Last updated: 12/01/2026

Citrues Creative Agency (“we”, “us”, “our”) is committed to protecting your privacy and handling your personal data transparently, lawfully, and securely in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Citrues Creative Agency provides creative and digital services including branding, web design, graphic design, and marketing services.

Data Controller: Citrues Creative Agency
Contact Email: citruesagency@gmail.com

2. Information We Collect

We may collect and process the following personal data:

• Name, business name, and job title

• Email address, phone number, and billing address

• Project briefs, content, and communications you provide

• Payment and invoicing details

• Website analytics data (if you visit our website)

We only collect data that is necessary to provide our services or meet legal obligations.

3. How We Use Your Information

Your data is used to:

• Provide and manage our services

• Communicate with you about projects and enquiries

• Issue invoices and process payments

• Maintain internal records

• Comply with legal and regulatory requirements

• Improve our services and website

We do not use your data for automated decision-making or profiling.

4. Lawful Basis for Processing

We process personal data under the following lawful bases:

• Performance of a contract

• Legitimate business interests

• Compliance with legal obligations

• Consent (where explicitly given)

5. Data Sharing

We do not sell or trade your personal data.

Your data may be shared only with:

• Trusted service providers (e.g. hosting providers, payment processors, accounting software)

• Legal or regulatory authorities where required by law

All third parties are required to respect data protection laws and confidentiality.

6. Data Retention

We retain personal data only for as long as necessary:

• Client and project data: up to 6 years for legal and tax purposes

• Marketing communications: until consent is withdrawn

• Enquiries: up to 12 months if no contract is formed

7. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data

• Request correction of inaccurate data

• Request erasure of your data

• Restrict or object to processing

• Request data portability

• Withdraw consent at any time

To exercise these rights, please contact us using the details above.

8. Data Security

We take appropriate technical and organisational measures to protect your data from loss, misuse, unauthorised access, or disclosure.

9. Cookies

Where applicable, our website may use cookies to improve functionality and analytics. You can control cookie settings through your browser.

10. Complaints

If you believe your data has been mishandled, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
https://www.ico.org.uk

We encourage you to contact us first so we can attempt to resolve the issue directly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The most recent version will always be available on request or on our website.