Legal / Data practices

Privacy Notice

This Notice explains how Creative Infinite Limited Company collects and handles personal information through this website, its public forms, internal operations tools, radio experience, and any enabled checkout.

Make a privacy request Terms
Effective
2026-09-01
Version
2026-09-01
Company
Creative Infinite Limited Company

1. Who handles your information

Creative Infinite Limited Company is responsible for the site’s data practices. To ask a privacy question or exercise a data right, use our privacy request form. Please do not send government identifiers, payment-card numbers, health information, or other unnecessary sensitive data through public forms.

2. Information we collect

  • Contact and project information: name, email, organization or role, message, links, budget, timing, project answers, constraints, and related intake details you choose to provide.
  • Hiring information: application contact details, location, time zone, portfolio or profile links, availability, compensation information, and application text.
  • Commerce information: email, selected offer or product, price and product snapshots, order and payment status, terms version, license, download activity, and the version, text, and server-confirmed time of an immediate-delivery acknowledgment. Stripe handles payment-card details; we do not store full card numbers.
  • Technical and security information: limited request, device, App Check, authentication, rate-limit, error, and infrastructure logs used to operate and protect the service. Client error reports are designed to exclude free-form content and direct identifiers.
  • Site measurement: page paths and a small set of business-action events, such as opening free code, a service, project booking, sprint booking, or completing an inquiry. These events use fixed page/form labels and do not include names, email addresses, phone numbers, messages, account identifiers, or other form contents.
  • Functional browser state: radio preferences and interface state in local storage, plus temporary shop order credentials and selected hiring or proof filters in session storage.

3. Why we use it

We use information to respond to messages; evaluate and operate projects and applications; provide checkout, receipts, licenses, and downloads; authenticate authorized operators; prevent abuse and fraud; troubleshoot and secure the service; keep business and accounting records; enforce agreements; and comply with legal obligations. We use information where needed to provide a requested service, pursue legitimate operational and security interests, understand aggregate site and conversion performance, comply with law, or obtain consent when applicable.

4. Service providers and disclosures

We disclose information only as reasonably needed to:

  • use Firebase and Google Cloud for hosting, databases, storage, authentication, functions, security, and operational logs;
  • use Google Analytics 4 for aggregate page and business-action measurement under the event limits described above;
  • use Resend to deliver operational contact, intake, application, and digital-delivery confirmation email;
  • use Stripe for enabled payment processing, fraud prevention, and receipts;
  • work with professional advisers or contractors bound to protect the information;
  • comply with law, protect rights and safety, investigate abuse, or complete a business transaction subject to appropriate protections.

We do not sell personal information, send form contents to analytics, or use advertising pixels or cross-site behavioral advertising on this site.

5. Retention

  • Contact and project-intake records: generally 24 months after the last interaction.
  • Unsuccessful applications: generally 12 months after the hiring decision.
  • Transaction, order, license, refund, and associated accounting records: generally seven years after the transaction.
  • Operational logs: generally 30 days; security and provider-required audit logs may remain for up to 400 days.
  • Google Analytics event data follows the retention controls configured for the CILC GA4 property; aggregate reports may remain after event-level retention expires.
  • Local browser state remains until you clear it; session state normally ends when the browser session ends.

We may retain information longer when needed for an active relationship, dispute, security investigation, legal hold, or legal obligation, and may delete it sooner when no longer needed.

6. Your choices and rights

Depending on where you live, you may have rights to request access, correction, deletion, restriction, objection, portability, or withdrawal of consent, and to appeal or complain to a regulator. Submit a request through the privacy request form. We may verify your identity and authority before acting. We will respond within the period required by applicable law and will explain when an exception applies. You can clear local or session storage through your browser controls. Browser privacy controls and content blockers may also prevent Google Analytics from loading; site actions continue to work if measurement is unavailable.

7. Security and international processing

We use access controls, validation, restricted storage, signed payment events, monitoring, and other technical and organizational safeguards appropriate to this service. No method is completely secure. Our providers may process information in the United States and other countries under their legal and contractual safeguards.

8. Children

This business site is not directed to children under 13, and we do not knowingly collect their personal information. Contact us if you believe a child submitted information.

9. Changes

We may update this Notice as the service changes. We will post the new effective date and version here and provide additional notice when required by law.