Privacy Policy
Last updated October 4, 2026.
This policy explains what personal information Pine Peak Creatives ("we", "us") collects through pinepeakcreatives.com and related email, why we collect it, who sees it, how long we keep it, and what you can do about it. We're based in the United States and work with clients in the US, UK, European Union and Canada.
The short version
- We collect what you type into our forms and what your browser sends when you visit, and nothing more.
- We use it to answer you, quote you, deliver work, and keep the site safe.
- We don't sell your information and we don't share it for advertising.
- Analytics run only where you've allowed them, or where the law doesn't require your consent and you haven't opted out.
- You can ask to see, fix or delete your information at any time at [email protected].
Who we are
Pine Peak Creatives. Contact: [email protected]. For EU and UK privacy law, we are the controller of the information described here. If you need our postal address for a legal request, email us and we'll provide it.
This policy covers this website, our forms, and the emails and calls that follow from them. Work we do for a client is covered by that client's written agreement, which may add its own terms about data.
What we collect
Information you give us
| Where | What we collect |
|---|---|
| Quote and project form | Name, email, phone (optional), business or agency name, website, region, team size, services you need, budget range, timeline, how you first heard of us, and anything you write in the message box |
| Request a call | Name, phone number, email, and the day and time you pick |
| Job application | Name, email, phone, location, years of experience, expected weekly hours, a profile link (optional) and your message |
| Job description download | Your email address |
| Email and calls | Whatever you send or say, plus your contact details |
Please don't send us sensitive information such as health details, government ID numbers, payment card numbers or passwords. We don't need them to quote you, and we don't take payments through this site.
Information collected automatically
Our hosting and security provider, Cloudflare, processes your IP address, browser type, device information, pages requested and request times in order to deliver the site and block abuse. The spam check on our forms (Cloudflare Turnstile) looks at signals from your browser to tell people from bots. When you submit a form, we also record the country your request came from and, if you arrived through a campaign link, the campaign tags in that link.
If analytics are on, we also see which pages are viewed and how visitors move through the site. See our cookie policy for the exact list of cookies and browser storage we use.
How we use it and why
| What we do | Legal basis (EU/UK) |
|---|---|
| Reply to your inquiry, book a call and prepare a quote | Steps before a contract, or legitimate interests |
| Deliver services to clients and manage the relationship | Contract |
| Review job applications and contact applicants | Steps before a contract, or legitimate interests |
| Send the job description you asked for | Legitimate interests |
| Keep the site secure, prevent spam and fraud, and fix faults | Legitimate interests |
| Understand how the site is used and improve it | Consent |
| Send occasional tips and updates by email | Consent. You can unsubscribe at any time. |
| Meet legal, tax and accounting duties, and defend legal claims | Legal obligation, or legitimate interests |
Where we rely on legitimate interests, those interests are running a business that answers inquiries promptly and keeps its website safe. You can object to this use, and we'll stop unless we have a strong reason to continue.
How we sort inquiries
When you send the quote form, our system marks the inquiry as qualified or not, based on your answers about budget and timeline. We use this to decide how quickly we reply. A person reads every inquiry, and the mark doesn't stop you from getting a response or from becoming a client. It has no legal effect on you.
Who we share it with
We don't sell your personal information, and we don't share it for cross-context behavioral advertising. We share it only with these groups, and only as far as needed:
- Service providers that run parts of our business: Cloudflare for hosting, security and spam checks; Resend for the emails that alert us to new inquiries; Zoho for our business mailboxes; our CRM and project tools; and our booking calendar provider (Cal.com or Calendly) if you book a call. They may use your information only to provide their service to us.
- Analytics providers, if you've allowed analytics. See the cookie policy.
- Professional advisers such as accountants and lawyers, under a duty of confidentiality.
- Authorities, courts or other parties when the law requires it, or to protect our rights, property or safety, or yours.
- A buyer or successor, if we ever sell or restructure the business. We'd tell you and the same protections would continue to apply.
International transfers
We're based in the US, so information from the UK, EU and Canada is processed in the US. Our providers may also process data in other countries. Where the law requires it, we rely on safeguards such as the European Commission's Standard Contractual Clauses, the UK addendum to them, or the EU-US Data Privacy Framework for providers that have joined it. Ask us if you'd like a copy of the relevant clauses.
How long we keep it
| Information | How long |
|---|---|
| Inquiries that don't become clients | Up to 24 months, then deleted |
| Client records and project files | For the life of the contract, then as long as tax, accounting and legal rules require |
| Job applications | Up to 12 months after the role is filled or closed, unless you ask us to delete sooner |
| Job description download emails | Up to 12 months |
| Marketing email list | Until you unsubscribe, plus a short record that you did, so we don't email you again |
| Security and server logs | For the period our provider keeps them, normally weeks |
We may keep information longer if we need it to resolve a dispute, enforce an agreement or meet a legal duty.
Your rights
- EU and UK: access, correction, deletion, restriction, portability, objection, and withdrawing consent at any time. Withdrawing consent doesn't affect what we did before. You can complain to your data protection authority. In the UK that is the Information Commissioner's Office.
- California (CCPA/CPRA): know what we collect and how we use it, get a copy, delete, correct, and opt out of sale or sharing (we do neither). We honor Global Privacy Control signals. We won't treat you differently for using your rights.
- Other US states with privacy laws, such as Colorado, Connecticut, Texas, Utah and Virginia: access, correction, deletion, portability and opting out of targeted advertising, sale and profiling. We don't do any of those, but you can still ask.
- Canada (PIPEDA): access and correct your information, and withdraw consent, subject to legal and contract limits. You can complain to the Office of the Privacy Commissioner of Canada.
How to use your rights
Email [email protected] and say what you want. We may ask you for a few details so we can check that it's you, and we'll only use them for that. We reply within the time the law requires, usually within 30 days (45 days for California requests, with notice if we need more time). Use of rights is free unless a request is clearly unfounded or excessive. If we refuse, we'll tell you why, and where the law gives you a right to appeal, how to do it. Another person can act for you if they send proof of your written permission.
Cookies and similar tools
We use a small amount of browser storage that the site needs to work, and analytics only where you've allowed them. If your browser sends a Global Privacy Control signal, we treat it as an opt-out of analytics. Details and a way to change your choice are on the cookie page.
Job applicants
If you apply for a role, we use what you send to assess your application, contact you, and keep a record of our hiring decisions. Only the people involved in hiring see it. We don't run background checks without telling you first. If you'd like us to delete your application, email us.
Security
We use encrypted connections, limited access to the systems that hold your information, two-factor authentication where available, and spam and abuse protection on our forms. No website or email system is perfectly secure, and you share information with us at your own risk. If a breach affects your information and the law requires us to tell you or a regulator, we will.
Links to other sites
This site links to other websites and tools, such as our booking calendar and client demos. They have their own privacy practices, and this policy doesn't cover them.
Children
Our services are for businesses. We don't knowingly collect information from children under 16. If you think a child has sent us information, email us and we'll delete it.
Limits on our responsibility
To the fullest extent the law allows, Pine Peak Creatives and the people who work for it are not liable for any loss or damage that comes from your use of this website, from information on it, or from the processing of information described in this policy. That includes indirect, incidental, special, consequential and lost-profit losses, whatever the cause and even if we were told they were possible. We are also not responsible for the acts, errors or security failures of third parties, including the providers listed above, other websites you reach through our links, your own devices and networks, or anyone who gains access to your information through no fault of ours.
Where the law doesn't allow a limit to apply, for example for fraud, for harm we cause intentionally or by gross negligence, or for rights you hold under data protection law that can't be waived, that limit doesn't apply and the rest still stands. Nothing here reduces your statutory rights described above. See also our terms of use, which contain further limits and disclaimers.
Agreeing to this policy
Next to every submit button on our forms there is a notice linking to this policy and to our terms of use. By pressing the button you confirm that you've read them and agree to them, and that you are giving us your information of your own choice. If you don't agree, please don't submit a form. You can email us instead, and this policy applies to that email too.
Changes to this policy
We'll update this page if our practices change and show the date at the top. If a change is significant, we'll also tell you by email if we have your address, or put a notice on the site. Using the site after a change means you accept the updated policy, except where the law requires us to ask for your consent again.
Contact
Questions or requests: [email protected].