Who is responsible for your information
KAMTOBE Creations Limited is the data controller for personal information collected through kamtobecreations.com. We are a company registered in England and Wales, company number 17288786. Registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. For any privacy question or request, email admin@kamtobecreations.com. We have not appointed a data protection officer, as we are not required to; Ifeoma Odumodu, our founder, handles privacy requests.
What we collect, why, and our legal basis
Enquiry form
When you send the enquiry form on our home page, we receive your first name, email address, the service and budget range you choose and any project details you add. FormSubmit delivers the form to the studio inbox (admin@kamtobecreations.com). We use it to reply and to discuss your project. Legal basis: steps you ask us to take before a contract. We need your first name and an email address to reply; the project details are optional. The form does not save a draft in your browser.
Meret, our website assistant
Meret, the chat on our home page, is an AI assistant, not a person. Meret uses AI to understand your message and replies only with fixed, approved wording. Meret makes no decisions about you, and nothing it produces has a legal or similarly significant effect on you. Please do not share card, bank or ID details, passwords or sensitive personal information in the chat.
The messages you type are sent to Cloudflare Workers AI, an AI service that runs on Cloudflare’s network, so Meret can understand them. Each message goes with the last few messages of the conversation and the details you have given so far (your goal, region, budget range and timing). Meret replies only with fixed, approved wording and may repeat your own words back to you in quotes; text written by AI is never shown. If the AI service is unavailable, replies are scripted in your browser instead, and the suggested questions under the chat are always answered in your browser. Meret does not ask for your name or contact details, and the chat does not send your messages to the studio: to reach a person, use the enquiry form, WhatsApp, email or the booking link. Legal basis: steps you ask us to take before a contract, and our legitimate interest in answering enquiries.
Amun, RA and Seshat, the other studio assistants introduced on our home page, do not take messages or details on this site.
We do not keep chat transcripts on our own systems. Cloudflare processes the text to generate each reply; see Cloudflare’s privacy policy.
WhatsApp messages and calls
If you message or call us on WhatsApp (+44 7352 302982), we receive your phone number, your WhatsApp profile name and what you send us. WhatsApp is provided by WhatsApp Ireland Limited and Meta under their own terms and privacy policy. We use these details to reply. Legal basis: steps you ask us to take before a contract, and our legitimate interest in answering questions.
Booking a call
The booking link opens Google Calendar’s booking page. Google collects your name, email address, any note you add and the time you choose, and sends the confirmation. We receive the booking so we can hold the call. Opening the link, or asking an assistant, does not reserve a time. Legal basis: steps you ask us to take before a contract.
Payments (only if you choose to pay)
Nothing is sent to a payment provider unless you choose to pay. Each Pay deposit button opens the provider’s own hosted checkout in a new tab. Project payment links open Stripe’s hosted checkout. Stripe collects the contact, billing and card details needed to take the payment, under Stripe’s privacy policy. For clients in Nigeria paying in naira, the payment link opens Paystack’s hosted checkout instead, and Paystack collects the details needed to take the payment, under Paystack’s own privacy policy. We never see your full card details. We receive your name, email, the amount and the payment status, so we can match the payment to your project and keep accounting records. Legal basis: performing our contract with you, and our legal obligation to keep accounting and tax records.
Site analytics (only if you accept)
With your consent, we use Google Analytics 4 (measurement ID G-RJTC4Z05RL) to understand how visitors use the site, such as which pages are viewed. Google Analytics does not load, and sets no cookies, unless you select Accept in the cookie banner. You can withdraw consent at any time from Cookie settings in the footer. Legal basis: consent.
Our social media accounts and other links
Our footer and contact section link to the company’s own accounts on Instagram, X, Facebook and LinkedIn. These are plain links: nothing loads from those networks, and nothing is shared with them, unless you select one. Each network then opens in a new tab under its own terms and privacy policy. If you message us there, we see what that network shows us, such as your profile name and what you send, and use it to reply. Legal basis: our legitimate interest in answering questions. Links to our products, QuestForgeAI and The Prompt Shelf, open those sites under their own privacy notices.
Hosting and security
Cloudflare hosts and protects this website. Like any web host, it processes technical details such as your IP address, browser type and the pages requested, to deliver the site and keep it secure. Cloudflare Web Analytics gives us aggregate page and performance counts without analytics cookies. Legal basis: our legitimate interest in running a secure website.
Voice
We do not currently offer a public voice assistant. If we add one, we will update this notice before it goes live.
Where your information comes from
Most information comes from you. We also receive booking details from Google Calendar, and payment details from Stripe or Paystack, when you use them.
Who we share it with
We use these service providers, who process information on our behalf:
- Cloudflare: website hosting and security, and Cloudflare Workers AI, which Meret uses to understand messages.
- FormSubmit: delivering the enquiry form to the studio inbox.
- Google: Calendar for booking calls, and Google Analytics only if you accept cookies.
- Our email provider: storing the emails that reach the studio inbox. Cloudflare Email Routing forwards email sent to admin@kamtobecreations.com to the studio’s Google Gmail inbox, where it is stored.
- Stripe: taking payments, only if you choose to pay.
- Paystack: taking payments in naira from clients in Nigeria, only if you choose to pay.
- WhatsApp (Meta): only if you contact us on WhatsApp.
We do not sell your personal information. We may share information if the law requires it.
International transfers
Some of these providers may process information outside the United Kingdom, including in the United States. Our policy is to use a recognised safeguard for each such transfer. Some of these providers may handle your information outside the UK. Where a country has no UK adequacy decision, we rely on the safeguards in each provider’s data processing terms: the UK Extension to the EU-US Data Privacy Framework where the provider is certified, or the UK International Data Transfer Agreement or Addendum. You can ask us which safeguard applies to a provider, and for a copy of it where one is available, by emailing admin@kamtobecreations.com.
How long we keep it
How long we keep information:
- Enquiries and WhatsApp messages that do not become projects: up to 12 months after our last contact.
- Client project and payment records: six years after the end of the financial year they relate to, in line with HMRC record-keeping guidance.
- Google Analytics data: 14 months, the retention setting in our Google Analytics account.
- Messages to Meret: held in your browser tab while the page is open and sent to the AI service only so Meret can understand them. We do not keep them.
- Your cookie choice and display preferences: in your browser until you clear them.
- The site’s health record (kc-watch), kept only if you accept: in your browser until you clear it, reject or change your choice.
Your rights
You have the right to be informed about how we use your information, and the right to ask for a copy of it, to correct it, to have it deleted, to restrict how we use it, to object to how we use it (including where we rely on legitimate interests), and to receive it in a portable format. Where we rely on consent, you can withdraw it at any time. Email admin@kamtobecreations.com and we will respond within one month. We do not make decisions about you based solely on automated processing.
Complaints
If you are unhappy with how we have handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator: ico.org.uk/make-a-complaint or 0303 123 1113.
Cookies and browser storage
- Strictly necessary: your cookie choice and display preferences (stored in your browser’s local storage). Cloudflare may set a security cookie to protect the site. These do not need consent.
- Analytics, only if you accept: Google Analytics sets cookies named _ga and _ga_<ID>, which last up to two years. If you reject, or change your choice later, Google Analytics is turned off and its cookies are cleared from this site. The site’s own health record (kc-watch, listed below) is also kept only if you accept, and is removed if you reject or change your choice later.
This site keeps these items in your browser’s local storage. They stay on your device and are not sent to us:
- kc-cookie-choice-v1: remembers whether you selected Accept or Reject in the cookie banner. Strictly necessary.
- kc-theme: remembers whether you chose the light or dark look. Strictly necessary.
- kc-currency: remembers whether you chose to see prices in US dollars, pounds or naira. Strictly necessary.
- kc-watch: a technical record of which parts of the page loaded, used by the site’s own health check. It contains no personal information. Analytics storage: set only after you select Accept, and removed if you reject or later change your choice. Without it, the site still checks itself while the page is open, without storing anything.
Portfolio materials
Images, film, designs and other portfolio materials remain subject to their rights holders’ permissions. Display here does not grant a licence to reproduce or distribute them.
Changes to this notice
We will update this page when the way we use information changes, and show the date at the top.