Privacy Policy

1. Who is responsible for your data

Creava is the data controller for the information described here. If you have a question about this policy, or want to exercise any of the rights in section 7, write to info@creava.agency.

2. What we collect

• Information you give us. When you submit the contact form we collect your name, your email address, the description of your project, and the budget range you select, along with the page you were reading when you sent it. Nothing on that form is required beyond your name and email.
• Technical information. Your IP address, browser type and version, time zone, operating system and device type. This is collected automatically by our hosting infrastructure as part of serving the site.
• Usage information. Which pages you visit and how you arrived at them, if and only if analytics is active and you have consented to it — see section 5.
• Anti-spam information. When you submit the contact form, our anti-spam provider receives your IP address and basic signals about your browser in order to tell a person from a bot. It runs only on the form, it sets no cookies, and it does not profile you or follow you across sites.

We do not collect payment details through this website, and we do not knowingly collect data from anyone under 16.

3. Why we use it, and on what basis

We only process personal data where the law gives us a basis to do so. In practice that means one of three things:

• To answer your enquiry — because you asked us to, and because we have a legitimate interest in responding to people who approach us about work.
• To keep the site working and secure — our legitimate interest in operating a site that stays available and is not abused.
• To understand how the site is used, and to send you marketing — only with your consent, which you may withdraw at any time.

4. How long we keep it

Enquiries sent through the contact form are kept for up to 24 months from our last exchange with you, so that we can pick up a conversation that resumes later. After that they are deleted. Server logs are kept for a short operational period and then discarded. If you ask us to delete your data sooner, we will.

5. Cookies and analytics

This site sets only the cookies it needs to function. It does not run advertising or cross-site tracking cookies.

If analytics is enabled, it will not load until you have given consent through the cookie notice, and you can withdraw that consent at any time. Refusing analytics does not change how the site works for you.

6. Who else sees your data

We do not sell personal data, and we do not share it for anyone else’s marketing. It is handled by a small number of providers who process it strictly on our instructions:

• Our hosting and infrastructure providers, who run the website and its database.
• Our anti-spam provider, whose check protects the contact form from automated submissions.
• Our analytics provider, if and only if you consented to analytics under section 5.
• The internal messaging tool that notifies our team when a new enquiry arrives.

Some of these providers operate outside the European Economic Area. Where data is transferred outside the EEA, we rely on the safeguards the law provides for such transfers, such as the European Commission’s standard contractual clauses.

We may also disclose data where the law requires it, or where a business transfer such as a merger or acquisition makes it necessary.

7. Your rights

Wherever you live, and regardless of how you contacted us, you can ask us to:

• tell you what data we hold about you, and give you a copy of it;
• correct anything that is wrong;
• delete it;
• stop or limit how we use it;
• hand it over in a portable format, or send it to someone else;
• stop relying on your consent, for anything we do on that basis.

Write to info@creava.agency and we will respond within one month. There is no charge. If you are in the EEA or the UK and you think we have handled your data badly, you are also entitled to complain to your national data protection authority — you do not have to come to us first.

8. How we protect it

The site is served over HTTPS, access to the systems holding enquiries is restricted to the people who need it and protected by individual accounts, and passwords are stored only in hashed form. No method of transmitting data over the internet is perfectly secure, and we cannot guarantee absolute security — but we take the measures appropriate to the data we hold.

9. Links to other sites

This site links to profiles and work hosted elsewhere. Those sites have their own privacy policies and we are not responsible for their content or practices.

10. Changes to this policy

If this policy changes, the revised version will be published here with a new “last updated” date. Where a change materially affects how we use your data, we will take reasonable steps to tell you.

11. Contact

Creava
info@creava.agency