Clear about what we collect.

When you contact us or complete an intake form, we collect the information you choose to submit. Depending on the form, that can include your name, email address, phone number, business details, website, project goals, budget range, timelines, social links, and uploaded project files.

We also collect limited technical and usage information through Google Analytics, including pages viewed, session activity, approximate location, and browser or device information. Google Analytics uses IP addresses at collection time for security and approximate location, but says GA4 does not log or store those IP addresses.

We use submitted information to respond to enquiries, assess and scope possible work, prepare proposals, deliver projects, support clients, prevent abuse, and keep a record of our business conversations.

We use aggregated website analytics to understand which pages are useful, find technical problems, and improve the site. We do not sell personal information.

This website is hosted on Vercel. Google Analytics and Google Tag Manager provide website measurement. Form submissions are sent into x Create's client and project systems at app.xcreate.io so the team can respond and manage the work.

We may also use service providers for hosting, storage, communication, security, and project delivery. They receive information only where it is needed to provide those services, operate the business, comply with law, or protect the site and its users.

Google Analytics can use a first-party cookie containing a random client identifier to distinguish users and sessions. Our consent control keeps analytics storage denied until you allow it. Advertising storage, advertising user data, and advertising personalization remain denied on this site.

You can accept or decline analytics when the privacy control appears, and change that choice later through “Analytics settings” in the footer. You can also block and delete cookies through your browser settings.

We keep enquiry and project information only for as long as it is reasonably needed for the conversation, project delivery, support, business records, dispute handling, security, or legal obligations. Retention periods therefore differ by record type and relationship.

We use access controls, encrypted connections, and reputable infrastructure providers to protect information. No internet service can guarantee absolute security, so please do not submit passwords, card details, identity numbers, health information, or other sensitive secrets through these forms.

x Create works across South Africa and the United States. Our company address and some of our service providers and infrastructure are in the United States, so information may be processed outside the country where you submitted it. We use providers and safeguards appropriate to the service and applicable requirements.

Depending on the law that applies to you, you may ask to access, correct, delete, restrict, or object to our use of your personal information, or withdraw consent where processing relies on consent. We may need to verify your identity before completing a request, and some records may need to be retained where law or an active business relationship requires it.

To make a privacy request, use the contact page and write “Privacy request” in the message. We will route it to the person responsible for the website and client records.