How CRĒDO looks after your personal data.
This policy is given under Part V of Lebanese Law No. 81 of 10 October 2018 on Electronic Transactions and Personal Data. It says who we are, what we collect and why, how long we keep it, and how you can use your rights.
Last updated 1 November 2026Who we are
The controller of the personal data described in this policy is CRĒDO SARL, registered in the Commercial Register of Mount Lebanon under number 2082185.
Registered office: Bir Hassan, Kambris Building, Block B, 3rd floor, Chayah, Lebanon.
For anything in this policy, including using your rights, write to legal@hellocredo.com.
If you request a consultation
This section covers the form you fill in when you ask for a confidential consultation.
What we collect
- Your full name (required).
- Your email address (required).
- Your telephone number, with its country code (optional).
- The page of this website you sent the request from, which the form adds by itself.
Why we collect it
- To reply to your request and arrange the consultation.
- To contact you in the future about CRĒDO and its advisory services.
You agree to both by ticking the box on the form. The form cannot be sent without it, and you can withdraw your agreement to future contact at any time.
Required or optional, and what happens if you leave something out
Your name and email address are required: without them we cannot reply, and the form cannot be sent. Your telephone number is optional; if you leave it out we will reply by email only. If you do not tick the box, the form is not sent and nothing is stored.
How long we keep it
For 24 months after our last contact with you, then we delete it.
Stopping future contact
You can tell us at any time, at legal@hellocredo.com, that you do not want to be contacted again, or that you want your details deleted. We will act on it within 10 days.
If you are a client
This section covers clients and the people in a client’s team who have a login to the CRĒDO client portal.
What we collect
- Your name and your organisation’s name, your email address and, if given, your telephone number.
- A username and a password. The password is stored securely, and nobody at CRĒDO can read it.
- Records of the engagement: its scope and fee, the tasks on your workstream, statements of what has been charged and paid, and messages you send us through the portal.
- The answers you give in forms we send you.
Why we collect it
To carry out the engagement, to invoice and keep the accounts, to communicate with you, and to run the portal. Most of it comes from you; some is entered by the CRĒDO partner who opened your account.
Required or optional
Your email address is required, because it is the only way into the portal: your invitation and every notice go to it. Everything else is what the engagement needs, and a form question marked optional is optional.
How long we keep it
For as long as the engagement lasts, and for 10 years after the contract ends.
A copy of every form
Every time a form is submitted for you, we email you a copy of the answers, with a link to this policy. That is true whoever fills it in, including when a CRĒDO partner fills a form in on your behalf, so you always see what has been recorded in your name.
Your rights
You, or your heirs, can ask us to:
- tell you whether we hold personal data about you, and give you a copy of it in a form you can understand, with the purposes, the categories and where it came from;
- correct, complete, update or erase data that is wrong, incomplete, unclear, out of date, or that we should not be holding;
- stop collecting or using your data where you have a legitimate reason to object.
Write to legal@hellocredo.com. We answer within 10 days, and we do not charge for a copy, a correction or an erasure. If you are not satisfied, you can take the matter to the competent court, including the judge of urgent matters.
We keep these requests and our replies, so that we can show we answered them.
Other information
Information about other people
What a client tells us about its situation can name other people, for example those involved in a reputational matter. We record only what the engagement needs.
If we hold personal data about you that you did not give us, you can ask us what it is, why we hold it and who has seen it, and you can object to our holding it. Write to legal@hellocredo.com.
Who else handles your data
We use two service providers to run this website. They handle personal data only to provide these services:
- Resend receives the recipient’s address and the subject and content of the message.
- Cloudflare hosts this website, stores its database, and keeps operational logs of requests to it.
Both are international companies, so personal data may be processed on servers outside Lebanon. We do not hand personal data to anyone else unless the law requires it.
Cookies and similar technology
This website does not use tracking cookies.
Automated decisions
We do not take decisions about you based only on automated processing of your data.
Changes to this policy
If what we do with personal data changes, we update this page and the date at the top.
Last updated: 1 November 2026.