Privacy notice.

Kreativ Digital (“we”, “us”) is a web development studio based in Glasgow, Scotland. We are the controller of the personal data described in this notice, which means we decide how and why it is used.

If you have any questions about this notice or your data, email hello@kreativdigital.net.

When you use our contact form we collect:

• +your name
• +your email address
• +the budget range you select (optional)
• +the message you write, and anything else you choose to tell us in it

Our hosting provider, Vercel, also records standard server logs (such as IP address, browser type and the pages requested) to keep the site running and secure. This site does not use analytics or advertising cookies, and we do not track you across other websites.

We use your details only to:

• +read and reply to your enquiry
• +discuss and scope a potential project with you
• +keep a record of our conversation if we go on to work together

We will not add you to a mailing list, send you marketing, or sell or share your details for anyone else’s marketing.

Under UK data protection law (the UK GDPR and the Data Protection Act 2018), we rely on:

• +Steps before entering into a contract (Article 6(1)(b)) — when you ask us about a project, we use your details to respond and prepare a proposal at your request.
• +Legitimate interests (Article 6(1)(f)) — for general enquiries, and for keeping a record of correspondence. Our interest is running our business and answering the people who contact us; we keep this proportionate and you can object at any time.

We don’t sell your data. To deliver your message we use a small number of service providers who process it on our behalf, under contract and only on our instructions:

• +Brevo (Sendinblue SAS, France) — sends the contact form submission to our inbox.
• +Google Workspace (Google) — our email, where enquiries are received and stored.
• +Vercel (Vercel Inc., USA) — hosts this website and keeps its server logs.

We may also disclose information if the law requires it.

Brevo processes data within the European Economic Area, which the UK recognises as providing adequate protection.

Vercel and Google may process data in the United States and other countries. Where that happens, the transfer is protected by the UK–US data bridge (the UK Extension to the EU–US Data Privacy Framework) or by the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, as set out in each provider’s data processing terms.

• +Enquiries that don’t lead to work — deleted within 12 months of our last contact.
• +If you become a client — kept for the length of the project and then for up to 6 years, to meet our legal, tax and accounting obligations and to deal with any claims.

You have the right to:

• +ask for a copy of the personal data we hold about you
• +ask us to correct anything that is wrong or incomplete
• +ask us to delete your data
• +ask us to restrict how we use it
• +object to us using it on the basis of legitimate interests
• +ask for your data in a portable format

To use any of these rights, email hello@kreativdigital.net. We’ll respond within one month. There’s normally no charge.

The site is served over HTTPS and form submissions are sent to our inbox over encrypted connections. Enquiries are held in our Google Workspace account, which only the studio’s owner can access. If anyone else joins, they are given only the access they need, under strict account controls.

No method of transmission is completely secure, but we take reasonable steps to protect your information.

If you’re unhappy with how we’ve handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.

We may update this notice from time to time. The date at the top shows when it last changed.