Crestwyn Routine · Policy library
Privacy Policy
01Scope of this policy
This Privacy Policy explains how Crestwyn Routine handles information in connection with its business website and AI workflow consulting and operational support services. The services include workflow assessments, AI workflow planning, operations documentation, task coordination frameworks, and periodic workflow reviews. This policy applies to business visitors, prospective clients, client representatives, and people who contact us about these services.
The policy distinguishes information used by the on-page request interface from information we receive through a separate business communication or an agreed engagement. Browsing the website or preparing a workflow brief does not, by itself, establish a consulting relationship. Different terms may apply to information processed by a tool that you choose to use independently.
02Information entered into the request interface
The request interface asks for a name, business email address, company name, phone number, service of interest, a description of the workflow, and acknowledgment of the privacy information. These fields are checked in your browser. The interface then displays an on-screen completion message and a reference code.
The custom form does not itself email those contents to Crestwyn Routine, upload them to a client database, or save the brief in browser storage. The displayed code is a browser-generated reference for your own project notes; it is not evidence of a server-side ticket or a received business instruction. Please use the contact details at the end of this policy if you wish to communicate the brief to us separately.
03Information received through business communications
If you contact us separately or enter an engagement, we may receive your contact details, business role, correspondence, scope requirements, relevant process information, and documents that you choose to provide. An agreed engagement may also involve information needed to issue an invoice, discuss a deliverable, or record a change in scope.
Provide only the information reasonably needed for the task. Do not place passwords, payment-card details, identity documents, medical information, or unrelated customer records in a general enquiry. If a proposed engagement requires protected or sensitive information, the handling arrangements should be agreed before it is transferred.
04Technical information and hosting
The website is intended to operate on Shopify. Shopify, content-delivery infrastructure, and other services enabled by the site operator may process technical information when a page is requested. This can include an IP address, browser and device information, access time, requested resource, and information required for hosting, security, or platform operation.
The supplied custom website blocks do not add advertising pixels, behavioral analytics, session-replay software, or external AI calls. A Shopify store may separately enable platform features, applications, or consent settings. Their actual use determines any additional technical processing. Our Cookie Policy explains this distinction.
05Purposes for using information we receive
We use business information that is provided to us to understand a requested service, discuss scope and pricing, organize an agreed engagement, prepare the relevant plan or documentation, respond to questions, and maintain appropriate business records. We may also use information to investigate a complaint, resolve a billing issue, protect the website or business, or comply with a legal obligation.
We seek to keep use proportionate to the task. An enquiry is not permission to use confidential client material for unrelated promotional activity. Permission to communicate about an engagement does not automatically authorize distribution of the contact details for unrelated marketing.
06Client documents and information about other people
A client may provide a workflow outline or document that contains information about employees, customers, contractors, or other people. The client should have authority to disclose that information for the agreed purpose. Where possible, use role labels, sample data, or redacted documents instead of unnecessary personal details.
The engagement scope should identify what information is needed and how it will be supplied. Access to live systems, shared workspaces, or additional datasets is not implied by a standard planning or documentation package. Any such access requires a separate arrangement with appropriate limitations.
07AI tools and human review
AI Workflow Planning concerns practical recommendations for using AI tools in an agreed routine. Information entered into the website form is not automatically sent to an AI model. Before confidential client content is introduced into an external AI service as part of an engagement, the purpose, tool, relevant settings, and authority to share that content should be addressed with the client.
Third-party tools have their own data-handling terms. A recommendation to consider a tool does not mean that Crestwyn Routine controls that provider or guarantees its processing practices. Avoid assuming that all AI accounts have the same retention, training, sharing, or access settings. Human review remains important for AI-assisted outputs.
08When information may be shared
Where necessary for an agreed service, information may be made available to a service provider performing a defined business function, such as hosting, business communications, document handling, or invoicing. The information disclosed should be limited to what that function reasonably requires. A provider is not authorized by this policy to use confidential engagement information for unrelated purposes.
Information may also be disclosed where required by law, a valid legal request, or an appropriate process for protecting legal rights, investigating misuse, or resolving a dispute. If a business transfer occurs, relevant records may be handled as part of that transaction subject to applicable obligations. These statements describe circumstances in which disclosure may be necessary; they are not a claim that every category of provider is currently used.
09Sale, advertising, and promotional use
The custom site does not include a mechanism for selling submitted form details or transferring them to an advertising network. We do not treat completion of the request interface as consent to publish a client name, quote, workflow document, or confidential project detail.
We do not publish confidential client material or identify a business relationship without an appropriate basis and permission. Information supplied for an engagement remains subject to the agreed purpose and handling arrangements.
10Retention
Form values are used within the active browser page for validation and the completion display. The custom interface does not establish a separate persistent enquiry record. Closing or reloading the page can remove the displayed brief and reference.
For information received through an actual engagement or separate correspondence, retention depends on the purpose, the ongoing business relationship, applicable recordkeeping requirements, and any unresolved complaint or dispute. We do not use one fixed retention period for every kind of record. Information no longer needed for a legitimate purpose should be deleted, returned, or otherwise handled appropriately.
11Security and your role
Reasonable care is appropriate when handling business information. Relevant measures may include restricting access to people who need the information, using appropriate service settings, limiting unnecessary copies, and avoiding disclosure through an unsuitable channel. No internet transmission, device, or service can be guaranteed to be free of risk.
You are responsible for protecting your own accounts and for using an appropriate method to share confidential materials. Contact us if you believe information connected with an engagement has been disclosed incorrectly. Do not send additional sensitive material merely to describe a suspected issue.
12Requests concerning your information
You may contact us to ask about information you have provided, request correction of inaccurate contact details, or ask for deletion or return of information that is no longer needed. We will consider the request in light of the information actually held, the purpose for holding it, contractual responsibilities, and applicable law.
We may need proportionate information to verify the identity or authority of the requester. We cannot provide access to another person’s confidential information, create records that we do not hold, or delete information that must be retained for a lawful purpose. A request is not automatically subject to every privacy right available in every jurisdiction.
13Rights under applicable privacy laws
Where a privacy law applies to our processing and to your request, you may have additional rights relating to access, correction, deletion, portability, consent, or certain processing choices. The availability and scope of those rights depend on the law, the nature of the information, and relevant exceptions.
Kentucky’s consumer data protection framework has coverage requirements and exceptions; business or employment-related information is not necessarily covered in the same way as consumer information. If a covered right or appeal procedure applies, we will handle a qualifying request within the required legal process. This policy does not claim that the business meets every statutory coverage threshold.
14Children and intended audience
The website and consulting services are directed to adults acting for businesses. The request interface is not intended for children. Do not submit information about a child or use the site to send educational, health, or identity records concerning a minor.
If you believe a child’s information has been provided to us inappropriately, contact us with enough detail to identify the communication without sending unnecessary additional personal information.
15Changes and contact
We may update this policy when the website, service arrangements, or information-handling practices change. The last-updated date identifies this version. A material change should be considered in relation to the information and activity it affects, rather than treated as blanket permission for unrelated uses of older records.
Contact Crestwyn Routine using the details below with privacy questions or requests. State the nature of the request and the business communication or engagement involved so that it can be considered efficiently.
Contact information
Crestwyn Routine
- workflows@crestwynroutine.com
- Address
- 1121 Seaton Ave, Greenup, KY 41144
- Phone
- +1 606 311-5926