updates. Material changes may be communicated through appropriate channels where required.

If you have questions about this Privacy Policy or our privacy practices, contact us at support@crestoncapitalgroup.com or +13233013624 / +447868310044.