Privacy Policy

Last updated: 2025-11-21

This Privacy Policy explains how Lines & Frames SRL (“we”, “us”, “our”) collects, uses, and protects personal data when you visit cretu.design (“Website”). We comply with applicable data protection laws, including the EU GDPR, UK GDPR, the ePrivacy Directive, the California Consumer Privacy Act (CCPA/CPRA), and other international privacy laws.

For any privacy-related questions, you can contact us at: dmitrii@cretu.design

1. Data We Collect

1.1 Data you provide voluntarily

• Contact form: name, email address, and your message.
• Newsletter subscription: email address (only if you subscribe).

1.2 Data collected automatically

Server logs (essential)

Collected automatically by our hosting provider (Tilda):

• IP address
• Browser type and version
• Device information
• Date and time of access
• Referring URL
• Pages visited
• Basic error and performance data

Cookies and tracking technologies

Our Website uses essential cookies as well as analytics and marketing cookies. Non-essential cookies (analytics and marketing) are only activated if you provide consent through our cookie banner (Accept / Reject / Customize).

We use:

• Google Analytics 4 (analytics)
• Meta Pixel (advertising and measurement)
• Essential cookies required for basic site operation

2. Purposes and Legal Bases (GDPR Article 6)

• Responding to inquiries: name, email, message — Art. 6(1)(b)
• Site operation & security: server logs — Art. 6(1)(f)
• Analytics (GA4): usage data — Art. 6(1)(a)
• Marketing (Meta Pixel): cookies, usage data — Art. 6(1)(a)
• Newsletters: email — Art. 6(1)(a)
• Legal compliance: any relevant information — Art. 6(1)(c)

3. Cookies and Tracking Technologies

3.1 Google Analytics 4

GA4 is used to understand website traffic and improve performance. Data may include:

• IP address (anonymized)
• Device and browser information
• Pages visited and actions taken
• Referrers and interaction data

We do not enable Google Signals or cross-device tracking. Google processes data under the EU Standard Contractual Clauses (SCCs).

3.2 Meta Pixel

We use the standard Meta Pixel for advertising performance measurement. We do not use Advanced Matching or the Meta Conversion API. Meta processes data under SCCs.

3.3 Cookie preferences

You can accept, reject, or customize cookie preferences through our cookie banner. Non-essential cookies are blocked until consent is given.

4. International Data Transfers

Because we use services like Google and Meta, your data may be transferred outside your country, including to the United States. These transfers are protected by Standard Contractual Clauses (SCCs) and additional safeguards implemented by our providers.

5. How We Share Data

5.1 Sub-processors

We may share data with:

• Tilda Publishing (hosting)
• Google LLC / Google Ireland Ltd (analytics)
• Meta Platforms Ireland Ltd (advertising)
• Email delivery services (newsletter delivery)

5.2 Legal compliance

We may disclose data to comply with laws or respond to lawful requests.

6. Data Retention

• Server logs: 30 days
• Contact form submissions: up to 12 months
• Newsletter subscriber emails: until you unsubscribe
• Google Analytics data: 14 months
• Cookies: per vendor defaults or until manually cleared

7. Your Rights (EU/UK GDPR)

If you live in the EU or UK, you have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your data
• Object to processing
• Restrict processing
• Data portability
• Withdraw consent at any time
• Lodge a complaint with a supervisory authority

To exercise these rights, contact: dmitrii@cretu.design

8. Your Rights (California CCPA/CPRA)

• Right to know what personal information we collect
• Right to request deletion
• Right to opt out of “sharing” for cross-context advertising
• Right to equal service and price

We do not sell personal information. Analytics and marketing cookies may constitute “sharing.” You can opt out via our cookie banner.

9. How to Opt Out of Tracking

• Reject non-essential cookies in the cookie banner
• Use browser settings to block cookies
• Opt out of Google Analytics: Google opt-out
• Adjust Meta ad preferences: Meta ad settings

10. Security

We use reasonable security measures, including HTTPS encryption, secure hosting via Tilda, and access controls. No online system is 100% secure.

11. Children's Privacy

Our Website is not intended for children under 16. We do not knowingly collect data from children. If you believe a child has provided personal data, please contact us.

12. Changes to This Policy

We may update this Privacy Policy periodically. The “Last updated” date at the top reflects the latest version.

13. Contact Us

Lines & Frames SRL
Email: dmitrii@cretu.design