Privacy Policy

Draft notice — legal review required

This Privacy Policy is a draft for CreatX Digital at creatxdigital.com. It must be reviewed by qualified legal counsel and confirmed against the final hosting, email, business, and data-handling arrangements before publication. It is not legal advice. This draft does not identify an unverified legal entity, office address, or governing jurisdiction.

Who this notice covers

This notice describes personal information handled through the CreatX Digital website and project inquiries. Project-specific confidentiality and data-processing terms may also apply when we provide services. Contact us at info@creatxdigital.com or +1 (307) 443-4644 with privacy questions.

Information you provide

The inquiry form requests your name, email address, phone or WhatsApp number, company name, website URL, required service, estimated budget, desired timeline, project details, and confirmation that you have read the privacy notice. Some fields are optional. We also receive information you choose to include in email or other direct communications.

Do not send passwords, payment card details, government identification, sensitive health information, or confidential information that is not necessary for an initial project discussion through the form.

Technical information

The server and hosting provider may process connection information such as an IP address, browser information, request time, requested page, and error or security events to deliver the website, diagnose faults, and help prevent abuse. To limit abuse and prevent duplicate emails, the server stores HMAC-derived IP and email rate-limit keys, inquiry fingerprints, submission identifiers, and delivery status. These records do not contain the inquiry text, raw email address, or raw IP address. Routine application logs contain only an event code, request ID, and response status. Hosting providers may maintain separate connection logs.

Why we use information

We use inquiry information to understand your request, respond, prepare a proposal, communicate about potential or agreed work, and maintain relevant business records. We use necessary technical information to operate the website, resolve problems, and protect it against misuse.

Where data-protection law requires a lawful basis, the appropriate basis may include steps requested before entering a contract, performing an agreement, legitimate interests in operating and securing the business, complying with legal obligations, or consent where required. The owner must confirm the applicable bases and any required details before publication.

Email communication

A successfully accepted project inquiry is sent to info@creatxdigital.com. When confirmation delivery is available, the email address you provide is also used to send a receipt acknowledging your inquiry. We may then contact you about your request or an agreed project.

Submitting an inquiry does not subscribe you to a marketing mailing list. Any future marketing program must have its own appropriate notice and a way to withdraw or opt out.

Cookies and analytics

This website does not include advertising trackers or visitor analytics by default. The contact form sets a necessary cookie named creatx_csrf to verify submissions. It expires after six hours and is not used for analytics or advertising. It is HttpOnly and SameSite=Strict, and Secure on HTTPS.

If analytics, embedded media, or other nonessential technologies are added, this notice and the relevant controls must be updated before they are enabled. Where applicable law requires consent, nonessential technologies must remain inactive until that consent is given. Your browser may allow you to manage or remove cookies; blocking necessary functionality may affect form submission.

Service providers and CRM systems

Hosting and email providers process information needed to run the website and deliver messages. The supplied email integration uses Resend when the owner configures it for live delivery. The owner’s mailbox provider also processes inquiry messages and replies.

There is no automatic CRM connection enabled in the supplied website. If a CRM or another service provider is introduced, the owner must review its access, contractual safeguards, data use, and processing locations and update this notice as needed.

When information is shared

Information is shared with service providers only as needed for their role, with authorized people working on your inquiry or project, or when disclosure is required by law or necessary to establish or protect legal rights. If a business transfer affects personal information, any required notice and safeguards must be provided.

The supplied website contains no feature for selling personal information or sharing it for cross-context behavioral advertising. Any broader business practices must be confirmed by the owner before this policy is published.

How long information is kept

Inquiry messages and correspondence should be kept only as long as reasonably needed to respond, manage the relationship, maintain necessary business records, or satisfy legal obligations. Project records may need a different retention period from unsuccessful inquiries. IP and email rate-limit records expire after 15 minutes and one hour respectively. Submission fingerprints and delivery status expire after 24 hours. Expired records are removed during the next form-related storage transaction. This does not delete delivered inquiry emails or provider records.

Before publication, the owner must confirm a documented retention schedule for mailboxes, provider logs, project systems, backups, and deletion requests. No unverified fixed retention period is promised in this draft.

Security

The website uses server-side validation and controls intended to reduce common form abuse. Live hosting must provide HTTPS, secure secret storage, restricted account access, and suitable operational security. No internet transmission or storage system can be guaranteed completely secure. Please contact us promptly if you believe information sent through the website has been exposed or misused.

International processing

Website hosting, email delivery, and business communication may involve processing in countries other than your own. The owner must confirm the final providers, processing locations, and any safeguards required for international transfers before publication. We do not assume that a provider’s location alone establishes compliance with applicable transfer requirements.

Your choices and rights

You can contact info@creatxdigital.com to ask about your information, correct inaccurate details, or request deletion. Depending on your location and the applicable law, you may also have rights of access, restriction, objection, portability, withdrawal of consent, or complaint to a relevant supervisory authority. These rights can be subject to conditions and exceptions.

We may need reasonable information to verify a request and protect against unauthorized disclosure. Any response must follow the deadlines and procedures required by applicable law. Withdrawing consent does not affect processing that was lawful before withdrawal.

Children’s privacy

This business website and its inquiry form are intended for adults seeking professional services. They are not directed to children under 13. If you believe a child has provided personal information through the site, contact us so it can be reviewed and removed where appropriate. The availability of a service for designing children’s learning resources does not make this inquiry website a service for children.

Third-party links

Links to Instagram or other external websites lead to services operated by other organizations. Their privacy policies and terms govern their own collection and use of information. Review those notices before submitting personal information on an external service.

Changes and contact

This notice should be updated when the website’s information practices change. The published version should display an accurate effective or updated date after owner and legal review. Material changes must be communicated where required by law.

For questions about this notice or a privacy request, email info@creatxdigital.com or call +1 (307) 443-4644. Website: https://creatxdigital.com/.