Privacy notice

Last updated 28 October 2026

Who we are

Creative Stores is a trading name of Creativ Group Ltd, Sidney Street, Nottingham NG10 1DL. We decide how your personal information is used, which makes us the "controller" under UK data protection law. Contact us about anything in this notice at hello@creativestoreshq.com.

What we collect

When you order: your first name, email address, delivery address and postcode, what you ordered and how much you paid.
Payment: you pay on a secure page run by Stripe. Stripe handles your card details; we never see or store them. Stripe tells us whether your payment went through.
Your marketing choice: whether you ticked the box to get product news, the wording you agreed to, and when.
Security: to stop misuse of our order form, we briefly keep a scrambled code made from your internet (IP) address. It can't be turned back into your address and is deleted within a day.

Why we use it, and our legal basis

To process and deliver your order and send you emails about it. We need this to carry out our contract with you.
To keep tax and accounting records, which the law requires.
To prevent fraud and keep our website secure. This is in our legitimate interests, and yours.
To send product news and offers, only if you ticked the box to say yes. You can withdraw this consent at any time.

We don't sell your information, and we don't use it to make automated decisions about you.

We only share what each company needs to do its job for us:

Stripe: takes your payment.
Brevo: sends our order and marketing emails.
Cloudflare: hosts our website and stores our order records.
Our delivery company: receives your name and address to deliver your order.
Google Fonts and Tailwind: our pages load fonts and styling from these services, which see your IP address when your browser fetches them.

Some of these companies may process information outside the UK. When they do, they use safeguards recognised under UK data protection law.

How long we keep it

Orders you paid for: 7 years, to meet tax rules. After that we delete your name, email and street address, and keep only anonymous sales figures and the first part of your postcode (for example, NG10).
Orders that were never paid: deleted after 30 days.
Marketing consent: until you unsubscribe, or until 2 years pass without you buying from us or opening our emails. If you unsubscribe, we keep a note of that so we never email you marketing again.

Your rights

You can ask us to:

give you a copy of the information we hold about you
correct anything that's wrong
delete your information (we may need to keep order records for tax reasons)
restrict or object to how we use it
send your information to you or another company in a common format

To stop marketing emails, use the unsubscribe link in any of them, or email us. For any other request, email hello@creativestoreshq.com. We'll reply within one month.

Cookies

Our website doesn't use cookies for advertising or analytics. Stripe's payment page may use cookies that are needed to take payments securely and prevent fraud.

Complaints

If you're unhappy with how we've handled your information, please contact us first. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Changes to this notice

If we change this notice, we'll update the date at the top of this page.