Privacy notice

1. Who is responsible

The controller is KreativeNexus SIA, registration number 40203571905, with registered office at Šarlotes iela 18A–3, Rīga, LV-1001, Latvia.

Privacy requests can be sent to hello@kreativenex.com.

2. What we collect

The visibility review asks for a business name, city and country, what the business sells, an optional website or profile link, desired outcome and email address. It also asks how you would like the findings presented, and when you are looking to act on them. Two further details are asked for only when the chosen format needs them: a telephone number if you want the findings by phone, and a district or address if you want them at your business. Choosing the written review only means neither is asked for. An application to the Creator Network asks for a name, email, main platform and handle, an approximate monthly-earnings band, and an optional note about the help requested. An email to us also contains the information the sender chooses to include.

The contact form asks for your name, email address, what the enquiry is about, the package if you came from a pricing card, and your message. We keep the enquiry, the replies we send to it and a short progress record: who is handling it, when we first replied and how it ended, for example that it became paid work or was not a fit. That record has no unrestricted notes field.

If you go on to book a walkthrough, the booking carries your business name, email address and the reference of your review, so the appointment can be matched to the request it belongs to. The time you choose is recorded against that request.

When a review is accepted, the reviewer records only the work needed to produce it: who owns the review, its internal production state, up to three evidence-backed findings, one genuine strength, which of the versioned review checks were completed, bounded observations from those checks, and the time and confidence with which a person confirmed them. We also compare public opening hours, phone, address, website and category values from named public sources so inconsistencies are not missed. The completed quality check records the staff member who made each judgement. Findings use public business information and public links where relevant. We do not store screenshots, third-party account credentials, private social profiles or unrestricted internal notes in that record.

If a commercial discussion becomes paid work, we create a separate client record containing the business and legal names where supplied, city and country, a primary work email or telephone number, the client relationship state and the reference of the visibility review or enquiry that introduced the business. For each proposed or agreed service we record the service, agreed euro value, proposal, start and end dates, delivery state and purpose-specific follow-up actions. The record has no unrestricted notes field and is not a marketing contact list.

We may also record limited public business information before contacting an independent business: its trading name, market and sector, a public business email or other business contact route, where and when that route was found, and a small number of observable facts about its public website or business listing. A person checks the source and the proposed message before anything reaches the business. We do not collect private profiles, buy contact lists or use director names from company registers for outreach.

3. Why we use it

Review details are used to prepare and deliver the requested review, communicate about that request and keep an appropriate record of consent. A telephone number or an address is used to hold the walkthrough you asked for and for nothing else. The answer about timing is used to order the queue and to prepare for that conversation; it never decides whether a review is written or how carefully, and an accepted request is answered in full whichever answer is given. Creator application details are used to assess which creator service is appropriate and reply to the applicant. Contact form enquiries are used to reply to you, make sure no enquiry is left unanswered and, if you ask about paid work, prepare it. The basis is taking the steps you asked for before a possible contract, or our legitimate interest in answering business enquiries. We count enquiries by topic and package, how quickly they were answered and what they led to; those totals are not used to profile individuals. Our replies do not use open or click tracking, and we do not add you to a mailing list. Client information is used to prepare, perform and administer a proposed or signed engagement, record its agreed commercial terms and make sure a defined operational follow-up is not missed.

The structured review record helps an assigned reviewer make the promised PDF, check its accuracy and show the limited evidence behind its recommendations. Case-level time between starting and completing audit blocks is used only to calibrate the method and plan capacity; it is not used to rank staff. The record is not used for automated decisions, marketing audiences or tracking whether you opened the review.

We count clients and engagement states and total agreed values to operate the business and understand whether the free-review programme leads to paid work. Those internal totals are not used to profile individuals and are not disclosed as identifiable client results.

Limited prospect information is used to send one relevant business introduction, or to record a considered in-person or partner approach, where the active market and channel have been approved. The basis is our legitimate interest in introducing our services to businesses that may reasonably benefit from them, balanced against the limited source, content, frequency and straightforward right to object. Email messages identify KreativeNexus, say where the address and observation came from, and provide a no-contact link. We do not use open or click tracking, automated sequences, bulk sends or automated decisions. An objection blocks the contact route and the business from further outreach.

The confirmation email we send when a request arrives contains a link for checking progress. It works because the link is signed rather than because you sign in, so anyone holding that email can open it: it shows the business name, the reference, the date the review is due, and whether the walkthrough is unbooked, booked or done. It shows nothing else about you and nothing at all about our commercial dealings. The link stops working 90 days after it is sent, and a request to us is the only way to get another.

We also intend to count what the reviews find, in order to publish statistics about how small businesses across Europe appear online: for example, the share of businesses whose opening hours are wrong. Those figures are aggregated and anonymised: no business name, address, photograph or link is published, and no group is reported that is small enough to identify a single business. Nothing collected before this paragraph was published is counted, and a review is never shared with anyone outside the people preparing it.

4. Processors and transfers

Vercel Inc. hosts the site and provides the cookieless Web Analytics described in the cookie notice.

Cal.com, Inc., established in the United States, handles bookings: both the introductory call linked from the contact page and the visibility walkthrough. A walkthrough booking sends it your business name, email address, the reference of your review and the time you chose. Because Cal.com is established in the United States this is a restricted transfer, made on the basis of the European Commission’s 2021 standard contractual clauses incorporated by its data processing addendum. Declining the walkthrough, or asking for the written review only, sends nothing to Cal.com.

Sendinblue SAS, trading as Brevo, registered at 17 rue Salneuve, 75017 Paris, France under RCS Paris 498 019 298, sends the notification raised by the contact form and the replies we send to an enquiry. It is established in France, so those messages stay inside the EU and need no separate transfer basis. Message content reaches Brevo only for as long as delivery takes. The enquiry is stored as described below, and the notification is also held in the mailbox it arrives in, under the retention below.

Cloudflare, Inc., of 101 Townsend Street, San Francisco, CA 94107, United States, provides the Turnstile security check on each public form and stores visibility review requests, their structured internal review records, creator applications, the limited prospect and suppression records described above, contact form enquiries and the replies sent to them, and the client, engagement and bounded operational follow-up records. Turnstile evaluates technical signals from the browser to distinguish people from automated submissions; the one-time result is validated by our server and is not stored with the form. The database and private review-file storage are configured with Cloudflare's EU jurisdiction, so the records are restricted to the EU, but Cloudflare is established in the United States and the arrangement is therefore a restricted transfer. The basis is the European Commission's 2021 standard contractual clauses, incorporated by Cloudflare's data processing addendum.

5. Retention

A review request, its structured internal review record, review PDF, creator application or other enquiry that does not become an engagement is deleted after 12 months once its commercial state is Unqualified or Closed. A contact form enquiry, its progress record and our replies are deleted 12 months after it arrives once it is closed, and the notification in our mailbox is deleted on the same schedule. Where a review or an enquiry introduced a client, the original record is also deleted after 12 months and its attribution link is removed first; the separate client record remains.

Client and engagement operational records are kept while the relationship is active and for up to five years after it ends, unless a longer period is needed for a live legal claim or another legal obligation. Accounting source documents are kept for at least five years, and longer where the applicable accounting or tax rule requires it. Completed or dismissed follow-up actions remain with the client record for the same period so the history of a commercial decision cannot be rewritten.

A prospect that is not contacted is normally deleted after 12 months. A prospect that was contacted but did not become a customer is normally deleted after six months. If the business objects, its prospect record is deleted by the next retention run, while minimized one-way contact and business identifiers are kept for as long as needed to honour the objection and prevent the business being added again. Delivery evidence and the exact approved message follow the same prospect retention period.

6. Your rights

Depending on the circumstances, you may request access, correction, deletion, restriction, objection or portability, and may withdraw consent at any time. You may also complain to Latvia’s Data State Inspectorate.

You may object to business outreach at any time. Use the no-contact link in the message or email hello@kreativenex.com. We will stop the outreach; no explanation is required.

7. Automated decisions

Visibility review requests are not used for automated decision-making or profiling. Each request carries a progress record covering the review, the walkthrough and whether a paid engagement is being discussed. Those are bookkeeping, moved by a person as the work happens, and nothing about the request is decided by them. A Creator Network application is tagged from the earnings band as either Network or Creator Development so the right reply can be prepared. No application is accepted or rejected solely by that tag; a person reviews the channel and sends the reply.

Contact form enquiries are not used for automated decisions. A person reads each one, writes and approves the reply, and records how it ended.

Prospect tiers and visible observations help a person order research. They never authorise contact or send a message. Every outbound message is tied to a named operator’s approval of its exact wording, and every send is rechecked against the campaign decision, suppressions and weekly cap.