PRIVACY NOTICE
Last updated: 10 August 2026
1. WHO WE ARE
Creative Evolution Ltd (“Creative Evolution”, “we”, “us” or “our”) is a private limited company registered in England and Wales under company number 16054540.
Business and correspondence address:
29 Shelley Road
Marlow
Buckinghamshire
SL7 1LZ
United Kingdom
Creative Evolution Ltd is the controller responsible for the personal information described in this privacy notice, except where we process information solely on behalf of one of our clients.
Our data protection contact is:
Email: hello@creativeevolutionltd.com
Website: https://creativeevolutionltd.com
We are not required to appoint a formal Data Protection Officer. Questions, rights requests and complaints should be sent to the email address above.
2. WHAT THIS PRIVACY NOTICE COVERS
This notice explains how we collect, use, share, store and protect personal information when you:
• visit our website;
• submit an enquiry or contact us;
• become, or consider becoming, a client, supplier, contractor or agency partner;
• receive marketing or business-development communications from us;
• purchase or apply for a service, membership or creator-support offer;
• take part in a call, project, campaign, content shoot, wedding or event;
• join a community, mailing list or programme operated by us; or
• otherwise interact with Creative Evolution.
Our website and general business services are not directed at children. Wedding and event content may, however, incidentally include children. The additional safeguards we apply in that context are explained below.
3. THE PERSONAL INFORMATION WE MAY COLLECT
Depending on how you interact with us, we may collect:
Identity and contact information
• Your name, job title, business name, postal address, email address, telephone number and social-media handles.
• Names and contact details of a partner, colleague, supplier, venue contact or other person involved in a project.
Business and professional information
• Your role, employer, industry, website, professional profile, business interests and publicly available information about your organisation.
• Information about your marketing activity, audience, services, goals, capacity, budget and business requirements.
Enquiry, project and service information
• Information included in enquiry forms, emails, calls, questionnaires, proposals, contracts, briefs and project-management records.
• Wedding dates, venue details, timings, supplier information, shot preferences and other event-planning information.
• Creator portfolios, platform links, audience information, campaign history, performance information and brand preferences.
Financial and transaction information
• Billing details, payment status, invoices, purchases, refunds and transaction records.
• Payment-card information is processed by our payment provider. We do not normally receive or store your full card details.
Communications and marketing information
• Messages, call notes, meeting records, feedback, testimonials, survey responses and your communication preferences.
• Whether you have asked to receive, or stop receiving, marketing communications.
Technical and website information
• Internet Protocol address, browser and device information, approximate location, pages viewed, referral source and website interaction data.
• Cookie choices and information collected through website analytics and security tools.
Images, video, audio and creative content
• Photographs, video, audio, screenshots, recordings, raw footage, edited content and other materials supplied to us or captured during a project, wedding, event or content shoot.
• Permission records relating to testimonials, case studies, portfolio use and social-media publication.
We do not ordinarily ask for special category information, such as health, religious, political or biometric information, through our website forms. Images or information supplied for a project may incidentally reveal sensitive characteristics. We do not use this information to infer sensitive characteristics, and we only process it where necessary and where an appropriate lawful condition applies.
4. HOW WE COLLECT PERSONAL INFORMATION
We collect information:
Directly from you
• When you complete a website form, email us, call us, book a meeting, purchase a service, sign a contract, complete an onboarding form, provide content or take part in a project.
From your organisation or another person
• For example, from a colleague, agency partner, couple, venue, supplier, brand, referral partner or project lead.
From publicly available business sources
• This may include company websites, Companies House, LinkedIn and other professional profiles, business directories, social-media pages, event or venue websites, publicly available job advertisements and press coverage.
Through technology
• Through cookies, website analytics, security tools, form submissions and links used in our communications.
From service providers and platforms
• For example, payment providers, email platforms, social-media platforms, scheduling tools and collaboration systems.
5. HOW AND WHY WE USE PERSONAL INFORMATION
We only use personal information where we have a lawful basis. The lawful bases most relevant to our work are:
• Contract: processing is necessary to enter into or perform a contract with you.
• Legal obligation: processing is necessary to comply with law, tax, accounting or regulatory requirements.
• Legitimate interests: processing is necessary for a genuine business purpose, and we have balanced that purpose against your rights and interests.
• Consent: you have freely given specific permission, and you can withdraw it at any time.
We use personal information for the following purposes.
Responding to enquiries and preparing proposals
We use your contact details, business information and enquiry details to respond, assess fit, arrange a discovery call, prepare recommendations, quotations or proposals and take steps requested before a contract.
Lawful basis: contract and/or legitimate interests.
Providing and managing services
We use information to deliver marketing, social-media, strategy, content, creator-support, wedding-content and related services; communicate with you; manage timelines and approvals; coordinate suppliers; and provide support.
Lawful basis: contract and legitimate interests.
Managing client and supplier relationships
We use information to maintain records, manage project communications, monitor service quality, administer contracts, organise renewals and resolve queries or disputes.
Lawful basis: contract and legitimate interests.
Payments, accounts and legal records
We use billing and transaction information to collect payment, issue invoices, keep accounting records, manage refunds and comply with tax, company and legal requirements.
Lawful basis: contract and legal obligation.
Operating and protecting our website and systems
We use technical information to operate the website, maintain security, prevent misuse, diagnose faults and protect our business, users and systems.
Lawful basis: legitimate interests and legal obligation where applicable.
Website analytics and improvement
Where required, we obtain consent before using non-essential analytics or similar technologies. We use aggregated insights to understand how visitors use the website and improve its content, navigation and performance.
Lawful basis: consent for non-essential cookies and legitimate interests for strictly necessary security and operational data.
Email marketing and newsletters
We may send newsletters, updates, opportunities or service information where you have consented, where a lawful soft opt-in applies, or where business-to-business marketing is otherwise permitted.
Lawful basis: consent and/or legitimate interests, subject to the Privacy and Electronic Communications Regulations.
Relevant business-to-business outreach
We may use publicly available professional contact details to contact business representatives about services we reasonably believe may be relevant to their role or organisation. We consider the relevance of the approach, use limited professional information and provide an easy way to object.
Lawful basis: legitimate interests. We do not rely on legitimate interests where electronic-marketing law requires consent and no valid exception applies.
Case studies, testimonials and portfolio use
We may use a client name, logo, testimonial, project information, photograph or content example where we have contractual permission or appropriate consent. We will not publish private project information or use personal endorsements without permission.
Lawful basis: consent, contractual permission and, for limited factual business information, legitimate interests where appropriate.
Creator support and brand opportunities
We may use creator profiles, portfolios, social links, campaign preferences and performance information to provide support, review applications, identify relevant opportunities, contact brands on a creator’s behalf where agreed and administer a creator programme or community.
Lawful basis: contract, consent and legitimate interests.
Compliance, complaints and legal claims
We may use information to respond to rights requests or complaints, establish or defend legal claims, comply with regulatory requests and protect our legal rights.
Lawful basis: legal obligation and legitimate interests.
We do not sell personal information.
6. BUSINESS-DEVELOPMENT AND OUTREACH INFORMATION
Where we identify a relevant business or professional contact through a public business source, we may record limited information such as:
• name and professional role;
• organisation and industry;
• business email address or publicly listed contact address;
• website and professional profile links;
• why we believe our services may be relevant;
• dates and outcomes of communications; and
• whether the person has objected to further contact.
We use this information only for proportionate business development, relationship management and follow-up. You can object to direct marketing at any time by replying to an email or contacting hello@creativeevolutionltd.com. Once you object, we will stop marketing to you and may retain a minimal suppression record so that we can respect your request.
7. WEDDING, EVENT AND CONTENT-CAPTURE SERVICES
When we are booked to capture a wedding, event or content shoot, we may process names, schedules, venue details, supplier information, photographs, video and audio relating to the client and attendees.
We process this information to plan and perform the agreed service, capture and edit content, deliver files, communicate about the project and respond to reasonable post-delivery queries.
The client is asked to inform relevant attendees and suppliers that content capture will take place and to tell us about any known privacy concerns or people who should not be featured. We will respect reasonable requests not to be filmed or photographed where practicable.
We do not use wedding or event content publicly merely because we captured it. Portfolio, website, advertising or social-media use is subject to the permission agreed with the client. Where identifiable children are featured prominently in portfolio or promotional content, we will seek appropriate permission from a parent or guardian where required.
Raw and working files may be deleted 90 days after final delivery unless a different period is agreed in writing. Selected portfolio content may be kept while the relevant permission remains valid and while it continues to serve the purpose for which permission was given.
8. WHEN WE PROCESS INFORMATION FOR A CLIENT
Some services require us to handle personal information controlled by a client, such as social-media messages, customer information, email lists, campaign data or content supplied by the client.
Where we process this information solely on the client’s instructions, the client is the controller and Creative Evolution acts as a processor. The client’s own privacy notice applies to the individuals concerned, and our responsibilities are governed by our contract and data-processing terms with that client.
Where Creative Evolution independently decides how to use information for its own purposes, such as maintaining its business records or publishing an approved portfolio item, Creative Evolution is the controller for that use.
9. MARKETING COMMUNICATIONS
You can ask us to stop sending marketing communications at any time by:
• using the unsubscribe link in a marketing email;
• replying to a direct outreach email; or
• emailing hello@creativeevolutionltd.com.
Opting out of marketing does not prevent us from sending necessary service, contract, payment, legal or administrative communications.
We may keep a minimal record of your email address and opt-out status so that we do not contact you again contrary to your request.
10. COOKIES AND WEBSITE ANALYTICS
Our website uses cookies and similar technologies.
Strictly necessary cookies support functions such as security, accessibility, form operation and website performance. These may be used without consent where the law permits.
Analytics, advertising or other non-essential cookies are used only where you have consented through the website cookie banner. You can change your preferences through the cookie tool where available or through your browser settings.
Third-party content, including social-media links, embedded media or external forms, may place cookies or collect information when you interact with it. Those providers operate under their own privacy and cookie notices.
11. WHO WE SHARE PERSONAL INFORMATION WITH
We share personal information only where necessary and proportionate. Recipients may include:
Website, form and hosting providers
• Squarespace, which hosts our website and may process form and website data.
Email, calendar and document providers
• Google Workspace, including Gmail, Calendar, Drive, Docs, Sheets and Forms where used.
Customer relationship and project-management providers
• Notion and other systems used to manage leads, clients, projects and internal records.
Email marketing and automation providers
• Kit and Zapier where used to manage mailing lists, communications and workflow automations.
Payment and accounting providers
• Stripe or another payment provider, QuickBooks, our bank, payment services and our accountant or bookkeeper.
Social-media, scheduling and analytics platforms
• LinkedIn, Meta platforms including Instagram, Facebook and WhatsApp, TikTok, YouTube and Metricool where relevant to the service or communication.
Contractors and specialist partners
• Trusted contractors, editors, creators, photographers, videographers, designers, consultants or agency partners who need access to perform an agreed part of a service. They are given only the information needed and are subject to appropriate confidentiality and data-protection obligations.
Professional advisers and authorities
• Accountants, insurers, lawyers, HM Revenue & Customs, Companies House, regulators, law-enforcement bodies or courts where required or reasonably necessary.
Business transfers
• A prospective purchaser, investor, successor or adviser if we sell, restructure or transfer all or part of the business, subject to appropriate safeguards.
We require service providers to protect personal information and use it only for authorised purposes. We do not allow processors to use personal information for their own unrelated purposes.
12. INTERNATIONAL TRANSFERS
Some technology and service providers operate internationally or use servers and subprocessors outside the United Kingdom.
Where personal information is transferred outside the UK, we take reasonable steps to ensure an appropriate transfer mechanism is in place. This may include:
• a UK adequacy regulation;
• the UK International Data Transfer Agreement;
• the UK Addendum to approved standard contractual clauses; or
• another safeguard permitted by UK data-protection law.
You can contact us for more information about the safeguards relevant to a particular service provider.
13. HOW LONG WE KEEP PERSONAL INFORMATION
We keep information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, tax, insurance and dispute-resolution requirements.
Our usual retention periods are:
• General enquiries and prospective-client records: up to 24 months after the last meaningful contact, unless you object sooner or a longer period is necessary for a dispute.
• Client, contract and project-administration records: for the relationship and normally six years after it ends.
• Invoices, payments and accounting records: normally six years, in line with company and tax record-keeping requirements.
• Marketing subscriber information: until you unsubscribe or the mailing list is no longer used. A minimal suppression record may be retained to respect an opt-out.
• Unsuccessful creator, partnership or programme applications: normally up to 12 months.
• Wedding and event raw or working files: normally up to 90 days after final delivery unless agreed otherwise.
• Approved portfolio materials and testimonials: while permission remains valid and the material remains relevant, subject to legal and contractual rights.
• Rights requests, complaints and legal correspondence: for as long as reasonably necessary to demonstrate compliance and manage legal risk.
We may retain information for longer where required by law, a regulator, insurance requirements, an active dispute or a legal claim. We may keep anonymised information indefinitely because it no longer identifies an individual.
14. DATA SECURITY
We use reasonable technical and organisational measures designed to protect personal information from accidental loss, misuse, alteration, unauthorised access or disclosure.
These measures include, where appropriate:
• password protection and multi-factor authentication;
• access controls based on business need;
• secure cloud services;
• confidentiality obligations for contractors and partners;
• appropriate backups and device security; and
• procedures for responding to suspected personal-data breaches.
No internet or storage system can be guaranteed completely secure. If a breach occurs, we will assess it and notify affected individuals and the Information Commissioner’s Office where the law requires.
15. YOUR DATA-PROTECTION RIGHTS
Depending on the circumstances, you may have the right to:
• be informed about how your information is used;
• request access to your personal information;
• ask us to correct inaccurate or incomplete information;
• ask us to erase information in certain circumstances;
• ask us to restrict processing in certain circumstances;
• object to processing based on legitimate interests;
• object at any time to direct marketing;
• receive information you provided in a portable format where the right applies;
• withdraw consent at any time where consent is our lawful basis; and
• complain about how we use your information.
These rights are not absolute and exemptions may apply.
To exercise a right, email hello@creativeevolutionltd.com. We may ask for information to verify your identity. There is normally no charge, and we will respond without undue delay and generally within one month.
16. CHILDREN’S INFORMATION
Our website and business-marketing services are not intended for children, and we do not knowingly invite children to submit enquiries or join marketing lists.
Children may appear incidentally in wedding or event content. We take additional care with this material and limit public promotional use as described in section 7.
17. AUTOMATED DECISION-MAKING
We do not use personal information to make solely automated decisions that produce legal or similarly significant effects.
18. THIRD-PARTY LINKS
Our website and communications may link to websites, social-media platforms, payment pages or services operated by other organisations. We are not responsible for their privacy practices. You should review the privacy notice of the relevant third party before providing information.
19. QUESTIONS, RIGHTS REQUESTS AND COMPLAINTS
Please contact us first if you have a question or concern:
Creative Evolution Ltd
29 Shelley Road
Marlow
Buckinghamshire
SL7 1LZ
United Kingdom
Email: hello@creativeevolutionltd.com
We will investigate data-protection complaints and respond as required by law.
If you remain dissatisfied, you can complain to the UK Information Commissioner’s Office:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline: 0303 123 1113
Website: https://ico.org.uk/make-a-complaint
You also have the right to seek a remedy through the courts.
20. CHANGES TO THIS PRIVACY NOTICE
We may update this notice to reflect changes to our services, technology, suppliers or legal obligations. The latest version will be published on our website and the “last updated” date will be changed.
Please tell us if your personal information changes while you have an active relationship with us so that our records remain accurate.