Privacy Policy

01What we collect

We collect very little, and only what you choose to give us:

• Contact form: your name, email address, company name (optional), the service you're interested in, and your message.
• "Notify me" forms: your name and email address, so we can tell you when a SHOOPIX app launches.
• Usage analytics: we use Google Analytics 4, which sets cookies and collects anonymised usage data — pages visited, approximate location, device and browser type. We don't use any other cookies or trackers.

This site has no user accounts and takes no payments, so we never collect passwords or payment details here.

02Why we collect it

• To reply to your enquiry and discuss potential work.
• To email you when an app you asked about becomes available.
• To understand how the site is used so we can improve it.

That's it. We don't build advertising profiles and we don't send marketing you didn't ask for.

03Legal basis

We collect and use personal data in line with Hong Kong's Personal Data (Privacy) Ordinance (PDPO). Data is collected directly from you, for purposes we state at the point of collection, and is not used for unrelated purposes without your consent.

04How long we keep it

Contact enquiries are kept for as long as needed to handle your enquiry and any engagement that follows. Notify-list entries are kept until the relevant app launches and we've notified you, or until you ask us to remove you — whichever comes first. Analytics data is retained on Google's standard GA4 retention schedule.

05Third parties we use

Three service providers process data on our behalf:

• Google Analytics 4 — usage analytics (Google's privacy policy).
• formsubmit.co — relays form submissions to our inbox at contact@cre8tor.work (FormSubmit's privacy policy).
• Netlify — hosts this website and processes standard server logs (Netlify's privacy policy).

These providers may store data outside Hong Kong. We don't share your data with anyone else except where the law requires it.

06Your rights

Under the PDPO you can ask us to confirm whether we hold personal data about you, request a copy of it, and ask us to correct it. You can also ask us to delete your details from the notify list or our enquiry records at any time. Email contact@cre8tor.work and we'll respond within the timeframe the PDPO requires (normally 40 days).

07We don't sell your data

We never sell, rent, or trade your personal data. Full stop.

08Children

This site is aimed at businesses and isn't directed at children. We don't knowingly collect data from anyone under 18. If you believe a child has submitted data to us, contact us and we'll delete it.

09Changes to this policy

If we change how we handle personal data, we'll update this page and the effective date at the top. Significant changes will be flagged on the site.

10Contact

Questions or requests about your data: contact@cre8tor.work. CRE8TOR, Hong Kong SAR.