Privacy policy

Last updated: September 2026

1. Who we are

CreateFirst LTD is the data controller for personal data collected through createfirst.co. If you have any questions about this policy or your data, email will@createfirst.co.

2. What we collect

When you fill in the contact form on our website, we collect:

• your name and work email address
• your brand name or website
• business information you choose to share: monthly revenue range, gross margin range, average order value, whether you have a TikTok Shop, and your message

If you email or call us, we keep the details you share in that conversation. Our website does not use analytics or advertising cookies.

3. How we use it and our lawful basis

We use your details to reply to your enquiry, assess whether we can help your brand, and prepare a proposal. Under UK GDPR, we rely on:

• Steps before entering a contract (Article 6(1)(b)), when you ask us about our services
• Legitimate interests (Article 6(1)(f)), in responding to business enquiries and running our business

We will not add you to marketing emails without your consent, and we do not make automated decisions about you.

4. Who we share it with

We don't sell your data. We use trusted service providers to run our website and business, who process data on our behalf:

• FormSubmit, which delivers contact form submissions to our inbox
• Netlify, which hosts our website
• Microsoft 365, which we use for email

5. International transfers

Some of these providers may process data outside the UK, including in the United States. Where this happens, we rely on UK adequacy regulations or appropriate safeguards such as the UK International Data Transfer Addendum.

6. How long we keep it

If your enquiry doesn't lead to working together, we delete your details within 24 months. If you become a client, we keep business records for up to 6 years to meet our tax and legal obligations.

7. Your rights

You have the right to access your data, correct it, have it deleted, restrict or object to how we use it, and receive a copy in a portable format. To use any of these rights, email will@createfirst.co. We will respond within one month.

If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We'd appreciate the chance to resolve your concern first.

8. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.