Privacy Policy

Last Updated:

This Privacy Policy explains how Crestory Capital (“Crestory Capital,” “we,” “us,” or “our”) collects, uses, shares, and protects information in connection with our website, communications, and the business brokerage, capital strategy, and IPO advisory services we provide (collectively, the “Services”).

By using our website or otherwise interacting with us, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use our website or submit personal information to us.

1. Information We Collect

We may collect the following categories of information:

Information You Provide to Us

We collect information that you voluntarily provide when you contact us, schedule a consultation, request a valuation, subscribe to communications, or enter into an engagement with us. This may include:

• Name, company name, title, and contact details (email, phone, address)
• Business information and financial data (such as P&L, balance sheets, tax returns, cash flow, and related documents)
• Information about your goals (e.g., exit timing, valuation expectations, IPO or capital plans)
• Any other information you choose to share in emails, forms, calls, or meetings

Information Collected Automatically

When you visit our website, we may automatically collect certain information about your device and usage, such as:

• IP address and approximate location
• Browser type and version
• Device identifiers
• Pages you view and links you click
• Dates and times of access

This information may be collected via cookies, pixels, web beacons, and similar technologies.

Information from Third Parties

We may receive information about you or your business from third parties, such as:

• Referral partners and professional advisors (e.g., CPAs, attorneys, bankers)
• Public records, databases, and online sources
• Service providers and data partners that help us identify potential buyers, sellers, or capital partners

2. How We Use Your Information

We use the information we collect for purposes such as:

• Providing, operating, and improving our Services
• Evaluating potential engagements (e.g., business sales, acquisitions, capital raises, or IPO advisory)
• Preparing valuations, analyses, and marketing materials (subject to confidentiality obligations)
• Communicating with you about your inquiries, appointments, or engagements
• Sending you relevant updates, insights, or marketing communications (you may opt out at any time)
• Protecting our rights, property, and safety, and that of our clients and partners
• Complying with legal obligations and responding to lawful requests

3. How We Share Your Information

We do not sell your personal information. We may share information in the following situations:

• Service Providers: With trusted service providers who perform services on our behalf (e.g., IT, CRM, analytics, marketing, document storage, and communication tools), bound by confidentiality obligations.
• Professional Advisors: With attorneys, CPAs, lenders, and other advisors to help evaluate, structure, or complete a transaction, where appropriate and typically with your knowledge.
• Transaction Counterparties: With potential buyers, investors, lenders, or other counterparties when exploring or negotiating a business sale, acquisition, financing, or IPO-related transaction, usually under NDA or confidentiality protections.
• Legal and Compliance: When required by law, regulation, subpoena, court order, or government request, or to enforce our rights and protect against fraud or security issues.
• Business Transfers: In connection with a merger, sale of assets, restructuring, or similar corporate transaction, where your information may be transferred as part of the transaction.
• Aggregated/De-Identified Data: We may use or share aggregated or de-identified information that does not reasonably identify you.

4. Cookies and Tracking Technologies

We may use cookies and similar technologies to operate our website, understand how it is used, and improve user experience. You can adjust your browser settings to refuse cookies or alert you when cookies are being sent. Some features of the site may not function properly without cookies.

5. Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect the information we collect. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

6. Data Retention

We retain personal information for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, including to provide the Services, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements. The exact retention period may vary depending on the type of information and the context of our engagement.

7. Your Choices and Rights

Depending on your location and applicable law, you may have certain rights regarding your personal information, such as the rights to:

• Access and request a copy of your personal information
• Request correction or updates to inaccurate information
• Request deletion of your personal information
• Object to or restrict certain processing
• Opt out of marketing communications

To exercise these rights, please contact us using the details below. We may need to verify your identity before fulfilling your request, and certain information may be exempt from such requests under applicable law.

8. California Residents

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), as amended by the CPRA, including the right to know, delete, and opt out of certain data practices, subject to legal exceptions. We do not sell personal information as that term is defined under the CCPA. If you wish to make a request under California privacy law, please contact us as described below.

9. Children’s Privacy

Our website and Services are intended for business and professional users and are not directed to children under the age of 16. We do not knowingly collect personal information from children under 16. If we learn that we have collected personal information from a child under 16, we will take reasonable steps to delete it.

10. Third-Party Websites and Services

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those third parties. We encourage you to review the privacy policies of any third-party sites or services you visit.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable laws. When we make material changes, we will update the “Last Updated” date at the top of this page. Your continued use of our website or Services after any changes indicates your acceptance of the updated Privacy Policy.

12. Contact Us

If you have any questions or requests regarding this Privacy Policy or our data practices, please contact us at: