Last Reviewed: 24/03/2025
This Privacy Notice explains how Crimson Technology Ltd (“Crimson”, “we”, “our”, or “us”) collects, uses, discloses, and protects personal information, and the rights individuals have in relation to their personal information.
Crimson is a provider of technology services, integration solutions, and professional services to enterprise customers.
To operate our business, Crimson may collect and process limited personal information relating to:
Crimson is committed to handling personal information in a transparent, reasonable, and secure manner, and in compliance with applicable data protection laws and regulations, including where applicable the Personal Information Protection Law (PIPL) of the People’s Republic of China, and other international privacy frameworks.
A Data Controller is an organisation that determines why and how personal information is processed.
Crimson acts as Data Controller only in limited circumstances, such as when processing personal information relating to:
Crimson does not store or operate customer personal data as a system of record. Where Crimson interacts with customer data in the course of delivering services, this is done under customer instruction and within customer‑controlled environments.
Your organisation remains the Data Controller for any personal data relating to your employees, customers, or end users.
“Personal information” refers to any information relating to an identified or identifiable individual.
This may include information such as a name, contact details, job title, or technical identifiers. Certain types of information may be considered sensitive personal information (for example, health or biometric data) and require enhanced protection under applicable laws.
Crimson does not intentionally collect or process sensitive personal information unless required by law or contract.
Crimson may collect and process the following categories of personal information, where relevant:
For employees and contractors, additional information may be processed for employment and legal purposes.
Crimson does not collect or retain customer application data on its own systems unless explicitly agreed.
Crimson uses personal information for purposes such as:
Where required by applicable law, processing is based on:
Crimson does not sell personal information.
Personal information may be shared only where necessary:
Where information is shared, appropriate confidentiality and security safeguards are applied.
Crimson operates internationally and may transfer personal information across borders as part of normal business operations.
Where cross‑border transfers occur, Crimson ensures appropriate safeguards are in place, such as:
Crimson implements appropriate technical and organisational measures to protect personal information against unauthorised access, disclosure, alteration, or loss.
Access to personal information is restricted to authorised individuals on a need‑to‑know basis.
Crimson retains personal information only for as long as necessary to fulfil the purposes outlined in this Privacy Notice, or to comply with legal and contractual requirements.
When personal information is no longer required, it is securely deleted or anonymised.
Subject to applicable laws, individuals may have rights to:
Requests may be subject to verification and legal limitations.
If you have questions or concerns about how Crimson handles personal information, or wish to exercise your rights, please contact us:
Email: info@crimsondynamics.cn (or your preferred inbox)
Crimson will respond in accordance with applicable data protection laws.
This Privacy Notice may be updated from time to time to reflect changes in legal requirements, business practices, or operations. The latest version will always be published on our website.