Version 1.0 — last updated [date]
Cre8ify processes personal data of buyers and creators. This page explains which data, why, for how long, and what your rights are.
Who is responsible
[Company name], trading as Cre8ify, [address], Chamber of Commerce no. [KvK number], is responsible for processing your data. Send privacy questions to [email address].
Which data and why
| Data | Purpose | Legal basis |
|---|---|---|
| Name, email address, country, password (encrypted) | Your account, your orders, access to your downloads | Performance of the contract |
| Order details, billing address, VAT number (if given) | Invoice, VAT calculation per country, our accounts | Contract and legal obligation |
| Payment status (no card details) | Checking that your payment succeeded | Performance of the contract |
| Creators: shop name, phone number, IBAN, Chamber of Commerce and VAT numbers | Showing the shop, payouts, accounts | Contract and legal obligation |
| IP address, download data | Security, preventing misuse of download links | Legitimate interest |
| Email address for the newsletter | News and offers, only if you sign up | Consent |
Who we share data with
- The creator of what you buy sees your name and which product you bought, so they can help with questions about the product. The creator receives no payment details.
- Our payment partner [name, e.g. Mollie B.V.] processes your payment. If you pay by PayPal or card, those parties also process your data.
- Our hosting provider [name], which stores the website and files in the EU.
- Our accountant and the Dutch Tax Administration, where the law requires it.
We have a data processing agreement with every party that processes data on our behalf. We never sell your data.
How long we keep data
- Invoices and order data: 7 years, as required by Dutch tax law.
- Your account: until you delete it. After 3 years without activity we ask whether you want to keep it.
- Security logs: up to 6 months.
- Newsletter: until you unsubscribe.
Cookies
We use necessary cookies to make the cart, logging in and your language choice work. We only place analytics or marketing cookies if you consent in the cookie notice. You can change that choice at any time.
Your rights
You can ask us to access, correct, delete or transfer your data, and you can object to processing or withdraw your consent. Email [email address]; we respond within one month. Data we are legally required to keep, such as invoices, can only be deleted once the retention period has ended.
If you are not satisfied with how we handle your data, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Security
The website uses an encrypted connection (https). Creators’ files are stored privately and can only be reached through personal, temporary download links.