Privacy Policy

---

 Last updated: 4 May 2025

EnergetiCreations (“we,” “our,” “us”) respects your privacy and is committed to processing personal data fairly, transparently and in accordance with applicable laws, including the UK GDPR, the Data Protection Act 2018, the EU GDPR (where it applies) and, where relevant, the California Consumer Privacy Act (“CCPA”). This Privacy Policy explains how we collect, use, disclose and protect information about visitors to energeticreations.co.uk (the “Site”) and customers of our digital‑art marketplace (the “Services”).

Your consent: By visiting, registering on or purchasing from the Site, you agree to this Policy. If you do not agree, please refrain from using our Services.

Data Controller:
EnergetiCreations

energeticreations@outlook.com

If you are located in the EEA, we act as the data controller for information collected through the Site.

Category Examples Collected When Identifiers Name, postal address, email, phone number, social‑media handle Account creation, checkout, newsletter signup   Transactional Billing address, payment‑card details (tokenised), order history, VAT/Tax ID Checkout   Device & Usage IP address, browser type, operating system, referring URL, clickstream data, page‑response times Site visit via cookies/log files   Marketing Preferences Email opt‑ins, consents, subscription status Newsletter forms, account settings   Support Data Content of emails or chat messages, attachments, screenshots Customer‑service interactions    

We do not knowingly collect sensitive personal data (e.g., health or biometric data) nor data from children under 16 (see § 13).

• Directly from you – forms, checkout, emails, support tickets.
   
• Automatically – cookies, pixels, server logs, analytics scripts.
   
• From third parties – payment processors (transaction confirmation), social‑sign‑on providers (profile ID), advertising partners (campaign metrics).
   

Purpose Legal Basis (Art. 6 UK/EU GDPR)     Process and deliver your order, manage downloads, provide invoices Contract (Art 6(1)(b))   Respond to enquiries, provide technical support Legitimate Interest (Art 6(1)(f))   Send service‑related notices (e.g., licence updates, policy changes) Legal Obligation / Contract   Marketing emails and newsletters Consent (Art 6(1)(a)); you may withdraw at any time   Detect and prevent fraud or abuse Legitimate Interest   Maintain internal records, bookkeeping, tax compliance Legal Obligation   Analytics, site optimisation, personalization Consent (for non‑essential cookies) / Legitimate Interest   

We use first‑ and third‑party cookies, web beacons and local‑storage objects to:

• remember cart contents and login status;
• perform analytics (Google Analytics, Plausible, Matomo)
• serve personalised content or offers.
   

Cookie choices: You can refuse or disable non‑essential cookies via our cookie banner or your browser settings. Essential cookies are required for core site functionality.

We only share data when necessary to operate our business, comply with law or protect our rights. Typical disclosures include:

• Service providers – payment processors (Stripe, PayPal), cloud hosting (AWS), email delivery (Mailgun, Mailchimp), analytics vendors.
  Professional advisors – accountants, lawyers, auditors.
  Legal authorities – when required by court order, subpoena or to fulfil legal obligations.
  Business transfers – if we merge, sell or reorganise all or part of our business, your data may transfer to the successor entity under this Policy.
   

We never sell or rent your personal information for monetary gain.

Many of our service providers are located outside the UK/EEA (e.g., United States). When personal data is transferred internationally, we rely on:

1. Adequacy regulations (e.g., data flows to the EEA);
2. UK/EU Standard Contractual Clauses (SCCs) with supplementary safeguards;
3. Your explicit consent, where applicable.
    

We retain personal data only as long as necessary for the purposes described above, including:

• Order information – minimum 6 years for UK tax law.
• Marketing lists – until you unsubscribe or withdraw consent.
• Analytics logs – up to 26 months (Google default) or anonymised after that.
   

We securely erase or anonymise data once retention periods expire.

We implement appropriate technical and organisational measures such as TLS encryption, access controls, hashing and regular security audits. However, no internet transmission is 100 % secure; you share information at your own risk.

If you are in the UK/EU: You may How     Access Obtain confirmation of processing and a copy of your data Email support@energeti‑creations.com   Rectify Correct inaccurate or incomplete data Account settings / email   Erase Request deletion (“right to be forgotten”) Email request (subject to legal retention)   Restrict Ask us to pause processing Email   Object Object to processing based on Legitimate Interest Email   Portability Receive data in a machine‑readable format Email   Withdraw consent Opt‑out of marketing at any time “Unsubscribe” link / email   Complain Lodge a complaint with the UK ICO ico.org.uk    

California residents have parallel rights under the CCPA/CPRA, including the right to know, delete and opt‑out of “sale”/“sharing” of personal information (we do not sell data as defined). To exercise, email energeticreations@outlook.comwith “CCPA Request” in the subject.

We send newsletters and promotions only with your consent (opt‑in checkbox or double opt‑in). You can unsubscribe at any time via the link in the email or through your account dashboard.

Our Services are not directed to children under 16. We do not knowingly collect children’s data. If you believe a child has provided us personal information, contact us and we will delete it.

Our Site may contain links to external sites (e.g., social‑media pages). We are not responsible for their privacy practices. Review their policies before providing personal data.

We may update this Privacy Policy from time to time. Material changes will be announced on the Site and, if you have an account, by email at least 14 days before they take effect. Continued use after that date constitutes acceptance.

For questions, requests or complaints regarding privacy, reach out to:

Email:  energeticreations@outlook.com