Privacy Policy

1. Who is responsible for your data

The data controller is ThinkData BV, established in Belgium (enterprise number BE 0533.840.686), with registered office at [registered office address — to add before publishing], operating the Crane Bioworks brand. For any privacy question or to exercise your rights, contact us at hello@cranebioworks.com.

2. What personal data we collect

Information you provide

When you fill in a contact or demo-request form, book a call, or email us, we collect the details you choose to share — typically your name, business email address, company, role, and the content of your message.

Information we collect automatically

When you visit the website we collect limited technical and usage data, such as your IP address (which may be truncated or anonymised), device and browser type, pages viewed, and referring pages. This is collected through cookies and similar technologies (see section 5).

We do not seek to collect special categories of personal data through the website, and the Services are not intended for children.

3. How we use your data and our legal bases

We use personal data for the following purposes, relying on the legal bases shown:

• Responding to enquiries and providing requested information — to take steps at your request prior to entering a contract, and our legitimate interest in answering you.
• Managing and performing engagements — performance of a contract with you or your organisation.
• Operating, securing, and improving the website — our legitimate interest in running a safe and effective website.
• Analytics and, where applicable, marketing communications — your consent, which you can withdraw at any time.
• Complying with legal obligations — where the law requires it.

4. Who we share data with

We do not sell your personal data. We share it only as needed with: service providers and processors who help us operate the website and our business (for example hosting, analytics, email, and scheduling tools), under appropriate confidentiality and data-processing terms; professional advisers such as lawyers and accountants; competent authorities where required by law; and a successor entity in connection with a merger, acquisition, or sale of assets.

5. Cookies and similar technologies

We use strictly necessary cookies to make the website function, and — subject to your consent — analytics cookies to understand how the site is used. You can manage or refuse non-essential cookies through your browser settings or any cookie controls we provide. Disabling cookies may affect how parts of the site work.

6. International transfers

Some of our service providers may process data outside the European Economic Area. Where that happens, we rely on an appropriate safeguard under the GDPR — such as an adequacy decision or the European Commission’s Standard Contractual Clauses — so that your data remains protected.

7. How long we keep your data

We keep personal data only for as long as necessary for the purposes described above — for example, to respond to and follow up on your enquiry, to perform and account for an engagement, and to meet legal, tax, and record-keeping obligations — after which it is deleted or anonymised.

8. How we protect your data

We apply appropriate technical and organisational measures to protect personal data against loss, misuse, and unauthorised access, alteration, or disclosure. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. Your rights under the GDPR

Subject to the conditions in the GDPR, you have the right to:

• access the personal data we hold about you;
• have inaccurate data rectified;
• have your data erased;
• restrict or object to certain processing, including direct marketing;
• receive your data in a portable format; and
• withdraw consent at any time, without affecting processing already carried out.

To exercise any of these rights, contact hello@cranebioworks.com. You also have the right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données) (https://www.dataprotectionauthority.be) or with the supervisory authority in your country of residence.

10. Third-party links

The website may link to third-party sites that we do not control. This Privacy Policy does not apply to those sites; please review their own privacy notices.

11. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date above shows when it last changed, and material changes will be posted on this page.

12. Contact

For any question about this Privacy Policy or our data practices, contact hello@cranebioworks.com or hello@cranebioworks.com. See also our Terms of Service and Disclaimer.