Privacy Policy

1. Introduction

Crooked Tree, the developer of this website, operates under the legal entity Crooked Tree Collaborative LLC, a limited liability company registered in the State of Utah with a registered office at 369 E Bryan Ave, Salt Lake City, Utah 84115-1711, United States. This Privacy Policy explains how Crooked Tree Collaborative LLC (referred to throughout this document as Crooked Tree, we, us, or our) collects, uses, discloses, and safeguards personal information when you visit our website located at https://www.crookedtree.autos (the Website), engage with our computer systems design and related services, or otherwise interact with us in a context where this policy is made available.

We take the privacy and security of personal information seriously. This policy is designed to provide a clear and comprehensive account of our data practices so that you may make informed decisions about the information you share with us. By accessing or using the Website, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the Website and refrain from providing personal information to us.

This policy applies to all information collected through the Website, through electronic communications such as email and contact forms, through telephone calls with our representatives, and through any other channel where this policy is referenced or made available. It does not apply to information collected by third-party websites or services that may be linked from our Website, each of which is governed by its own privacy practices as described in Section 13 below.

2. Information We Collect

We collect several categories of personal information depending on the nature and context of your interaction with us. The collection of this information enables us to provide our services effectively, respond to inquiries, improve the Website, and comply with legal obligations. Below we describe each category of information that we may collect and the circumstances under which collection occurs.

2.1 Information You Provide Directly

When you fill out a contact form on the Website, send an email to any address at the crookedtree.autos domain, call our office by telephone, or otherwise initiate communication with us, you may voluntarily provide certain personal information. This information typically includes your name, email address, telephone number, company name, job title, and the content of your message or inquiry. We also collect any additional information you choose to share in the course of a business conversation, such as details about your technical requirements, project scope, budget parameters, or timeline constraints.

If you enter into a service agreement or engage us for a project, we collect information necessary to perform under that agreement, which may include billing contact details, organizational information, technical specifications, system access credentials, and other data relevant to the scope of work. We treat all information provided in the context of a client engagement with the same level of confidentiality as described throughout this policy.

2.2 Information Collected Automatically

When you visit the Website, certain information is collected automatically through server logs, browser interactions, and analytics tools. This includes your Internet Protocol (IP) address, browser type and version, operating system, referring URL, pages visited, date and time of visit, time spent on each page, and other diagnostic data related to your browsing session. This information helps us understand how visitors use the Website, identify performance issues, and maintain the security of our systems.

We may also collect device-level information such as screen resolution, device type, and language preferences. This technical data is aggregated and de-identified wherever possible and is not used to identify individual visitors unless combined with other information in the context of a security investigation or as otherwise required by law.

2.3 Cookies and Similar Technologies

Our Website uses cookies, web beacons, and similar tracking technologies to enhance user experience, analyze traffic patterns, and support essential site functionality. A cookie is a small text file placed on your device by the web server when you visit a website. We use both session cookies, which expire when you close your browser, and persistent cookies, which remain on your device for a set period or until manually deleted. Additional detail on our use of cookies is provided in Section 6 of this policy.

2.4 Information from Third-Party Sources

In limited circumstances, we may receive information about you from third-party sources. This may include information from business partners, service providers, publicly available databases, and professional networking platforms. For example, if a colleague refers you to us or includes your contact information in a project-related communication, we may receive your name and professional details. We use such information only for the purpose for which it was provided and in accordance with this policy.

3. How We Use Information

The personal information we collect is used for a range of business purposes that are necessary to operate our company, deliver our services, and maintain our relationship with you. We do not use personal information for purposes that are materially different from those disclosed in this policy without providing notice and, where required by law, obtaining your consent.

We use personal information to respond to inquiries and communicate with prospective and current clients. When you submit a contact form or send us an email, we use the information you provide to understand your needs, answer your questions, and determine whether and how we can assist you. We may follow up with additional information about our services if your inquiry suggests a potential business interest, but we do not engage in unsolicited mass marketing or purchase mailing lists for promotional purposes.

We use information to deliver and manage the services we have been engaged to provide. This includes project planning, system architecture design, platform engineering, security assessments, integration work, and ongoing managed operations. Information collected in the course of a client engagement is used solely to fulfill our contractual obligations and is handled in accordance with any applicable confidentiality provisions in our client agreements.

We use information to improve and maintain the Website and our internal systems. Aggregate analytics data helps us identify popular content, diagnose technical problems, and optimize site performance. We also use information for administrative purposes such as account management, billing, auditing, and compliance with legal and regulatory requirements. In the event of a corporate transaction such as a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction, subject to the protections described in this policy.

4. Legal Bases for Processing

We process personal information in accordance with applicable data protection laws. Depending on your jurisdiction and the nature of the processing activity, our legal bases for processing may include one or more of the following grounds.

Consent is one basis on which we process information. Where you have given clear and affirmative consent for us to process your personal information for a specific purpose, such as subscribing to updates or providing optional details through a form, we rely on that consent as the lawful basis. You have the right to withdraw consent at any time, and instructions for doing so are provided in Section 11. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Contractual necessity is another basis for processing. When you enter into or express interest in entering into a service agreement with us, we process personal information as necessary to take steps at your request prior to entering into a contract and to perform our obligations under any resulting contract. This includes processing information needed for project scoping, service delivery, billing, and client communication.

Legitimate interests provide a further basis. We may process personal information where necessary for the purposes of our legitimate business interests or those of a third party, provided that those interests are not overridden by your data protection rights. Our legitimate interests include operating and improving the Website, responding to inquiries, protecting the security of our systems, preventing fraud, and conducting business development activities in a proportionate and responsible manner.

Legal obligation may also require processing. In certain circumstances, we may be required to process personal information to comply with applicable laws, regulations, court orders, or governmental requests. This may include retaining records for tax or accounting purposes, responding to lawful requests from public authorities, and meeting national security or law enforcement requirements.

5. Data Sharing and Disclosure

We do not sell, rent, or trade personal information to third parties for their own marketing purposes. We share personal information only in the limited circumstances described below and always with appropriate safeguards in place to protect the confidentiality and security of that information.

We may share information with service providers and contractors who perform functions on our behalf and under our instruction. These third parties include website hosting providers, analytics services, email communication platforms, cloud storage providers, and professional advisors such as legal counsel and accountants. Each service provider is contractually obligated to process personal information only for the purposes we specify, to maintain appropriate security measures, and to comply with applicable data protection laws. We conduct due diligence on our service providers and limit the categories and volume of information shared to what is reasonably necessary for the performance of their functions.

We may disclose information in connection with a corporate transaction. If Crooked Tree Collaborative LLC is involved in a merger, acquisition, reorganization, or sale of all or a portion of its assets, personal information may be transferred to the successor entity or acquiring party. In such circumstances, we will require the recipient to agree to honor the terms of this Privacy Policy with respect to the transferred information, or to provide notice and an opportunity to opt out before the information becomes subject to a different privacy policy.

We may disclose information as required by law or to protect rights and safety. This includes responding to lawful subpoenas, court orders, or legal process; establishing or exercising our legal rights; defending against legal claims; and investigating, preventing, or taking action regarding suspected illegal activities, fraud, or threats to the safety of any person. We evaluate each request carefully and disclose only the information reasonably necessary to satisfy the applicable legal requirement.

6. Cookies and Tracking Technologies

Our Website uses cookies and similar tracking technologies to function properly, to analyze how visitors interact with the site, and to support basic functionality. This section explains the types of cookies we deploy and the choices available to you regarding their use.

Essential cookies are necessary for the Website to operate and cannot be disabled without impairing core functionality. These cookies support session management, form submission processing, and security features such as cross-site request forgery protection. They do not store personally identifiable information beyond what is required for the immediate operation of the site and are typically set only in response to actions you take that constitute a request for services.

Analytics and performance cookies help us understand how visitors engage with the Website by collecting and reporting information anonymously. We use these cookies to measure page visits, traffic sources, and user navigation patterns so that we can improve site structure and content. The data collected through these cookies is aggregated and does not directly identify individual users. We may use third-party analytics providers that set their own cookies for these purposes, and such providers are subject to their own privacy policies.

You have control over cookie preferences through your browser settings. Most modern web browsers allow you to block or delete cookies, limit cookie placement to certain sites, and configure notifications when a cookie is set. Please consult the help documentation for your specific browser for detailed instructions. Please note that disabling cookies may affect the functionality of the Website and limit your ability to use certain features. You may also opt out of certain analytics tracking by using industry-standard opt-out mechanisms such as the Network Advertising Initiative opt-out page or the Digital Advertising Alliance consumer choice tool.

7. Data Retention

We retain personal information only for as long as is reasonably necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting obligations. The specific retention period for any category of information depends on the nature of the information, the purpose of collection, and applicable legal requirements.

Information collected through contact forms and correspondence is retained for the duration of the business relationship and for a reasonable period thereafter to respond to follow-up inquiries, maintain records of prior communications, and address any potential disputes. Typically, this retention period does not exceed three years after the last substantive communication unless a longer period is required by law or is necessary in connection with an ongoing client engagement.

Information collected in the course of a client engagement, including project documentation, technical specifications, and communications, is retained for the duration of the engagement and for a period of up to seven years following project completion. This retention period aligns with standard record-keeping practices for professional services, facilitates any post-project support obligations, and complies with applicable statutes of limitation for contract-related claims.

Server logs and automatically collected technical data are retained for a shorter period, generally not exceeding twelve months, unless needed for security investigations or as otherwise required by law. When the retention period expires, we securely delete or anonymize personal information using methods designed to prevent reconstruction or recovery. If anonymization is not feasible, the information is securely destroyed.

8. Data Security

We implement and maintain appropriate technical, administrative, and physical safeguards designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. Our security program is informed by industry standards and the sensitivity of the information we process, and it is subject to ongoing review and improvement.

Technical measures include the use of Transport Layer Security (TLS) encryption for data transmitted between your browser and our servers, network firewalls, intrusion detection systems, regular vulnerability scanning, and access controls that limit data access to authorized personnel on a need-to-know basis. Administrative measures include employee training on data protection practices, confidentiality agreements, security policies and procedures, and periodic audits of our data handling practices. Physical measures include controlled access to our office facilities and secure storage of physical records.

Despite our efforts, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security of personal information, and we urge you to take precautions to protect your own information when using the internet, including using strong passwords, keeping software updated, and being mindful of phishing attempts and other social engineering attacks. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected individuals and relevant authorities as required by applicable law.

9. International Data Transfers

Crooked Tree Collaborative LLC is based in the United States, and the personal information we collect is processed and stored primarily on servers located within the United States. However, we may use service providers that operate in other countries, and in such cases your information may be transferred to, stored, or processed in jurisdictions outside your country of residence, including jurisdictions that may not provide the same level of data protection as the laws of your home country.

When we transfer personal information across international borders, we take appropriate measures to ensure that the information receives an adequate level of protection in accordance with this Privacy Policy and applicable law. Where required, we implement standard contractual clauses, data processing agreements, or other legally recognized transfer mechanisms. For individuals located in the European Economic Area, the United Kingdom, or Switzerland, we rely on recognized adequacy decisions or appropriate safeguards as the basis for restricted transfers.

By using the Website or providing personal information to us, you acknowledge that your information may be transferred to and processed in the United States and other countries where our service providers operate. If you have questions about the specific safeguards applied to international transfers of your information, please contact us using the details provided in Section 14.

10. Privacy for Children

Our Website and services are not directed to individuals under the age of sixteen. We do not knowingly collect, use, or disclose personal information from children under the age of sixteen without verifiable parental consent. If we become aware that we have inadvertently received personal information from a child under sixteen without such consent, we will take prompt steps to delete that information from our records and cease any further processing.

If you are a parent or legal guardian and believe that your child has provided personal information to us through the Website or any other channel, please contact us immediately using the contact details provided in Section 14. We will investigate the matter and, if confirmed, will remove the information in accordance with applicable law. We encourage parents and guardians to monitor the online activities of their children and to instruct them never to provide personal information through websites without permission.

We do not offer services or products for purchase by children, and our client engagements are conducted exclusively with businesses and adult professionals. No portion of the Website is designed or intended to appeal to children, and we do not use the Website to target advertising or content to individuals under the age of sixteen.

11. Your Rights and Choices

Depending on your jurisdiction, you may have certain rights regarding the personal information we hold about you. We are committed to respecting and facilitating the exercise of these rights, and we will respond to verified requests in accordance with applicable law. The rights described below represent the range of protections that may be available to you; the specific rights that apply depend on the laws of your state or country of residence.

Right to access. You may request confirmation of whether we process personal information about you and, if so, request access to that information along with details about the categories of information processed, the purposes of processing, the categories of recipients, and the expected retention period. We will provide a copy of the personal information in a commonly used electronic format unless you request otherwise.

Right to rectification. If you believe that personal information we hold about you is inaccurate or incomplete, you may request that we correct or supplement it. We will make reasonable efforts to verify the accuracy of the new information before making corrections.

Right to erasure. In certain circumstances, you may request that we delete personal information we hold about you. This right is not absolute and may be limited by legal obligations that require us to retain certain records, by ongoing contractual relationships, or by other exceptions recognized under applicable law.

Right to restrict processing. You may request that we limit the processing of your personal information in certain situations, such as when you contest the accuracy of the information or object to processing based on legitimate interests, pending verification of our response.

Right to data portability. Where processing is based on consent or contractual necessity and is carried out by automated means, you may request that we provide your personal information to you or to another controller in a structured, commonly used, and machine-readable format.

Right to object. You may object to processing of your personal information based on legitimate interests or for direct marketing purposes. Upon receiving an objection to direct marketing, we will cease such processing without undue delay. For objections based on legitimate interests, we will evaluate whether our interests override your rights and inform you of our determination.

Right to withdraw consent. Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal. To withdraw consent, please contact us using the details in Section 14 or follow any opt-out instructions provided in the relevant communication.

Right to non-discrimination. We will not discriminate against you for exercising any of the rights described in this policy. This means we will not deny services, charge different prices, or provide a different level of service quality because you have exercised a privacy right, except to the extent that the exercise of your right prevents us from providing the requested service.

To exercise any of these rights, please submit a verifiable request to us using the contact information in Section 14. We may ask for additional information to confirm your identity before processing your request. We will respond to verified requests within the time frame required by applicable law, generally within thirty to forty-five days depending on your jurisdiction. If we require an extension, we will inform you of the reason and the expected timeline.

12. Third-Party Links and Services

The Website may contain links to third-party websites, plug-ins, services, and applications that are not owned or controlled by Crooked Tree Collaborative LLC. Clicking on those links or enabling those connections may allow third parties to collect or share information about you. This Privacy Policy does not apply to any third-party website or service, and we are not responsible for the privacy practices, content, or security of such third parties.

We encourage you to review the privacy policies of every third-party website or service you visit before providing any personal information. If you access a third-party website through a link on our Website, the operators of that site may use cookies or other tracking technologies that we do not control. We have no influence over the data collection and processing activities of independent third parties, and your interactions with them are governed solely by their own terms and policies.

Our Website may also integrate with social media platforms or embed content from third-party providers. These integrations may allow the third-party provider to recognize your device and collect information about your browsing activity even if you do not interact with the embedded content directly. We include such integrations only when they serve a functional purpose for the Website and we seek to minimize any associated privacy impact.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or operational requirements. When we make material changes, we will revise the Effective Date at the top of this page and provide a prominent notice on the Website prior to the changes taking effect. For non-material changes, the updated policy will be posted on this page without separate notification, and the revised Effective Date will indicate when the update occurred.

We encourage you to review this Privacy Policy periodically so that you remain informed about how we protect your information. If we make changes that materially affect the way we use or disclose previously collected personal information, we will make reasonable efforts to notify affected individuals and, where required by law, obtain consent before applying the changes to that information.

Your continued use of the Website after the effective date of a revised Privacy Policy constitutes your acknowledgment and acceptance of the updated terms. If you do not agree with the revised policy, you should discontinue use of the Website and, where applicable, contact us to discuss the handling of your information under the prior policy.

14. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us using any of the channels listed below. We take privacy matters seriously and will make every effort to address your inquiry promptly and thoroughly.

Crooked Tree Collaborative LLC
369 E Bryan Ave
Salt Lake City, Utah 84115-1711
United States

Email: touch@crookedtree.autos
Phone: +1 743 254 8362
Website: www.crookedtree.autos

We aim to acknowledge all privacy-related inquiries within five business days and to provide a substantive response within thirty days. If your inquiry is complex or requires consultation with external advisors, we may extend this timeline and will communicate any such extension to you. If you are located in a jurisdiction that provides a right to lodge a complaint with a data protection supervisory authority, you may do so if you believe that our processing of your personal information violates applicable law. We would, however, appreciate the opportunity to address your concerns directly before you escalate the matter to a regulatory body.