Privacy Policy

Creative Galeria is a creative studio based in Dhaka, Bangladesh. For the purposes of this Policy, we are the “data controller” of the personal information we collect through this website and during our client engagements.

We collect only the information needed to respond to enquiries and deliver services.

• Information you provide directly. Name, email, phone number, company name, project details, budget range, and any files or messages you send us through our contact form, email, phone or WhatsApp.
• Information collected automatically. Basic technical data such as IP address, device type, browser, referring page, and pages visited on this site, collected via cookies and analytics tools.
• Client engagement data. Contract details, invoices, brand assets, brief documents, and communications shared during an active engagement.

We do not knowingly collect information from children under 13.

• To respond to enquiries and prepare proposals.
• To deliver the services set out in a signed Proposal or Service Agreement.
• To issue invoices, process payments and keep required financial records.
• To communicate project updates, feedback requests, and administrative notices.
• To improve our website, services, and portfolio (using aggregated, non-identifiable data).
• To send occasional updates or newsletters — only if you have opted in. You can unsubscribe at any time.
• To comply with legal, tax and regulatory obligations.

Where local law requires a legal basis, we rely on one or more of the following:

• Contract: to take steps at your request before entering into, or to perform, a contract with you.
• Consent: for optional communications like our newsletter, or non-essential cookies.
• Legitimate interests: to run and improve our business, secure our systems, and market our services responsibly.
• Legal obligation: to meet tax, accounting and regulatory requirements.

We use a small number of cookies for essential site functionality and for privacy-friendly analytics (e.g. Google Analytics or an equivalent) to understand which pages people find useful. You can control cookies through your browser settings; disabling non-essential cookies will not stop the site from working.

We do not sell your personal information. We share it only with:

• Service providers that help us operate — for example website hosting, email delivery, cloud storage, analytics, invoicing and payment processors. Each is bound by confidentiality and data-protection obligations.
• Advertising platforms (such as Meta and Google) when we run campaigns on your behalf and only using data you have authorized.
• Legal, tax and regulatory authorities when required by law or to protect our legal rights.
• Successors in the event of a merger, acquisition, or reorganization, subject to equivalent privacy commitments.

Some of our service providers may store or process information outside Bangladesh. Where this happens, we use providers that offer recognized safeguards (such as standard contractual clauses) and apply reasonable technical and organisational measures to protect the data.

• Enquiry data: kept for up to 24 months from the last interaction, then deleted or anonymised.
• Client engagement data: kept for the duration of the engagement and for up to 6 years after project completion, to comply with tax, accounting and legal obligations.
• Marketing subscribers: kept until you unsubscribe or ask us to delete your record.
• Analytics data: kept in aggregated form for up to 26 months.

We apply reasonable technical and organisational measures — including access controls, encrypted transport (HTTPS), reputable hosting, and least-privilege access to project data — to protect your information against loss, misuse and unauthorized access. No system, however, is 100% secure, and we cannot guarantee absolute security.

Depending on your location, you may have the following rights over your personal information:

• Access — request a copy of the information we hold about you.
• Rectification — ask us to correct inaccurate or incomplete information.
• Erasure — ask us to delete your information where there is no legitimate reason to keep it.
• Restriction / Objection — ask us to limit or stop certain processing.
• Withdraw consent — where processing is based on consent (e.g. marketing).
• Complaint — lodge a complaint with your local data-protection authority.

To exercise any of these rights, contact us using the details below. We will respond within a reasonable timeframe and, where required, within statutory deadlines.

Our website and marketing materials may link to third-party sites (for example our Blogger blog, Instagram, Behance, or client sites). We are not responsible for the privacy practices of those sites; please review their policies separately.

We may update this Policy from time to time. Material changes will be indicated by updating the “Last updated” date above. Where changes are significant, we will make a reasonable effort to notify active clients directly.

For privacy questions or requests, contact us at hello@creativegaleria.com or on WhatsApp at +880 1886-602091.