Privacy Policy

Last updated 4 August 2026

This policy explains what personal data Altcreative ("we", "us") collects when you visit altcreative.design or a private concept room on concept.altcreative.design, why we collect it, who we share it with, and what rights you have over it.

1. Who is responsible

Altcreative is an independent design studio. For any question about this policy, or to make a request about your data, write to contact@altcreative.design and we will handle it directly.

2. What we collect

Data you give us

Enquiry details. When you use the project form or email us, we receive your name, email address, website, and whatever you write in the brief.
Project material. If you become a client, we receive product pages, brand assets and any files you send us so we can produce the work.
Concept room access. If you open a private concept room, we hold your email address and a hashed access token so the room can be unlocked only by you.

Data collected automatically

Server and delivery data. Our host records the usual technical information needed to serve a page, including IP address, browser type, referring page and timestamps.
Usage events. Inside a concept room we record which storyboard beats were opened and whether checkout was started. These events are tied to your room and tell us how to follow up. Where an advertising tag is also active on the page, section 5 explains what that platform receives.

We do not knowingly collect data from children, and we do not buy personal data from third parties for use on this site.

3. Why we use it

Purpose	Basis
Replying to an enquiry and preparing a proposal	Steps taken at your request before entering a contract
Delivering paid work and supporting it afterwards	Performance of a contract
Keeping the site secure, available and free of abuse	Our legitimate interest in running the service
Understanding how the site and concept rooms are used	Our legitimate interest, or your consent where analytics cookies are used
Advertising our own services and measuring whether that advertising works	Our legitimate interest in promoting the studio, or your consent where the law requires it
Meeting tax, accounting and other legal obligations	Legal obligation

4. Who processes data on our behalf

We keep the number of third parties small and use each one for a specific job. These providers process data on our instructions, and some of them are located outside your country, which means your data may be transferred internationally under the safeguards each provider offers.

Provider	What it does	What it sees
Netlify	Website hosting and delivery	IP address, request logs
Supabase	Database, authentication and file storage for concept rooms	Email address, project material, usage events
Gumlet	Video hosting for the portfolio reel	IP address and playback data when a film is played
Google Fonts	Typefaces used across the site	IP address when fonts are requested
Polar	Payment processing and merchant of record	Name, email, billing country, payment details (we never see full card details)
Google Analytics	Aggregate traffic measurement	Pseudonymous usage data, only if enabled and consented to
Meta (Facebook, Instagram)	Advertising measurement and audience building	Pseudonymous browsing events and, where used, an irreversible hash of an email address
Other advertising platforms	The same job, if we add one (for example Google, LinkedIn or TikTok)	The same limited data described in section 5

We do not sell personal data. We do share a limited amount of data with advertising platforms so we can promote the studio and measure whether that promotion works, which is described in full in the next section.

5. Advertising and audience measurement

We advertise our own services, and we need to know whether that advertising reaches the right people. To do that we may share a limited amount of data with advertising platforms. Today that means Meta, which runs Facebook and Instagram. We may add comparable platforms such as Google, LinkedIn or TikTok on the same terms, and this section covers them too.

Three kinds of data may be shared, and no more:

Activity on this site and in concept rooms. Where an advertising or measurement tag is active, a platform may be told that a browser opened a page, viewed a storyboard or completed a purchase, along with an identifier that platform has already set in that browser.
An irreversible hash of an email address. We may send a one-way cryptographic hash rather than the address itself, so a platform can recognise an existing contact without us handing over readable contact details. This is what lets us stop advertising to people who have already hired us.
Business contact records we already hold. Where we hold business contact details for prospective clients, we may use them in the same hashed form to build audiences and to help a platform find similar businesses.

Once a platform receives this data it acts as an independent controller for its own purposes, and its own privacy policy governs what happens next. We never share the content of your project material, briefs, storyboards, concept rooms or messages with any advertising platform.

Your choices. You can object to this at any time by emailing contact@altcreative.design. We will remove you from our advertising audiences and exclude you from future uploads, and we will confirm when it is done. You can also use the ad and privacy settings each platform offers, and the tracking protections built into your browser. Where the law requires consent before these tags load, they load only after you have given it.

6. Cookies and similar technology

The site itself sets only what is needed to work. Concept rooms use browser storage to keep you signed in to your own room. Analytics and advertising tags are loaded only where they are switched on and, where the law requires it, only after you have agreed. Blocking cookies in your browser will not stop you from reading the site.

7. How long we keep it

Enquiries that do not become projects: up to 24 months, then deleted.
Client project records: for the length of the engagement and afterwards for as long as tax and accounting rules require.
Concept room access tokens: 14 days from issue, after which they stop working.
Advertising audiences: refreshed as campaigns change, and removed on request or when a platform's own retention window expires.
Server logs: as long as our host retains them, typically a short rolling window.

8. Your rights

Depending on where you live, you may have the right to ask for a copy of your data, to have it corrected or deleted, to restrict or object to how we use it, to receive it in a portable format, and to withdraw consent at any time. If you are in the UK, EU or EEA, you also have the right to complain to your local data protection authority.

To exercise any of these, email contact@altcreative.design. We will respond within 30 days. We may ask you to confirm your identity first so we do not disclose your data to someone else.

9. Security

Traffic is encrypted in transit. Concept rooms are protected by row-level access rules and one-time email sign-in, and access tokens are stored only as hashes, so a copy of our database does not reveal a working link. No system is perfect, and we will tell affected people without undue delay if a breach is likely to put them at risk.

10. Links to other sites

Where we link to a client site, a social profile or a video platform, that destination has its own privacy policy and we are not responsible for it.

11. Changes

We will update this policy when what we do changes. The date at the top always reflects the current version. If a change materially affects people we already hold data about, we will tell them directly.