Privacy Policy – Cre8tive Studio

Last updated: 25 September 2026

1. Who we are

Cre8tive Studio is run by Demmy Johnson as a sole trader. Demmy Johnson is the “data controller” for any personal information you give us through cre8tiveconcept.co.uk.

2. What information we collect

When you contact us through our enquiry form, by email or by phone, we may collect:

• your name
• your email address and phone number
• your business name (if you give it)
• details of your project or enquiry
• anything else you choose to tell us in your message

Our website host may automatically log basic technical information, such as your IP address and browser type, to keep the website running securely.

If you allow Google reCAPTCHA, Google receives technical and interaction information, including IP address and browser/device signals, to help protect our enquiry form from automated abuse. We do not currently use Google Analytics or advertising trackers.

3. How we use your information

We use your details to:

• reply to your enquiry and talk to you about your project
• send you quotes and proposals
• provide our services if you become a customer, including invoicing and keeping records
• keep the website and enquiry form secure

We do not use enquiry details for marketing. We will not add you to a mailing list or send you promotional messages.

4. Our lawful basis

Under UK GDPR, we rely on:

• Steps before entering a contract: when you ask us for a quote or information about our services.
• Contract: when we provide services to you as a customer.
• Legal obligation: keeping financial records that HMRC requires.
• Consent: for loading optional Google reCAPTCHA and its associated browser storage. You can withdraw your consent at any time.
• Legitimate interests: answering general enquiries and keeping our website secure.

5. How long we keep your information

• Enquiries that don’t lead to work: deleted within 1 month of our last contact with you.
• Customers: project and invoicing records are kept for 6 years to meet tax and accounting rules, then securely deleted.
• Cookie preferences: stored in your browser for 90 days. Google and our hosting provider manage their own security logs and storage under their privacy policies; contact us for information about applicable retention periods.

6. Who we share your information with

We do not sell your personal information. We share it with trusted services that help us run the business:

• our website hosting provider, Hostinger
• our email provider, Hostinger
• Google reCAPTCHA, only if you allow it
• our accountant or accounting software (customers only)

Providers processing information on our behalf act on our instructions. Some providers also process information for their own purposes under their privacy policies, including Google. See Google’s Privacy Policy and Hostinger’s Privacy Policy.

Some providers may process information outside the UK. Where a transfer requires safeguards, applicable UK data protection requirements must be met, for example through adequacy regulations or appropriate contractual safeguards. Contact us for details of the arrangements relevant to your information.

7. Keeping your information safe

We use password-protected accounts, two-factor authentication where available, and trusted providers to protect your information. Access is limited to those who need it to run the business and the services described above.

8. Cookies

We use two types of browser storage:

• Essential preferences and security: needed to remember your cookie choice and deliver and protect the website.
• Optional Google reCAPTCHA: helps protect the enquiry form. We only load it if you agree through the cookie controls.

We do not currently set analytics cookies. You can change your choice at any time using the “Cookie settings” link at the bottom of any page. Clearing website storage in your browser also removes your saved choice.

Saying no to reCAPTCHA will not stop you browsing the website. The enquiry form requires verification, so you can contact us by email or phone instead. Withdrawing permission reloads the page and clears unsent form entries. Your browser settings can remove Google cookies already stored, which this website cannot delete from Google’s domain. Read our cookie information for details.

9. Your rights

Under UK data protection law, you have the right to:

• ask for a copy of the information we hold about you
• ask us to correct information that is wrong
• ask us to delete your information
• object to or restrict how we use it
• withdraw your consent to optional reCAPTCHA at any time, without affecting the lawfulness of earlier processing
• ask us to move your data to another provider, where this applies

To use any of these rights, email info@cre8tiveconcept.co.uk. We normally reply within one month and without charge. Where the law permits an exception or extension, we will explain it to you.

10. Complaints

If you’re unhappy with how we’ve handled your information, please contact us so we can put it right. You can also complain directly to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113.

11. Changes to this policy

We may update this policy from time to time. The latest version will always be on cre8tiveconcept.co.uk/privacy.