Privacy & data protection information

Privacy Notice & Pre-launch Terms

Effective date: 21 August 2026  |  Notice version: 2026-08-21.1  |  Review by: 21 August 2027

Deployment note: the verified controller/legal name and full postal address must be configured before public data collection begins. Add a company number too if the controller is incorporated.

1. Who controls your information

Controller: CRE8TR

Privacy contact: hello@cre8tr.co.uk
General contact: hello@cre8tr.co.uk

2. Information we collect

Depending on the registration route you choose, we may collect:

  • your name, email address and optional phone number;
  • your location or organisation details;
  • creator platform, niche, indicative audience range and the CRE8TR facilities, services or opportunities that interest you;
  • brand website, industry and the CRE8TR commercial opportunities or services that interest you;
  • a non-binding indicative funding-interest range;
  • the privacy-notice version, acknowledgement time and optional marketing choice; and
  • a one-way network identifier used for abuse prevention. The application does not retain your raw IP address in the registration record.
  • anonymous funnel events linked to a random, short-lived page-journey identifier, including page arrival, join clicks, registration category selection, form start and form completion; and
  • bounded campaign labels, the referring website's hostname and a coarse mobile, desktop or unknown device category where available. We do not store the full referring URL, raw IP address, email address, browser user-agent or client-hint value in the analytics tables.

3. Why we use it and our lawful basis

  • Managing your request and validating demand: to record and respond to the pre-launch action you asked us to take, understand which planned services and commercial opportunities matter to the community and assess genuine demand.
  • Site security and fraud prevention: our legitimate interest in limiting automated abuse and protecting the service.
  • Anonymous funnel measurement: our legitimate interest in understanding aggregate traffic sources, coarse device categories, registration choices and where people leave the funnel so we can improve the service.
  • Optional marketing: consent, only where you actively select the separate marketing box. You can withdraw that consent at any time without affecting prior lawful processing.

4. Retention, recipients and transfers

Registration records are scheduled for deletion 12 months after collection unless we need a shorter period, you ask us to erase them, or a documented legal requirement justifies longer retention.

When registration notifications are enabled, a copy of the submitted details is sent to the authorised CRE8TR inboxes configured for operational follow-up. Those mailbox copies are subject to the same access restrictions, 12-month maximum retention and erasure process as the registration record.

Anonymous first-party funnel journeys and their events are automatically scheduled for deletion after 90 days. An administrator may erase all analytics earlier without deleting registration records.

We do not sell registration data. Access is limited to authorised CRE8TR personnel and service providers needed to operate hosting, email or security. Provider names, hosting location and any relevant international-transfer safeguards must be recorded here before those services are enabled in production.

5. Security

The application is designed to store registrations in a protected server-side database outside public routes, use transactional writes, validate submissions, restrict repeated requests and avoid retaining raw IP addresses. No internet service can promise absolute security; operational access controls, backups, encryption and incident response remain part of the production hosting responsibility.

6. Your rights

Depending on the circumstances and lawful basis, you may request access, correction, erasure, restriction, objection or portability. You may withdraw optional marketing consent at any time by emailing hello@cre8tr.co.uk.

You can also complain to the UK Information Commissioner's Office through ico.org.uk.

7. Cookies and third-party resources

The site uses an essential, short-lived session cookie to protect forms against cross-site submission. Its first-party funnel measurement is cookieless and does not use browser storage. It currently uses no advertising or third-party analytics cookies. Fonts, icons, scripts and visual media are served locally so opening the page does not need to contact Google Fonts, cdnjs or Pexels.

8. Children

The public interest forms are intended for people aged 18 or over. If you are under 18, please do not submit personal information through these forms; ask a parent or guardian to contact us instead.

9. Pre-launch registration terms

  • Registration is free and non-binding.
  • It does not create a paid or permanent membership, booking, employment relationship, partnership or guarantee of future benefits.
  • A Bromley venue, opening date and service availability are not yet confirmed and may change.
  • Investor responses are market research only. Nothing on this website is an offer, invitation, recommendation or solicitation to invest, and no investment is accepted through the site.
  • CRE8TR-owned names and brand material remain ours. Third-party software and media remain subject to their respective licences.

10. Contact

Questions about this notice or your registration can be sent to hello@cre8tr.co.uk.