Privacy Policy

Last updated: July 25, 2026

Our commitment to privacy

Crimson Transaction Technologies (“Crimson,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information entrusted to us.

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit www.crimsontt.com, submit an inquiry, request a demonstration, or otherwise communicate with us through the website.

This policy applies only to this public website and related website inquiries. It does not describe how customer, retailer, employee, transaction, or payment information is handled within Crimson products or under separate customer agreements.

---

Information we collect

We may collect personal information that you voluntarily provide when you:

• request a product demonstration;
• submit a contact or information-request form;
• request PCI assessment information;
• communicate with us by email or telephone; or
• apply for an employment opportunity.

This information may include:

• your name;
• business email address and telephone number;
• company or organization name;
• job title or business role;
• country, province, state, or general location;
• products, services, or integrations of interest; and
• information included in your message or form response.

Please do not submit payment-card information, banking information, account credentials, health information, government identification numbers, or other sensitive personal information through this website.

Information collected automatically

When you visit the website, our hosting provider and website systems may automatically receive limited technical information, such as:

• Internet Protocol (IP) address;
• browser and device type;
• operating system;
• pages visited and referring website;
• date and time of access; and
• technical or security event information.

This information may be used to operate and secure the website, diagnose technical problems, understand general website usage, and prevent misuse.

How we use personal information

We may use personal information to:

• respond to questions and requests;
• arrange demonstrations and business discussions;
• provide information about Crimson products and services;
• evaluate potential customer, partner, or integration opportunities;
• follow up on communications you initiate;
• administer and improve the website;
• protect the website and our systems from misuse or security threats;
• maintain appropriate business records; and
• meet legal, regulatory, and contractual obligations.

We will not use personal information for a materially different purpose without obtaining consent where required by applicable law.

Microsoft Forms

Crimson may use Microsoft Forms to process contact requests, demonstration requests, or other website submissions. When you use an embedded or linked Microsoft Form, information may be transmitted to and processed through Microsoft services.

Crimson uses the submitted information for the purposes described in this policy. Microsoft’s handling of information through its services is also governed by the Microsoft Privacy Statement .

Do not submit confidential payment, customer, or transaction data through a Microsoft Form on this website.

Cookies and analytics

The website may use cookies or similar technologies that are necessary for security, accessibility, form functionality, and reliable website operation.

If Crimson enables optional analytics or advertising technologies, this policy and any applicable cookie notice will identify those services and explain the choices available to visitors.

You can control many cookies through your browser settings. Disabling essential cookies may affect the operation of certain website features.

When information may be disclosed

Crimson does not sell or rent personal information. We may disclose information:

• to service providers that host, secure, maintain, or support the website and related communications;
• to Microsoft when Microsoft Forms or Microsoft 365 services are used;
• to professional advisers where reasonably necessary;
• where required by law, court order, or lawful government request;
• to investigate fraud, security incidents, or misuse; or
• as part of a corporate transaction, subject to appropriate confidentiality and legal requirements.

Service providers are authorized to process information only for the services they provide to Crimson and are expected to protect it appropriately.

Cross-border processing

Crimson and its service providers may process or store personal information in Canada, the United States, or other jurisdictions. Information processed outside your home jurisdiction may be subject to the laws and lawful access requirements of the jurisdiction in which it is processed.

Retention

Crimson retains personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected, support an ongoing business relationship, meet legal or contractual obligations, resolve disputes, and maintain appropriate business records.

When information is no longer required, it is deleted, anonymized, or securely disposed of in accordance with applicable requirements and Crimson’s retention practices.

Security

Crimson uses reasonable administrative, technical, and physical safeguards appropriate to the nature and sensitivity of the personal information under its control.

No Internet transmission or storage system can be guaranteed to be completely secure. If you believe information submitted to Crimson has been compromised, please contact us promptly.

Your privacy choices and rights

Subject to applicable law, you may ask Crimson to:

• confirm whether we hold personal information about you;
• provide access to eligible personal information;
• correct inaccurate or incomplete information;
• withdraw consent to certain uses;
• delete information where legally applicable; or
• provide information about how your information has been used or disclosed.

Some requests may be subject to identity verification, legal exceptions, record-retention requirements, or other limitations permitted by law.

You may opt out of marketing communications by using the unsubscribe option in the message or by contacting us. Crimson may still send non-marketing communications relating to an existing business relationship.

Third-party websites

This website may link to websites or services operated by other organizations. Crimson is not responsible for the privacy, security, or content practices of those third parties. Review their privacy policies before providing personal information.

Children’s privacy

This website is intended for business and professional audiences and is not directed to children. Crimson does not knowingly collect personal information from children through this website.

Changes to this policy

Crimson may update this Privacy Policy to reflect changes to the website, our practices, service providers, or applicable requirements. The updated version will be posted on this page with a revised “Last updated” date.

Contact us

Questions, concerns, complaints, and requests concerning this Privacy Policy or Crimson’s handling of personal information may be directed to:

Privacy Officer
Crimson Transaction Technologies
[Insert mailing address]
[Insert privacy email]
Contact Crimson

If we cannot resolve your privacy concern, you may have the right to contact the privacy or data-protection authority responsible for your jurisdiction.