Clear about what we collect.

When you contact us or complete an intake form, we collect the information you choose to submit. Depending on the form, that can include your name, email address, phone number, business details, website, project goals, budget range, timelines, social links, and uploaded project files.

If you allow analytics, we also collect limited technical and usage information through Google Analytics, including pages viewed, session activity, approximate location, campaign attribution, and browser or device information. Contact-form conversion events contain categorical project information and do not send names, email addresses, or message text to analytics.

We use submitted information to respond to enquiries, assess and scope possible work, prepare proposals, deliver projects, support clients, prevent abuse, and keep a record of our business conversations.

We use aggregated website analytics to understand which pages are useful, find technical problems, and improve the site. We do not sell personal information.

This website is hosted on Vercel. Google Analytics provides consent-aware website measurement. Form submissions are sent into x Create's client and project systems at app.xcreate.io so the team can respond and manage the work.

We may also use service providers for hosting, storage, communication, security, and project delivery. They receive information only where it is needed to provide those services, operate the business, comply with law, or protect the site and its users.

Google Analytics can use a first-party cookie containing a random client identifier to distinguish users and sessions. Our consent control keeps analytics storage denied until you allow it. First-touch campaign attribution is stored for the current browser session only after that consent. Advertising storage, advertising user data, and advertising personalization remain denied on this site.

You can accept or decline analytics when the privacy control appears, and change that choice later through “Analytics settings” in the footer. You can also block and delete cookies through your browser settings.

We keep enquiry and project information only for as long as it is reasonably needed for the conversation, project delivery, support, business records, dispute handling, security, or legal obligations. Retention periods therefore differ by record type and relationship.

We use access controls, encrypted connections, and reputable infrastructure providers to protect information. No internet service can guarantee absolute security, so please do not submit passwords, card details, identity numbers, health information, or other sensitive secrets through these forms.

x Create is operated from South Africa and works with clients internationally. Some service providers and infrastructure process information in other countries. We use providers and safeguards appropriate to the service and applicable requirements.

Depending on the law that applies to you, you may ask to access, correct, delete, restrict, or object to our use of your personal information, or withdraw consent where processing relies on consent. We may need to verify your identity before completing a request, and some records may need to be retained where law or an active business relationship requires it.

To make a privacy request, use the contact page and write “Privacy request” in the message. We will route it to the person responsible for the website and client records.