1. Introduction
Creavibe Digital ("we", "us", or "our"), operated by RoyalSoft LLC, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you engage our services or visit our website.
We comply with the UK General Data Protection Regulation (GDPR), the Data Protection Act 2018, and all applicable data protection laws.
2. Information We Collect
Information You Provide
- Contact Information: Name, email address, phone number, company name
- Account & Purchase Data: Purchase history, order details, billing address
- Payment Information: Payment method type (we never store full card numbers)
- Communications: Email correspondence, support requests, project briefs
- Marketing Preferences: Communication preferences and areas of interest
Information Collected Automatically
- IP address, browser type, device information
- Pages visited, time on site, referring website
- Campaign metrics and conversion data (when managing your accounts)
3. How We Use Your Information
- Service Delivery: Processing purchases, delivering digital products, providing marketing services
- Communication: Transactional emails, receipts, project updates, support
- Billing: Processing payments, sending invoices, maintaining financial records
- Legal Compliance: Meeting legal, tax, and regulatory requirements
- Service Improvement: Analyzing performance to improve our offerings
- Marketing (with consent): Newsletters and relevant content (opt out anytime)
4. Legal Basis for Processing (GDPR)
| Processing Purpose | Legal Basis |
|---|---|
| Providing contracted services | Contract performance |
| Payment processing and invoicing | Contract performance |
| Client communications and support | Legitimate interest |
| Marketing communications | Consent (opt-in) |
| Legal and tax compliance | Legal obligation |
| Website analytics | Legitimate interest |
5. Payment Processing
Payments are processed by Stripe and PayPal — PCI-DSS compliant processors. We do not store your full card numbers, bank account numbers, or CVV codes.
- Stripe Privacy Policy: stripe.com/privacy
- PayPal Privacy Policy: paypal.com/privacy
6. Data Sharing
We do not sell your personal data. We share data only with:
- Payment processors (Stripe, PayPal) to complete transactions
- Email service providers (Hostinger SMTP) for transactional emails
- Analytics tools when you consent to cookies
- Marketing platforms (Meta, Google, LinkedIn) when managing campaigns on your behalf
- Legal authorities when required by law
7. Data Retention
- Active clients / purchase records: 7 years (UK tax and legal requirement)
- Prospective clients / enquiries: 2 years from last contact
- Account data: Until account deletion is requested
- Payment logs: Minimum 120 days for dispute resolution
- Marketing consent: Until withdrawn
- Support communications: 2 years
- Website analytics: 26 months
8. Your Rights (GDPR)
Under GDPR and UK data protection law, you have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate or incomplete data
- Erasure: Request deletion ("right to be forgotten")
- Portability: Receive your data in a machine-readable format
- Restriction: Limit how we process your data
- Object: Object to processing based on legitimate interests or direct marketing
- Withdraw consent: Withdraw marketing consent at any time
- Lodge a complaint: File a complaint with the ICO
To exercise your rights, email privacy@creavibe.pro. We will respond within 30 days.
9. Cookies
- Essential cookies: Session management, authentication (cannot be disabled)
- Analytics cookies: Google Analytics — site usage (requires consent)
- Marketing cookies: Advertising tracking (requires consent)
You can manage cookie preferences via the cookie consent banner or your browser settings.
10. Data Security
- HTTPS/TLS encryption for all data in transit
- Database access restricted to authorized systems only
- Passwords hashed using bcrypt
- Audit logging for all payment events
- PCI-DSS compliant payment processing via Stripe
- Multi-factor authentication and role-based access controls
11. International Data Transfers
Your data is primarily stored within the United Kingdom. When third-party services transfer data outside the UK/EU, we ensure adequate data protection through adequacy decisions or Standard Contractual Clauses (SCCs).
12. Children's Privacy
Our services are directed to businesses and professionals. We do not knowingly collect personal information from individuals under 18 years of age.
13. Changes to This Policy
We may update this Privacy Policy periodically. Material changes will be communicated via email notification and a prominent notice on our website. The "Last Updated" date at the top will always reflect the latest revision.
14. Complaints
If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk (Helpline: 0303 123 1113).
We encourage you to contact us first at privacy@creavibe.pro.
15. Contact
Data Controller: Creavibe Digital / RoyalSoft LLC
United Kingdom
Privacy enquiries: privacy@creavibe.pro
General: hello@creavibe.pro
Website: creavibe.pro