1. Who we are
CreativeXDigital is a brand identity agency based in London, United Kingdom, and is the controller of personal information described in this policy. For enquiries about this policy or your personal information, email info@creativexdigital.com.
2. Information we collect
When you submit a project enquiry, we may collect your name, business name, email address, telephone number, selected services, indicative budget, timing and the information you include in your message. We also process limited technical information needed to deliver and secure the website, such as IP address and server security logs.
3. Why we use it and our lawful bases
We use enquiry information to respond to you, understand the proposed work, prepare requested information and take steps before entering into a contract. The relevant lawful bases are taking steps at your request before a contract and our legitimate interests in operating and protecting our business. Where we must keep information to meet tax, accounting or legal obligations, the lawful basis is legal obligation.
4. How we receive information
Most information comes directly from you through the project form, email, telephone or meetings. We may also receive business contact information from publicly available professional sources or referrals, where it is appropriate to contact you.
5. Who we share information with
We may use hosting, email, IT support and professional-service providers where necessary. They may process information only for the service they provide and under appropriate contractual and security arrangements. We do not sell personal information.
6. International transfers
If a service provider processes information outside the United Kingdom, we will use an appropriate safeguard required by UK data protection law and assess the transfer where required.
7. Retention
Unsuccessful project enquiries are normally retained for up to 12 months after the last meaningful contact. Client project, contract and financial records may be kept for up to seven years where needed for legal, tax, insurance or dispute purposes. We may retain information for longer where a legal claim or obligation requires it.
8. Security
We use proportionate technical and organisational measures designed to protect personal information, including access controls, encrypted transport, restricted database access and server-side validation. No online service can guarantee absolute security.
9. Your rights
Depending on the circumstances, you may have rights to be informed, access your information, correct it, request deletion, restrict processing, object to processing, receive portable information and raise concerns about automated decision-making. To exercise a right, email us. We may need to verify your identity.
10. Complaints
Please contact us first so we can try to resolve your concern. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint.
11. Cookies and external services
This launch version does not use non-essential analytics or advertising cookies. Essential hosting and security technologies may be used where strictly necessary. If non-essential technologies are introduced, the website will provide clear information and obtain consent before they are activated. Google Fonts are loaded from Google and may receive technical request information; self-hosting the font files is recommended before final launch.
12. Changes
We may update this policy when our services, providers or legal obligations change. The date at the top shows the latest revision.