Privacy Policy

1. Introduction

This Privacy Policy explains how we collect, use, and protect your information when you use the Crewlane website and services.

Crewlane (crewlane.dev) is a market-facing brand of HestaBit Technologies Pvt. Ltd., a company incorporated in India (“Company”, “we”, “us”, or “our”). This Privacy Policy applies to the website located at crewlane.dev and all services offered under the Crewlane brand.

We provide services globally, including in India, the European Union (EU), the United Kingdom (UK), the United States (US), and the Middle East.

By accessing our website or engaging with our services, you agree to this Privacy Policy.

2. Information We Collect

We may collect the following categories of data:

3. How We Collect Information

We collect information through:

• Website forms
• Discovery call or consultation requests
• Direct communication (email, calls, messages)
• Cookies and analytics tools

4. How We Use Your Information

We use your data to:

• Respond to inquiries and provide services
• Evaluate and deliver engineering solutions
• Communicate regarding projects and updates
• Improve website performance and user experience
• Send relevant business communications (where permitted)

5. Legal Basis for Processing (GDPR)

For users in the EU/UK, we rely on the following legal bases:

6. Data Sharing

We may share your information with:

• Internal teams and authorised contractors
• Third-party service providers (analytics, CRM, communication tools)
• Legal or regulatory authorities when required

All such parties are obligated to maintain confidentiality and data protection standards.
We do not sell personal data.

7. International Data Transfers

As a global service provider, your data may be processed in countries outside your location, including India.

Where required, we implement appropriate safeguards to ensure your data remains protected in accordance with applicable laws, including GDPR.

8. Data Retention

We retain data:

• As long as necessary to fulfil business and contractual purposes
• For the duration of the client relationship
• As required by legal, regulatory, or compliance obligations

9. Your Rights (EU/UK Users)

If you are located in the EU or UK, you have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your data
• Restrict or object to processing
• Request data portability

You may exercise these rights by contacting us at the details provided in Section 18.

10. US Privacy Rights

For users in the United States:

• You may request access to or deletion of your personal data
• You may opt out of marketing communications

We comply with applicable US privacy laws, including the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), where applicable. California residents may request access to, deletion of, or information about the sale of their personal data. We do not sell personal data.

11. Cookies & Tracking Technologies

We use cookies and similar technologies to:

• Improve website functionality
• Analyse usage patterns
• Support marketing and advertising efforts (e.g., LinkedIn Insight Tag, Google Analytics)

You may control cookie preferences through your browser or via the cookie consent mechanism on our website. By continuing to use crewlane.dev without adjusting your settings, you consent to our use of cookies as described in this policy.

12. Data Security

We implement reasonable technical and organisational measures to protect your data, including:

• Restricted access controls
• Secure infrastructure
• Encryption where applicable

However, no system can be guaranteed to be completely secure.

13. Access to Client Systems

To deliver services, Crewlane engineering crews may access:

• Code repositories
• Infrastructure environments
• Internal tools and systems

We ensure:

• A mutual NDA is signed before any access to client systems or project details is granted
• Access is restricted and controlled
• Data is used only for agreed purposes
• Confidentiality is maintained at all times

14. Data Controller and Processor Roles

• We act as a Data Controller for website visitors and marketing data
• We act as a Data Processor when handling client data as part of service delivery

15. Third-Party Services

We may use third-party tools such as:

• Analytics platforms (e.g., Google Analytics)
• Advertising platforms (e.g., LinkedIn Insight Tag)
• CRM and communication tools

These providers may process your data in accordance with their own privacy policies.

16. Children's Privacy

Our services are not directed at individuals under the age of 16. We do not knowingly collect personal data from minors.

17. Updates to This Policy

We may update this Privacy Policy from time to time. Updated versions will be published on this page with a revised effective date. We encourage you to review this policy periodically.