Privacy Policy
Last updated: October 2, 2026
1. Who we are
This Privacy Policy explains how Kreatif Technology LLC ("Kreatif", "we", "us"), a limited liability company organized under the laws of New Mexico, USA, with its address at 1209 Mountain Rd Pl NE, Ste N, Albuquerque, NM 87110, USA, handles personal data when you visit kreatif.agency (the "Site"), contact us or work with us. For the purposes of the EU General Data Protection Regulation (GDPR) and the UK GDPR, Kreatif Technology LLC is the controller of that data. You can reach us about anything in this policy at hello@kreatif.agency.
2. What we collect
Information you give us: when you email us or ask for a mock-up, we receive your name, email address, the content of your message and anything you choose to share about your business (for example your current website, logo, photos or text). Client information: if you become a client, we also keep contact and billing details, project correspondence and the materials you provide for the project. If you pay by card, the payment is handled by a payment provider; we do not see or store your full card number. Technical information: our hosting provider, Cloudflare, processes connection data such as IP address, browser type and requested pages to deliver the Site and protect it from abuse. If you accept analytics in the cookie banner, we also receive aggregated, cookie-free statistics about page views and performance. We do not collect sensitive personal data and we do not ask for it.
3. Why we use it and our legal bases
We use personal data only for these purposes: (a) to reply to your enquiry and prepare a mock-up or quote — based on our legitimate interest in responding to people who contact us and, where relevant, on taking steps at your request before entering into a contract; (b) to deliver projects and care plans, send invoices and manage our relationship with you — based on the performance of our contract with you; (c) to keep accounting and tax records — based on our legal obligations; (d) to keep the Site and our systems secure and prevent abuse — based on our legitimate interests; (e) to understand how the Site is used through aggregated analytics — based on your consent, which you can withdraw at any time. We do not use your data for automated decision-making that has legal or similarly significant effects on you.
4. Who we share it with
We share personal data only with service providers that help us run our business, and only as far as they need it: Cloudflare, Inc. (website hosting, content delivery, security and, if you consent, analytics); our email provider; our bank and payment providers (to receive payments); and professional advisers such as accountants or lawyers. These providers act on our instructions or under their own privacy terms where they act independently. We may also disclose data if the law requires it, or to establish, exercise or defend legal claims. We do not sell personal information, and we do not share it for cross-context behavioral advertising.
5. International transfers
We are based in the United States, and our providers may process data in the US and other countries. When we transfer personal data from the European Economic Area, the United Kingdom or Switzerland to a country without an adequacy decision, we rely on appropriate safeguards — such as the European Commission's Standard Contractual Clauses (with the UK Addendum where applicable) or a provider's certification under the EU-U.S. Data Privacy Framework and its UK and Swiss extensions. You can ask us for more information about these safeguards.
6. How long we keep it
Enquiries that do not lead to a project are kept for up to 2 years and then deleted. Client project records are kept for the duration of the relationship and for a reasonable period afterwards to deal with follow-up questions or claims. Invoices and accounting records are kept for as long as tax and accounting laws require (generally up to seven years). Analytics data is aggregated and does not identify you.
7. Your rights (EEA, UK and Switzerland)
If GDPR or UK GDPR applies to you, you have the right to access your personal data, to have it corrected, to have it erased, to restrict or object to our processing, to data portability, and to withdraw consent at any time (this does not affect processing that took place before you withdrew it). To exercise these rights, email us at the address below. We will respond within one month and may ask you to verify your identity. You also have the right to complain to a data protection authority — for example the Information Commissioner's Office (ICO) in the UK or the supervisory authority in your EU country — although we'd appreciate the chance to address your concern first.
8. Notice for California and other US residents
This section applies to residents of California and other US states with consumer privacy laws, to the extent those laws apply to us. In the last 12 months we have collected these categories of personal information: identifiers (such as name and email address), commercial information (such as project and billing records) and internet activity information (such as connection data processed by our hosting provider). We collect it from you directly and from your use of the Site, for the business purposes described in section 3, and disclose it only to the service providers described in section 4. We do not sell or share personal information, and we have no actual knowledge of selling or sharing the personal information of consumers under 16. Subject to applicable law, you may request to know what personal information we hold about you, to delete it and to correct it, and you will not be discriminated against for exercising these rights. You may submit a request yourself or through an authorized agent by emailing us; we will verify the request before acting on it.
9. Canada, Australia, the UAE and elsewhere
Wherever you are, you can ask us to access, correct or delete your personal data, and we will handle the request in line with the privacy law that applies to you — including Canada's PIPEDA, Australia's Privacy Act 1988 and the UAE's Personal Data Protection Law, where applicable.
10. Security
We protect personal data with appropriate technical and organizational measures, including HTTPS encryption across the Site, access controls on the accounts and tools we use, and limiting access to people who need it. No method of transmission or storage is completely secure, but we work to protect your data and will notify you and the relevant authorities of a breach where the law requires it.
11. Children
Our Site and services are intended for businesses and are not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has sent us personal data, please contact us and we will delete it.
12. Changes to this policy
We may update this policy from time to time. The current version is always published on this page, with the date of the latest update shown at the top. If we make significant changes, we will make that clear on the Site.
13. Contact
Questions or requests about this policy or your personal data: hello@kreatif.agency, or by post to Kreatif Technology LLC, 1209 Mountain Rd Pl NE, Ste N, Albuquerque, NM 87110, USA.