Privacy Policy – Creative Flair

Last updated October 29, 2025

This privacy notice for Creative Flair Arts Limited (“Creative Flair”, “we”, “us”, or “our”) explains how we collect, use, store, and share your personal information when you use our websites and services (the “Services”), including https://creativeflair.org and any site that links to this notice.

If you have questions or concerns, contact support@creativeflair.org.

Summary of key points

What we collect: Account details (e.g., name, email, username), profile content you provide (including artwork), usage data, and cookie/device data.
Sensitive data: We do not intentionally collect special categories of data.
Payments & passwords: We do not collect or store credit/debit card numbers or CVV codes, and we do not store plain-text passwords. Payments are handled by secure third-party processors.
Artist uploads & AI: Artist content remains owned by the artist. We do not use your content to train AI, and our processors are contractually prohibited from doing so.
Sharing: We share data only with necessary service providers (hosting, payments, security, analytics, email) under contracts that protect your data.
Your rights: UK/EEA residents have rights of access, rectification, erasure, restriction, objection, and portability. You can contact us at support@creativeflair.org.
Security: We use organisational and technical measures, but no system is 100% secure.
Regulator: You can complain to the UK ICO (details below).

What information do we collect?
How do we use your information?
Our lawful bases (UK GDPR / EU GDPR)
When do we share your information?
Third-party websites
Cookies and similar technologies
Social logins
How long do we keep information?
How do we keep information safe?
Your privacy rights
Do-Not-Track
California residents (if applicable)
Changes to this notice
How to contact us

1. What information do we collect?

Information you provide to us

Account details: name, email address, username, contact preferences, and profile fields (e.g., bio, role).
Artist content and uploads: images, videos, text, and other materials you choose to post.
Support and correspondence: messages you send to us (e.g., support tickets, feedback).
Social login data: if you sign in via a social account, we receive the permitted profile fields (see Section 7).

Payment Data:

We do not collect or store card numbers or CVVs. Payments are processed by independent, secure providers (e.g., Stripe, PayPal). We may receive limited payment metadata (e.g., transaction ID, status, last 4 digits, expiry month/year, billing country) for reconciliation, fraud prevention, and accounting.

Passwords:

We never store plain-text passwords. If applicable, passwords are stored using industry-standard hashing.

Information collected automatically

Device/usage data: IP address, device and browser type, operating system, language, referring URLs, pages viewed, features used, timestamps, error logs.
Location data: approximate location derived from IP (you can restrict location services at device level).
Cookies and similar technologies: see Section 6.

Sensitive information

We do not intentionally collect special categories of data (e.g., health, beliefs). Do not include such data in your profile or uploads.

2. How do we use your information?

We use your information to:

Provide and operate the Services (create/manage accounts, host profiles, display your artwork, enable community features).
Process transactions (via our payment processors) and manage orders or subscriptions.
Communicate with you (service updates, security notices, changes to terms/policies, support responses).
Improve and secure the Services (analytics, troubleshooting, fraud and abuse prevention, rate limiting, caching/CDN).
Personalise content and experience where permitted (e.g., remembering preferences).
Marketing with your consent or where permitted by law (you can unsubscribe anytime).
Comply with legal obligations (tax, accounting, regulatory requests, law enforcement where lawful).

AI assurance (artist content): We do not use your uploads to train, fine-tune, or improve AI models. We contractually prohibit our vendors from using them for model training.

3. Our lawful bases (UK GDPR / EU GDPR)

We process personal data under one or more of the following bases:

Contract: to provide the Services you request and operate your account.
Legitimate interests: to run, secure, and improve our Services; prevent fraud and abuse; and support customer service and analytics (balanced against your rights).
Consent: for certain cookies/analytics/marketing where required. You may withdraw consent at any time.
Legal obligation: to meet tax, accounting, and regulatory requirements; to respond to lawful requests.

4. When do we share your information?

We share personal data only where necessary, under contracts that protect your information:

Service providers / processors: hosting, CDN and security (e.g., DDoS/anti-bot), analytics/diagnostics, email and notifications, customer support tools, and payment processors (e.g., Stripe, PayPal).
Change of control: if we engage in a merger, acquisition, or asset sale, your data may be transferred under appropriate safeguards.
Legal: to comply with the law, enforce our terms, or protect our rights, users, or the public.

We do not sell your personal information. We do not license or share your artist content with third parties for their own marketing or for AI training.

5. Third-party websites

Our Services may link to third-party sites or apps we do not control. Their privacy practices apply to your use of those services. Review their policies before sharing data.

6. Cookies and similar technologies

We use cookies, local storage, and similar technologies to operate the site (e.g., session management, security, load balancing) and—where permitted—analytics or marketing.

You can control cookies in your browser settings.
Where required, we will request consent via a banner.
If you block cookies, some features may not function.

(If you maintain a Cookie Policy page, set the link in your footer and here: e.g., https://creativeflair.org/cookie-policy.)

7. Social logins

If you register or sign in using a social account, we receive the permitted profile data from that provider (e.g., name, email, profile picture). We use this information only for account creation/sign-in, subject to this notice. Your use of the social platform is governed by its own terms and privacy policy.

8. How long do we keep information?

We keep personal data only as long as necessary for the purposes described, including to meet legal, accounting, or reporting requirements. When no longer needed, we will delete or anonymise data. Backups may persist for a limited period.

9. How do we keep information safe?

We use appropriate technical and organisational measures (access controls, encryption in transit, hardened infrastructure, monitoring, backups). However, no system is 100% secure. Transmitting personal data is at your own risk.

Payments: Card details are entered directly with our payment processors and never pass through our servers in plain text.

10. Your privacy rights

Under UK/EU data protection law, you may have the right to:

Access your personal data and receive a copy
Rectify inaccurate or incomplete data
Erase your data (where applicable)
Restrict processing (where applicable)
Object to processing based on legitimate interests or direct marketing
Portability (receive your data in a usable format and transmit it to another controller)

To exercise rights, email support@creativeflair.org. We may need to verify your identity. If you are unhappy with our response, you can complain to the UK Information Commissioner’s Office (ICO) at https://ico.org.uk or by phone at 0303 123 1113.

Marketing: You can unsubscribe via the link in our emails or by contacting us.

Accounts: You can update certain details in your profile. On request we can deactivate or delete your account, subject to legal retention obligations.

11. Do-Not-Track

There is no universally accepted DNT standard. We do not currently respond to DNT signals. If standards emerge that we must follow, we will update this notice.

12. California residents (if applicable)

If you are a California resident, you may have rights under the CCPA/CPRA. We do not sell personal information. To exercise California rights, contact support@creativeflair.org. We will verify requests as required by law.

13. Changes to this notice

We may update this privacy notice from time to time. We will revise the “Last updated” date above and, where appropriate, provide additional notice. Please review periodically.

14. How to contact us

Data Controller: Creative Flair Arts Limited
Email: support@creativeflair.org
Website: https://creativeflair.org
Registered office: Pinfold Barn, Southfield Lane, Burnley, Lancashire, United Kingdomby clicking here.