Effective Date (Last Updated): February 25, 2026

1. Overview and Scope

This Privacy Policy ("Policy") describes how Crest Capital and its affiliates ("Crest Capital", "we", "our", or "us") collect, use, and disclose information through our website www.crestcapital.com (the "Website").

Commercial-only notice. Crest Capital provides equipment financing products and services exclusively to businesses and other commercial entities in the United States. The Website is intended solely for use by businesses and their authorized representatives acting in a commercial capacity. We do not offer or provide financing products or services for personal, family, or household purposes.

This Policy applies only to information collected through the Website. Separate written agreements and disclosures may apply to information processed in connection with a specific financing inquiry, application, transaction, or account relationship.

2. Commercial Use; Authorized Representatives

By using the Website, you represent that you are accessing and using the Website solely on behalf of a business or other commercial entity for legitimate business purposes and not for personal, family, or household purposes.

If you submit information about another person (for example, a business owner, officer, employee, or other individual associated with a business in connection with a commercial financing inquiry or relationship), you represent that you have the authority to provide that information to Crest Capital for business purposes and that you have obtained any necessary permissions to do so.

3. Information We Collect

3.1 Information You Provide

We collect information you choose to submit through the Website, such as when you request information, request a quote, submit an inquiry, apply for financing, or otherwise communicate with us. This may include:

• Business contact information (such as your name, title, business email address, business phone number, and business mailing address)
• Business and request/application information you provide in connection with a financing inquiry or request
• Communications and the information included in your messages, submissions, or requests
• Account credentials (if applicable)

Please do not submit sensitive personal information through general Website contact forms (for example, Social Security numbers, driver's license numbers, or bank account numbers), unless a specific form expressly requests it as part of an application process.

3.2 Information Collected Automatically

When you visit the Website, we and our service providers may automatically collect certain information about your device and usage, including:

• Device and browser information (such as IP address, device identifiers, operating system, and browser type)
• Website activity and usage data (such as pages viewed, links clicked, and referring/exit pages)
• Approximate location information (for example, general location derived from an IP address)
• Information collected through cookies, pixels, tags, and similar technologies

4. How We Use Information

We may use information collected through the Website for legitimate business purposes, including to:

• Operate, maintain, secure, and improve the Website and our systems
• Respond to inquiries and provide requested information
• Deliver requested tools and functionality (including quotes or responses to requests)
• Evaluate and process commercial financing requests, where applicable
• Send administrative, transactional, and service communications
• Send marketing communications (you can opt out of marketing emails using the unsubscribe instructions in those emails)
• Measure and improve Website performance and marketing effectiveness (including analytics and conversion measurement)
• Detect, prevent, and investigate fraud, misuse, security incidents, and prohibited activity
• Comply with applicable law and enforce our agreements and policies

5. How We Disclose Information

We may disclose information collected through the Website in the following circumstances:

• Service providers. To vendors and service providers that perform services for us (for example, website hosting, analytics, marketing measurement, communications, and security).
• Affiliates. To our affiliates for legitimate business purposes and internal administration.
• Professional advisors. To attorneys, auditors, consultants, and similar advisors in connection with legitimate business and compliance purposes.
• Legal and compliance. To comply with law, regulation, legal process, or governmental request, and to protect the rights, property, and safety of Crest Capital, our users, and others.
• Business transactions. In connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or a portion of our business or assets.
• At your direction. Where you consent or direct us to disclose information.

6. Cookies, Analytics, Advertising, and Similar Technologies

We use cookies, pixels, tags, and similar technologies to operate the Website, understand usage, support marketing and measurement, and improve performance. These technologies may be set by us or by third parties.

Examples of third-party tools used on the Website may include:

• Google Tag Manager (to manage Website tags)
• Google Analytics (to understand Website traffic and usage)
• Google advertising and conversion measurement (to measure the effectiveness of our advertising and marketing)
• Phone/call conversion measurement (to help attribute calls to marketing sources)
• Security and trust seals (for example, SSL site seal scripts)

These tools and technologies may change over time as vendors update their services.

You can control cookies through your browser settings. If you block or delete cookies, some Website features may not function properly. Third parties may also offer tools that allow you to limit certain data collection and use (for example, analytics opt-out tools or ad personalization controls). Use of those tools is subject to the third party's terms and settings.

7. Do Not Track Signals; Third-Party Online Tracking Disclosures (CalOPPA)

Some browsers incorporate a "Do Not Track" ("DNT") signal or similar mechanism. Because there is no common, accepted standard for how websites should respond to DNT signals, we do not currently respond to DNT browser signals.

In addition, other parties (including analytics, advertising, and measurement providers) may collect personally identifiable information about an individual consumer’s online activities over time and across different Web sites when a consumer uses the Website, to the extent such third-party technologies are enabled.

8. Data Retention

We retain information for as long as reasonably necessary for the purposes described in this Policy, including to operate our business, maintain records, resolve disputes, enforce our agreements, and comply with legal obligations. Retention periods may vary depending on the nature of the information and the context in which it was collected.

9. Security

We maintain reasonable administrative, technical, and physical safeguards designed to protect information. However, no method of transmission over the Internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.

10. Third-Party Websites and Services

The Website may contain links to third-party websites or services. We are not responsible for the privacy practices, content, or security of third parties. We encourage you to review the privacy policies of any third-party websites and services you use.

11. Children's Privacy

The Website is not directed to children under 13, and we do not knowingly collect personal information from children under 13 through the Website.

12. Changes to This Policy

We may update this Policy from time to time. If we make material changes to this Policy, we will post the updated Policy on this page and revise the Effective Date above. Changes are effective when posted.

13. Contact Information

For questions about this Policy or our Website privacy practices:

Crest Capital
Box 88233
Atlanta, GA 30356
Email: info@crestcapital.com
Tel: (800) 245-1213

14. Governing Law and Terms

This Policy is not intended to create contractual rights beyond those required by applicable law. This Policy is governed by the laws of the State of Georgia, without regard to conflicts of law principles. Your use of the Website is subject to our Terms and Conditions, which include important provisions regarding dispute resolution (including arbitration), limitations of liability, and other terms that apply to Website use. In the event of any conflict between this Policy and the Terms and Conditions, the Terms and Conditions shall control.