Privacy Policy

1. Introduction

ECD Creative ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you visit our website ecdcreative.com (the "Site") or engage our services.

2. Information We Collect

2.1 Information You Provide

We collect information you voluntarily provide when you:

• Complete our contact form (name, email, phone number, service interest, message)
• Subscribe to our newsletter or communications
• Engage our services (project details, preferences, specifications)
• Correspond with us via email or phone

2.2 Automatically Collected Information

When you visit our Site, we automatically collect:

• Browser type and version
• Operating system
• IP address
• Pages visited and time spent on pages
• Referring website addresses
• Device information

2.3 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience, analyse site usage, and assist in our marketing efforts. You can control cookie settings through your browser preferences.

3. How We Use Your Information

We use collected information to:

• Respond to your enquiries and provide requested information
• Deliver our design and creative services
• Communicate about projects, updates, and relevant opportunities
• Improve our Site and services
• Analyse site usage and user behaviour
• Comply with legal obligations
• Protect against fraud and unauthorised access

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA) and United Kingdom, we process your personal data based on:

• Consent: You have given clear consent for us to process your personal data for specific purposes
• Contract: Processing is necessary for a contract we have with you, or to take steps at your request before entering into a contract
• Legitimate interests: Processing is necessary for our legitimate interests (e.g., improving our services) and does not override your rights
• Legal obligation: Processing is necessary to comply with the law

5. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share information with:

• Service providers: Third-party vendors who assist with website hosting, analytics, email delivery, and business operations (under strict confidentiality agreements)
• Professional advisers: Lawyers, accountants, and consultants as needed
• Legal authorities: When required by law or to protect our rights and safety
• Business transfers: In connection with any merger, sale, or acquisition of all or part of our business

6. International Data Transfers

Your information may be transferred to and processed in countries outside your country of residence, including the United States and United Kingdom. We ensure appropriate safeguards are in place to protect your data in accordance with this privacy policy and applicable data protection laws.

7. Data Retention

We retain your personal information only as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required or permitted by law. Contact form submissions are typically retained for 3 years. Project-related information is retained for the duration of the project plus 7 years for legal and accounting purposes.

8. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your personal data (subject to legal obligations)
• Restriction: Request restriction of processing in certain circumstances
• Data portability: Request transfer of your data to another organisation
• Object: Object to processing based on legitimate interests
• Withdraw consent: Withdraw consent at any time where processing is based on consent

To exercise these rights, please contact us at [email protected]. We will respond within one month.

9. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include SSL encryption, secure servers, access controls, and regular security assessments. However, no method of transmission over the internet is 100% secure.

10. Children's Privacy

Our Site and services are not directed to individuals under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

11. Third-Party Links

Our Site may contain links to third-party websites. We are not responsible for the privacy practices of these sites. We encourage you to review their privacy policies before providing any personal information.

12. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information held by businesses
• Right to opt-out of sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising CCPA rights

13. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will post the updated policy on this page with a revised "Last updated" date. Continued use of our Site after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions, concerns, or requests regarding this privacy policy or our data practices, please contact us:

15. Supervisory Authority

If you are located in the EEA or UK and believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection supervisory authority.