Privacy Policy

1. Introduction

Emma Creatives ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website emma-creatives.com and use our services.

We comply with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data protection laws.

2. Information We Collect

We collect information you provide directly to us, including:

• Personal Information: Name, email address, phone number
• Business Information: Company name, job title
• Project Details: Requirements, files, and communications
• Payment Information: Processed securely through PayPal or Stripe

We also automatically collect:

• Device Information: Browser type, IP address, operating system
• Usage Data: Pages visited, time spent, referring URLs
• Cookies: See our Cookies section below

3. How We Use Your Information

We use collected information to:

• Provide and improve our design services
• Respond to inquiries and provide customer support
• Process payments and send invoices
• Send project updates and relevant communications
• Analyze website usage to improve user experience
• Comply with legal obligations

4. Legal Basis for Processing (GDPR)

Under GDPR, we process your data based on:

• Consent: When you opt-in to marketing communications
• Contract Performance: To fulfill our services to you
• Legitimate Interests: To improve our services and website
• Legal Obligation: To comply with applicable laws

5. Cookies and Tracking

We use cookies and similar technologies for:

• Essential Cookies: Required for website functionality
• Analytics Cookies: Google Analytics to understand usage patterns
• Preference Cookies: To remember your choices

You can manage cookie preferences through our cookie consent banner or your browser settings. Disabling certain cookies may affect website functionality.

6. Third-Party Services

We use the following third-party services that may collect data:

• Google Analytics: Website analytics (privacy.google.com)
• PayPal/Stripe: Payment processing
• Firebase: Database and authentication
• Vercel: Website hosting
• Meta (Facebook): Messenger chat widget

Each service operates under their own privacy policies.

7. Data Sharing and Disclosure

We do not sell your personal information. We may share data with:

• Service providers who assist in our operations
• Legal authorities when required by law
• Business partners with your explicit consent

8. Your Rights (GDPR & CCPA)

Depending on your location, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate information
• Erasure: Request deletion of your data ("Right to be Forgotten")
• Portability: Receive your data in a portable format
• Object: Opt-out of certain processing activities
• Withdraw Consent: Revoke previously given consent

California Residents (CCPA): You have additional rights including the right to know what data is collected and the right to opt-out of data sales (we do not sell data).

9. Data Retention

We retain personal data for as long as necessary to fulfill the purposes outlined in this policy, typically up to 3 years after the last interaction. Project files may be retained longer if required for legal compliance.

10. International Transfers

Your data may be transferred to and processed in the United States. We ensure appropriate safeguards are in place for international transfers in compliance with GDPR.

11. Data Security

We implement industry-standard security measures including SSL encryption, secure payment processing, and access controls. However, no method of transmission over the Internet is 100% secure.

12. Children's Privacy

Our services are not directed to individuals under 16. We do not knowingly collect personal information from children.

13. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by posting the new policy on this page with an updated date.

14. Contact Us

For privacy-related inquiries or to exercise your rights, contact us at:

For EU residents, you also have the right to lodge a complaint with your local data protection authority.