Credo Privacy Policy

CREDO - Privacy Notice

Effective: May 7, 2025

Table of Contents

  1. Commitment to Privacy
  2. Collection of Personal Information
  3. Use of Personal Information Collected
  4. Disclosure of Personal Information
  5. Data Retention
  6. Data Security
  7. Cookies
  8. Do Not Track
  9. Additional Information for Individuals Whose Personal Data is Subject to the GDPR or the UK GDPR
  10. Additional Information for Individuals Whose Personal Information is Subject to the CCPA
  11. Additional Information for Individuals Whose Personal Information is Subject to the Data Privacy Laws of Other Jurisdictions
  12. Contact Us

1. Commitment to Privacy

Credo Technology Group Holding Ltd and its affiliates (collectively, “Credo,” “we,” “us” or “our”) are committed to responsibly handling personal information that we collect or otherwise process regarding individuals who visit our website (the “Website”) or otherwise communicate or engage with us (“you” or “your”).

Our intention with this privacy policy (this “Privacy Policy”) is to provide you with clear, transparent and easily understandable information about how Credo uses and otherwise processes your personal information and certain rights you may have relating to such use and other processing. We reserve the right to change this Privacy Policy at any time, as circumstances or requirements change. All updates are effective immediately when we post them here and they apply on a go-forward basis. For this reason, we encourage you to review this Privacy Policy whenever you visit the Website so you are aware of any updates, as they will be applicable to you and your personal information.

Your access to the Website and communications or engagement with Credo are subject to this Privacy Policy. By visiting the Website, completing any of our online forms or otherwise submitting personal information to us, you agree to the terms of this Privacy Policy, and you hereby consent to our collection, use, disclosure and other processing of your personal information in accordance with this Privacy Policy. If you do not agree with this Privacy Policy, please do not access the Website or otherwise submit personal information to us.

2. Collection of Personal Information

The types of personal information collected by or on behalf of Credo about you varies based on Credo’s interactions with you. 

Personal information collected by or on behalf of Credo about individuals visiting the Website or otherwise communicating or engaging with us is obtained directly from you or certain third parties. The personal information we collect about you in the course of your interaction and correspondence with us may include, but is not limited to, the following:

  • any personal information that you submit when you contact us (using our contact details on the Website or by other means) or otherwise engage with us, such as your name, country, company name, product of interest or email address;
  • your IP address and other online identifiers/web beacons;
  • details of your online browsing activities on the Website, including, for example, the full Uniform Resource Locators (URL), clickstream to, through and from the Website (including, for example, date and time), products you viewed or searched for, page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks and mouse-overs), and methods used to browse away from the page;
  • your browser type, language and version, relevant plug-ins, operating system and platform; 
  • your time zone settings; and/or 
  • a log of your browsing activities during your visit to the Website.

This Privacy Policy, and the practices described herein, applies equally to our collection, use, disclosure and other processing of such “sensitive” personal information. 

We automatically collect basic technical information from all visitors to the Website. We collect this technical information during your visit to the Website through our automatic data collection tools, which may include cookies and other commonly used technologies (e.g. web beacons). Please see the section entitled “Cookies” below for a discussion of our use of cookies on the Website.

The Website is not intended for children, and we do not knowingly collect data relating to children (including any minors under the age of 16).

3. Use of Personal Information Collected

Credo uses your personal information to operate its business, including as follows: 

  • to provide you with products that you have requested, and to fulfill Credo’s contractual obligations;
  • to operate the Website and our other IT systems and safeguard their security; 
  • to understand the demographics, interests and behavior of users of the Website in order to improve and personalize your visit to the Website;
  • to fulfill our contractual obligations to other third parties to whom you have provided your information;
  • to verify your identity, such as when you request access to your personal information;
  • for our internal business administration, record keeping, and security purposes; 
  • to protect or defend our rights or property and against fraud, lawsuits, claims or other liabilities;
  • to enforce our terms of use and legal notices, as required or permitted by law;
  • for purposes of pre-closing integration planning, due diligence or implementation of commercial transactions such as proposed or actual mergers, acquisitions, asset sales or transfers, bankruptcy or reorganization or other similar business transactions, including financings or restructurings; 
  • for legal and regulatory compliance purposes, including, for example, as necessary for anti-money laundering, fraud prevention, tax reporting or sanctions purposes or to respond to governmental, regulatory or law enforcement agency requests; and/or
  • for other legitimate business purposes.

From time to time, Credo may provide you with marketing information about our products. You have the right to ask us not to send you marketing messages by post, telephone or e-mail or any combination of these at any time; however you acknowledge that such information may be included in general update letters and while you may choose not to receive such updates, we are under no obligation to provide redacted versions of such letters or otherwise create separate materials on your behalf excluding such marketing information. You can also let us know at any time that you wish to change your mind and to start receiving such messages. You can do this by replying directly to the marketing message.

We do not use or otherwise process your personal information, including “sensitive” personal information, for purposes of automated decision-making, including profiling.

We do not use or otherwise process your “sensitive” personal information other than as described herein.

We may aggregate, anonymize, or otherwise de-identify your personal information and use it for any purpose permitted by applicable law, and we may use information that does not personally identify you for any purpose, except where we are required to do otherwise under applicable laws. We also may use your information for any other purposes disclosed to you at the time of collection, that you have previously authorized, or with respect to which you subsequently provide your consent.

We indicate whether and why you must provide us with your personal information, as well as the consequences of failing to do so, at the time of the collection of your personal information. If you do not provide the personal information necessary to provide you with our products, you will not be able to benefit from them.

4. Disclosure of Personal Information

We do not disclose any personal information about you except as detailed in this Privacy Policy. In connection with the purposes listed below, we may share your personal information among our affiliates and/or certain applicable third parties (such as governmental authorities and regulators; courts and law enforcement agencies; vendors, third party partners, contractors and service providers, including those supporting our Websites or providing us with other services needed to maintain our business, as well as lawyers, accountants, auditors, and other professional advisors; and counterparties, or potential counterparties, in connection with certain types of corporate transactions):

  • to provide services on our behalf, which may include, among other things, providing customer support, processing transactions, providing IT and technical support, providing fulfillment or delivery services or performing statistical analysis of our Websites or our products;
  • to administer and operate our business;
  • to maintain your accounts and process or complete transactions requested by you;
  • to enforce our terms of use and legal notices, as required or permitted by law;
  • to protect or defend our rights or property and against fraud, unauthorized transactions, lawsuits, claims or other liabilities;
  • to comply with federal, state, or local laws, rules, regulations, national security or law enforcement requirements, and other applicable legal and regulatory requirements, including at the request of government regulators or other law enforcement officials or public authorities and the courts (including the issuance of a valid subpoena, court order or summons); and/or

for purposes of pre-closing integration planning, due diligence or implementation of commercial transactions such as proposed or actual mergers, acquisitions, asset sales or transfers, bankruptcy or reorganization or other similar business transactions, including financings or restructurings.

We also may disclose your information to any other third party where you have provided consent to such disclosure.

We do not sell or offer to sell any personal information about you to third parties or share your personal information with third parties for purposes of cross-context behavioral advertising.

5. Data Retention

Personal information processed by us will be kept for at least as long as is required for the purpose for which it was collected and otherwise in order to meet our statutory, regulatory, or other obligations under applicable law. Further details of our data retention policies and procedures are available in our retention policy, information about which you can request by contacting us. When determining relevant retention periods, we take into account factors, including, but not limited to, the following:

  • our contractual and business relationships with you;
  • legal obligations under applicable law to retain personal information for a certain period of time;
  • the amount, nature and sensitivity of your personal information;
  • the potential risk of harm from unauthorized use or disclosure of your personal information;
  • statutes of limitation under applicable law;
  • (potential) disputes; and
  • guidelines issued by relevant supervisory authorities.

6. Data Security

We acknowledge that the personal information you provide may be confidential, and we maintain policies and procedures designed to maintain the confidentiality of and protect your personal information in accordance with our normal procedures and applicable law. We maintain physical, electronic, and administrative measures designed to safeguard your personal information and prevent unauthorized access thereto.

Unfortunately, the storage and transmission of electronic information is not completely secure. Although we strive to protect your personal information, we cannot guarantee the security of information stored on our or our service providers’ servers or transmitted via email or through the Website; you transmit personal information to us at your own risk. In addition, links on the Website may take you to third-party websites over which we have no control. While such links are provided for your convenience, you should be aware that the information handling practices of the linked websites might not be the same as ours. You should review any privacy policies or cookie policies on those linked websites. We are not responsible for any linked websites.

If you create an account on the Website, you are responsible for all actions taken with your username and password. Therefore, we recommend that you do not disclose your password to anyone. You may not allow others to use your username or password to access or use any part of our Website. If your password has been compromised for any reason, you should contact us immediately for a new password.

7. Cookies

What are Cookies?

Cookies are small, sometimes encrypted text files or pieces of information that may be stored on your computer (or other internet-enabled devices, such as a smartphone or tablet) when you visit a website. They are used to help users navigate websites efficiently as well as to provide information to the owner of the website. A cookie will usually contain the name of the website from which the cookie has come from, the “lifetime” of the cookie (i.e., how long it will remain on your device) and a value, which is usually a randomly generated unique number. To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, please visit www.allaboutcookies.org.

How we use Cookies

When you visit the Website, we, through our service providers (e.g. Google Analytics, Microsoft Clarity), automatically generate and deploy a cookie or other online tracking device (e.g. web beacons). We use cookies in order to improve your experience on the Website by recognizing you when you visit the Website, such as by assigning a session ID, and to deliver content specific to your interests. The cookies we place may also collect information about your IP address, or click stream data within our Website (i.e. the actions taken in connection with the Website). This information helps us improve the functionality of the Website.

Two types of cookies may be used on the Website – “session cookies” and “persistent cookies.” Session cookies are temporary cookies that remain on your device until you leave the Website. A persistent cookie remains on your device for much longer or until you manually delete it (how long the cookie remains on your device will depend on the duration or “lifetime” of the specific cookie and your browser settings). The Website also uses “performance” and “analytical” cookies, which help us understand how visitors interact with our web properties by providing information about the areas visited, the time spent on the Website, and any issues encountered, such as error messages. They help us improve the performance of the Website, alert of any concerns and more.

Your choices with respect to Cookies

If you do not agree to our use of cookies, you should set your browser settings accordingly or not use the Website. Web browsers often allow you to erase existing cookies from your hard drive, block the use of cookies and/or be notified when cookies are encountered. If you elect to block cookies, please note that you may not be able to take full advantage of the features and functions of the Website. 

If you use different devices to view and access the Website (e.g., your computer, smartphone, tablet), you will need to ensure that each browser on each device is adjusted to suit your cookie preferences.

8. Do Not Track

Some web browsers and devices permit you to broadcast a preference that you not be “tracked” online. We do not modify your online experience based upon whether such a signal is broadcast.

9. Additional Information for Individuals Whose Personal Data is Subject to the GDPR or the UK GDPR

Residents of the European Economic Area (“EEA”) and the United Kingdom (“UK” and such residents of either, “EEA/UK Residents”) have certain rights with respect to their personal data pursuant to the General Data Protection Regulation (EU) 2016/679 (“GDPR”) or the UK General Data Protection Regulation (i.e., the GDPR as implemented into UK law, the “UK GDPR”), as applicable and as further described in this section. If you are an EEA/UK Resident and do not agree with Credo’s use of your personal data as set forth in this Privacy Policy, you should not submit your personal data to Credo. However, if you do not submit certain personal data to Credo, or if you exercise your rights to prevent Credo from using such personal data, you should be aware that Credo may not be able to do business with you.

For the purposes of applicable data privacy legislation, Credo is a “controller” of EEA/UK Residents’ personal data. We may transfer, use, store and/or otherwise process your personal data outside of the EEA or the UK, primarily in the U.S. (and may do so in certain other countries), and the laws of the U.S. and certain other destination countries may not offer the same standard of protection for personal data as countries within the EEA or UK. EEA/UK Residents’ personal data also may be processed by staff operating outside the EEA or UK who work for us or for one of our vendors (for example, those who supply support services to us).

In cases of cross-border transfers to countries outside of the EEA or UK, as applicable, if your personal data will be processed in a country with laws that may not be equivalent to, or as protective as, the laws of your home country, Credo will take appropriate steps, in accordance with applicable laws, to require or maintain an adequate level of protection and security for your personal data. For additional information regarding such steps, please contact us using the details set forth at the end of this Privacy Policy.

  • Our bases for collecting and using personal data

We are entitled to use your personal data in the ways set out in this Privacy Policy on the following bases:

  • the use of personal data is necessary for the performance of a contract with you for provision of our products or to take steps at your request prior to entering into such a contract;
  • we have legal obligations that we are required to discharge;
  • the use of your personal data is necessary for our legitimate interests;
  • you have consented to such use; and/or
  • to establish, exercise or defend our legal rights for the purposes of legal proceedings.

We do not expect to process “sensitive” or “special” categories of personal data under the GDPR or UK GDPR; however, if we were to process such personal data, we would do so only where we have asked for your explicit consent, or otherwise where necessary for the establishment, exercise or defense of legal claims, or as otherwise may be permitted under applicable laws.

  • Your rights in connection with personal data

Under certain circumstances, by law you have the right to:

  • request access to your personal data (commonly known as a “data subject access request”). This enables you to receive a copy of the personal data we hold about you and to check that we are processing it lawfully;
  • request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate personal data we hold about you corrected;
  • object to processing of your personal data where we are relying on a legitimate interest (or that of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also may have the right to object where we are processing your personal data for direct marketing purposes;
  • request erasure of your personal data. This enables you to ask us to delete or remove your personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have exercised your right to object to processing (see above);
  • request the restriction of processing of your personal data. This enables you to ask us to suspend the processing of personal data about you, for example if you want us to establish its accuracy or the reason for processing it; and/or
  • request the transfer of your personal data to another party in a machine-readable, commonly used and structured format.

If you want to exercise any of these rights, please contact us using the details set forth at the end of this Privacy Policy. The various rights are not absolute and each is subject to certain exceptions or qualifications. For example, if you wish to withdraw your consent or object to processing, we may need to discuss with you whether our use of your personal data needs to continue for other lawful purposes, such as fulfilment of a legal or contractual requirement.

We will respond to your request within one month of receipt of your request. In some cases, we may not be able to fulfil your request to exercise the right before this date, and may need to request more time. Where we cannot provide a full response to you for any reason, we will let you know about this in our initial reply to your request.

  • Your duty to inform us of changes

It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your working relationship with us.

  • Fees

You will not have to pay a fee to access your personal data (or to exercise any of the other above-listed rights). In some cases, we may charge a reasonable fee if your request for access is clearly unfounded or excessive, or if you request multiple copies of the relevant information. Alternatively, we may refuse to comply with the request in such circumstances.

  • What we may need from you

To access your personal data (or to exercise any of the other above-listed rights), we may need to request specific information from you to help us confirm your identity and ensure your right to access the personal data (or to exercise any of your other above-listed rights). This is another appropriate security measure designed to ensure that personal data is not disclosed to any person who is not entitled to receive it.

  • Right to complain

If you wish to request further information about any of the above-listed rights, or if you are unhappy with how we have handled your personal data, please contact us using the details set forth at the end of this Privacy Policy. If you are not satisfied with our response to your complaint or believe our processing of your information does not comply with the GDPR, UK GDPR or other applicable data privacy legislation, you can make a complaint to the supervisory authority in your country. For example, in the UK you should contact the Information Commissioner’s Office: https://ico.org.uk/global/contact-us/ or 0303 123 1113.

10. Additional Information for Individuals Whose Personal Information is Subject to the CCPA

Residents of the state of California have certain rights with respect to their personal information pursuant to the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, the “CCPA”), and as further described in this section. 

Under certain circumstances, under the CCPA you may have the right to:

  • request that we disclose, free of charge, the categories and specific pieces of personal information we collect about you (and, if applicable, sell or otherwise disclose to a third party and the categories of such third parties), the sources from which such personal information was collected, and the business purpose for collecting, selling or disclosing such personal information;
  • opt out of the sale of your personal information. As noted above, we do not currently sell your personal information or share your personal information with third parties for purposes of cross-context behavioral advertising;
  • request that we delete the personal information we have collected about you; and
  • request that we correct any inaccurate personal information we have collected about you. 

We will not discriminate against any California resident who exercises the rights set forth in this section.

You have the right to appoint an authorized agent to exercise these rights on your behalf. If you want to exercise any of these rights, or have your authorized agent exercise any of these rights on your behalf, then please contact us using the details set forth at the end of this Privacy Policy. To exercise any of these rights, we may need to request specific information from you or your authorized agent to help us confirm your identity and ensure your right to exercise these rights.

These rights are not absolute and each is subject to certain exceptions or qualifications. 

For consumers with disabilities who need to access this Privacy Policy in an alternative format, please contact us using the details set forth at the end of this Privacy Policy.

11. Additional Information for Individuals Whose Personal Information is Subject to the Data Privacy Laws of Other Jurisdictions

To the extent that data privacy laws other than the GDPR, the UK GDPR or the CCPA apply to our collection, use, disclosure or other processing of your personal information, you may have certain rights with respect to such personal information (including, depending on the jurisdiction, rights that may be comparable to those of EEA/UK Residents and/or California residents, as described above). In such case, we will follow such other applicable data privacy laws with respect to your rights, and the description herein of the rights of EEA/UK Residents and/or California residents, in each case as and to the extent applicable, shall be considered notice of your rights to the extent that we are required to provide you with such notice under such applicable data privacy laws.

12. Contact Us

Should you have any questions or concerns relating to this Privacy Policy or the processing of personal information we hold about you, please contact us:

By post: Credo Semiconductor Inc.
110 Rio Robles
San Jose, CA 95134

By email: LegalNotices@credosemi.com

chevron-down