Privacy Policy
Last updated: December 21, 2025
1. Introduction
CreaseyCo ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.
We are a Hampshire-based web design business providing affordable, premium websites to small businesses. This policy applies to all services we provide.
2. Information We Collect
2.1 Information You Provide
We collect information that you voluntarily provide to us, including:
- Contact Information: Name, email address, phone number, business name
- Project Details: Information about your design requirements and preferences
- Communication Records: Messages sent through our contact forms or email
- File Uploads: Images or files you optionally attach to contact form submissions (max 3 images, 5MB each)
- Payment Information: Billing name, email, and amount (card details processed securely through Stripe - we never see or store full card numbers)
2.2 Automatically Collected Information
When you visit our website, we may automatically collect:
- Usage Data: Pages visited, time spent, navigation paths
- Device Information: Browser type, operating system, device type
- Preferences: Theme settings (light/dark mode), cookie preferences
- Analytics Data: Aggregated, anonymized usage statistics (only if you consent)
3. How We Use Your Information
We use the collected information for the following purposes:
- Service Delivery: To provide web design and hosting services you've requested
- Communication: To respond to inquiries and provide customer support
- Project Management: To manage and complete your web design projects
- Website Improvement: To analyze and improve our website functionality
- Legal Compliance: To comply with legal obligations and protect our rights
- Business Operations: To maintain records and manage our business
4. Legal Basis for Processing (UK GDPR)
We process your personal data on the following legal bases:
| Processing Activity |
Legal Basis |
| Providing services you've requested |
Performance of contract |
| Responding to inquiries |
Legitimate interest |
| Website analytics (if you consent) |
Consent |
| Legal compliance and record keeping |
Legal obligation |
| Security and fraud prevention |
Legitimate interest |
5. Data Sharing and Disclosure
We do not sell, trade, or rent your personal information. We may share information only in these circumstances:
- Payment Processing: Stripe processes all card payments securely (PCI-DSS Level 1 certified). They handle card data under their own privacy policy and strict security standards.
- Service Providers: Other third-party vendors who assist with hosting or email services (under strict confidentiality agreements)
- Legal Requirements: When required by law, court order, or legal process
- Business Protection: To protect our rights, property, or safety, or that of others
- With Your Consent: Any other disclosure will require your explicit consent
6. Data Security
We implement appropriate technical and organizational measures to protect your data:
- Encryption of data in transit (SSL/TLS)
- Secure servers and access controls
- Regular security audits and updates
- Confidentiality agreements for any sensitive data
- Limited access to personal data (need-to-know basis)
Note: No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
7. Data Retention
We retain your personal data only as long as necessary:
- Active Clients: For the duration of our business relationship
- Completed Projects: Up to 7 years for legal and tax compliance
- Inquiries: Up to 2 years if no project proceeds
- Contact Form Images: Automatically deleted after 7 days to protect your privacy and save storage space
- Analytics Data: 90 days before anonymization
- Security Logs: Retained for 90 days for security monitoring and incident response
- Failed Login Attempts: Retained for 90 days for security purposes
- Visitor Tracking Data: 90 days before anonymization or deletion
Note: We implement automated deletion processes to ensure data is not retained longer than necessary. You can request earlier deletion of your data by contacting us.
8. Your Rights Under UK GDPR
You have the following rights regarding your personal data:
- Right to Access: Request a copy of the personal data we hold about you
- Right to Rectification: Request correction of inaccurate or incomplete data
- Right to Erasure: Request deletion of your data (subject to legal obligations)
- Right to Restriction: Request limitation of processing in certain circumstances
- Right to Data Portability: Receive your data in a structured, machine-readable format
- Right to Object: Object to processing based on legitimate interests
- Right to Withdraw Consent: Withdraw consent at any time (where processing is based on consent)
To exercise any of these rights, please contact us using the details in Section 11.
9. Cookies and Tracking
We use cookies and similar technologies as described in our Cookie Policy. You can manage your cookie preferences through our cookie consent banner or your browser settings.
10. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.
11. Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:
- Email: Jake@Creasey.co
- Phone: Available to customers only
- Address: Hampshire, United Kingdom
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated "Last updated" date. Your continued use of our services after changes constitutes acceptance of the updated policy.
13. Children's Privacy
Our services are not directed to children under 16. We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal data, please contact us so we can delete it.
14. Complaints
If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):