This policy explains what Creaholik does with personal data, and what it does not do with it. It is written to be read rather than to be defensible, so where something is a judgement call it says so.
HARON LTD (trading as Creaholik), Office 4, 219 Kensington High Street, London, United Kingdom, is the data controller. Company number [[COMPANY NUMBER]]. Questions, requests and complaints: mail@creaholik.com.
Last updated: 11 August 2026.
What we collect, and why
When you send a project enquiry, we collect your name, email address, company name, the country you selected, what you told us you need, your description of the problem, and your indicated timeline and budget. We use it to reply to you and to price the work. The lawful basis is legitimate interest — you asked us to quote for something.
If you buy a product, we hold a customer account: your name, email address, the plan you are on, and which sites are using your licence. The lawful basis is performance of a contract.
If you use one of our plugins, the site reports its own address and the plugin version when it checks its licence, so that seats can be counted and so the dashboard can show you which of your sites are using them.
Our web server keeps ordinary access logs — IP address, page requested, time, browser string — for security and diagnosis.
What we do not collect
We do not run advertising trackers, and there is no analytics pixel on this site. We do not buy personal data, sell it, or share it for marketing.
We never see your card details. Payments are handled by Stripe, who take the card details directly; we receive only the outcome, the plan, and a reference.
Our plugins do not send us your site’s content, your customers’ data, or your database. What is sent for a fix to be generated is the specific code in conflict and the facts needed to correct it.
Who else processes it
- Stripe — payments and subscriptions.
- Brevo — email delivery.
- DigitalOcean — the servers this site and our services run on.
- An AI provider — where a fix or an answer is generated. Content sent for generation is not used to train third-party models.
How long we keep it
Enquiries are kept for two years from your last contact, so we can pick up a conversation you may return to. Customer and billing records are kept for seven years, which UK tax law requires. Server logs are kept for 30 days. Licence and seat records are kept while the licence exists and for 12 months after.
Your rights
Under UK GDPR you can ask us for a copy of what we hold, ask us to correct it, ask us to delete it, object to processing, or ask for it in a portable format. Email mail@creaholik.com and we will answer within one month. We will not charge you and we will not make it difficult.
If you think we have handled your data badly you can complain to the Information Commissioner’s Office at ico.org.uk. We would rather you told us first, but it is your right either way.
Changes
If this policy changes materially we will say so on this page and update the date above. We will not change it quietly.