Privacy policy

Cre8ive Marketing Limited is a company registered in England and Wales (company number 10953603, VAT GB315080830) with its registered office at 8 Westwater Crescent, Hampton Vale, Peterborough, PE7 8LT. Cre8ive Property is one of our trading names.

We are the data controller for personal information collected through this website and when you become a client. If we build or host a system that holds your customers’ data, you are the controller of that data and we act as your processor (see “Data we handle for clients”).

Questions about this policy? Email hello@cre8ive-marketing.co.uk, call 07704 438922, or write to us at the address above marked “Data Protection”. This policy is written to meet the UK GDPR and the Data Protection Act 2018.

Enquiries and quotes – Your name, email, phone number, company, the services you are interested in, budget, timeline and anything you tell us in your message.

Clients – Contact and billing details, project briefs, files you send us, logins you give us to manage your website, hosting or social accounts, and records of the work we do.

Client portal – Your account details, support requests and attachments, project updates, bookings and invoices.

Website use – Basic technical information such as IP address, browser, device and the pages you visit, kept in our server logs for security and troubleshooting.

Shoots and drone work – Photographs, video, aerial imagery, surveys and 360° scans of locations and properties. These are of places, not people, but can incidentally capture people, vehicles or neighbouring property.

We do not knowingly collect information from children, and we do not ask for special category data (such as health or religious information).

We will only send you marketing emails if you have asked to receive them. You can unsubscribe at any time.

Contract – To quote for and deliver the services you have asked for.

Legitimate interests – To reply to general enquiries, keep systems secure, prevent fraud and show examples of our work. We always weigh these against your rights.

Legal obligation – To keep financial records and meet tax and accounting rules.

Consent – For marketing emails, and anywhere else we ask for it. You can withdraw consent at any time.

When we build, host or manage a website, app or system for you — for example a takeaway ordering app, booking system, member portal or AI build — it may store your customers’ personal data. You decide what that data is used for; we process it only on your instructions, to provide and support the service.

We keep that data confidential, protect it with appropriate security, only give access to people who need it, help you respond to your customers’ data requests, and delete or return it when our work ends. Where needed we will sign a data processing agreement with you.

You are responsible for having your own privacy notice and a lawful basis for collecting your customers’ data.

If we manage your social media, you may connect your accounts on platforms such as Meta (Facebook and Instagram), LinkedIn, X and TikTok to our tools using their official APIs. We use the access tokens, profile details and performance data this provides only to post content, read analytics and report to you.

Tokens are stored securely and never shared or sold. You can revoke access at any time in each platform’s settings, and we delete stored tokens within 30 days of our work ending. Our use of these APIs follows each platform’s developer terms.

Before anything is delivered or published, we blur or remove people, faces, vehicle number plates, documents and screens, and high-value items that could make a property a target.

Drone flights are carried out by CAA-registered pilots under the Air Navigation Order and CAA guidance on privacy. We plan flights to avoid capturing neighbouring gardens and people. If you spot something you would like removed from an image, tell us and we will edit it.

We never sell personal information. We share it only where needed to run our business and deliver your services, with:

Each provider only receives what it needs and is required to keep it secure.

Our websites, client portal and most client systems are hosted on our own servers in the United Kingdom. Some providers we use, such as Postmark and Stripe, may process data outside the UK. Where they do, we rely on UK adequacy regulations or the International Data Transfer Agreement (or equivalent safeguards).

Enquiries that do not go ahead – Up to 12 months.

Client records and invoices – For as long as we work together, then 6 years for legal and accounting purposes.

Client portal accounts – Until your account is closed, then deleted within 90 days unless records must be kept for accounting.

Website server logs – Up to 90 days.

Images and footage – Kept in our archive so we can re-supply them. Portfolio use stops on request.

This website only uses cookies and local storage that it needs to work. We do not use advertising cookies. Some content, such as fonts, video and 360° tours, loads from other services that may record your IP address to deliver it.

If we add analytics, we will update this policy and ask for your consent first where the law requires it.

You have the right to:

To use any of these rights, email hello@cre8ive-marketing.co.uk. We will reply within one month, normally free of charge.

If you are unhappy with how we have handled your information, please tell us so we can put it right. You can also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

We use HTTPS everywhere, keep servers and software patched, run daily off-site backups, use strong passwords and two-factor authentication on key systems, and limit access to people who need it. No system is risk-free, but if a breach affects you we will tell you and the ICO where required.

We may update this policy from time to time. The date at the top shows when it last changed. Significant changes will be made clear on this page.