Privacy statement

This statement explains what happens to your personal data when you use this website. It is written against what the site actually does — nothing here is boilerplate about features that do not exist.

Who is responsible

Creation Corporation, established at Creation Corporation, Chamber of Commerce (KvK) 73260819, is the controller for the processing described here. You can reach me at bemres50@gmail.com.

What I collect, and why

The contact form

When you send a message, the form submits your name, email address, the project category and package you selected, an optional subject, and your message. That is the whole of it — there are no hidden fields collecting anything else.

The legal basis is the step you took towards an agreement, or my legitimate interest in answering someone who wrote to me. Without a name, an email address and a message I cannot reply, so those three are required; the rest is optional.

Your submission is stored in this website's own database so an enquiry is never lost, and it is emailed to me so I notice it. If you asked for a confirmation copy, that copy goes to the address you gave.

Spam protection

To keep automated spam out, the form records how long the page was open before you sent it, and counts recent submissions against a hashed version of your IP address. The hash cannot be reversed into an address, and the raw address is never stored.

Analytics

If — and only if — you accept analytics cookies, Google Analytics records how the site is used: pages visited, roughly where in the world you are, and what kind of device you have. This runs on your consent, which you may withdraw at any time. Decline, and it does not run. See the cookie policy for the detail.

Server logs

Like every website, the hosting provider keeps technical logs that include IP addresses. These exist to keep the server running and secure, and are not used to build a picture of you.

Who else sees it

Only parties that are necessary to run the site:

• Web3Forms — delivers the contact form to my mailbox. Your submission passes through their service.
• The hosting provider — stores this website and its database.
• Google Analytics — only with your consent, as above.
• Setmore — only if you use the booking option, in which case their own privacy terms apply to what you enter there.

Your data is never sold, and never shared for anyone else's marketing.

How long it is kept

Enquiries are kept for 24 months, so I can pick up a conversation that started earlier. Ask me to delete yours sooner and I will.

Your rights

You can ask to see the data I hold about you, have it corrected or deleted, have it sent to you in a portable form, or object to the processing. Email me and I will act on it within a month. If you are not satisfied, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.

Security

The site is served over HTTPS, form submissions are validated server-side, and IP addresses used for rate limiting are stored only as irreversible hashes.