Privacy Policy

1. Information We Collect

1.1 Personal Information

We may collect personal information that you voluntarily provide to us, including:

• Name and contact information (email address, phone number)
• Company name, job title, and agency size
• Project details and requirements
• Communication preferences
• Billing and payment information

1.2 Automatically Collected Information

With your consent, we use Google Analytics to collect:

• IP address (anonymized)
• Browser type and version
• Pages visited and time spent
• Referring website and exit pages
• Device information and operating system
• Clickstream data and user interactions

2. How We Use Your Information

We use the collected information for legitimate business purposes:

• Delivering and improving our AI Customer System services
• Communicating with you about projects, audits, and inquiries
• Analyzing website performance and user behaviour
• Marketing and business development (with your explicit consent)
• Legal compliance and fraud prevention
• Customer support and service delivery

3. Google Analytics & Cookies

All data collected through Google Analytics is anonymized and aggregated. We do not use this data to identify individual users.

4. Data Sharing and Disclosure

We do not sell your personal information. We may share data with:

• Service providers (Google Analytics, hosting providers, CRM tools)
• Legal authorities when required by applicable law
• Business partners with your explicit consent
• Payment processors for transaction completion

All third-party providers are vetted for GDPR compliance and data protection standards.

5. Data Retention

We retain personal information only as long as necessary for the purposes outlined in this policy, or as required by law. Typical retention periods:

• Client project data: 7 years after project completion
• Marketing communications: until consent is withdrawn
• Analytics data: 26 months maximum
• Financial records: 7 years for tax purposes

6. Your Rights

Under GDPR and applicable privacy laws, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data (right to be forgotten)
• Withdraw consent for data processing
• Object to data processing
• Data portability
• Restrict processing in certain circumstances

To exercise any of these rights, please contact us at info@creativecomplete.com.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal information from unauthorised access, alteration, or destruction:

• SSL/TLS encryption on all data transmissions
• Regular security audits and dependency updates
• Access controls and authentication protocols
• Secure data storage with encryption at rest
• Staff training on data protection responsibilities

8. International Data Transfers

Your data may be processed in countries outside your residence. We ensure adequate protection through:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions where applicable
• Data protection impact assessments for high-risk transfers

9. Children's Privacy

Our services are not directed to individuals under 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child without verified parental consent, we will delete it promptly.

10. Changes to This Policy

We may update this privacy policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes by:

• Posting the new policy on this page with an updated date
• Sending email notifications to registered users where appropriate

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

You also have the right to lodge a complaint with your local data protection authority (in Slovenia: the Information Commissioner — ip-rs.si).